Data Privacy

MUST READ Privacy: Security pros should practice what they preach ARTICLE - Calling privacy "a neglected area" in information security, expert Sarah Gordon says security professionals need to set an example by taking advantage of technical and policy solutions that can help mitigate risks to ...

EXPERT TECHNICAL ADVICE: 1 - 3 of 27

DATA PRIVACY EXPERTS
			David Mortman ASK A QUESTION

	Learning the language of global compliance 14 Oct 2008 TIP - When a company expands its operations to other countries, what compliance issues confront a security manager?

	How would you define the responsibilities of a data custodian in a bank? 11 Jul 2008 EXPERT ANSWER - Data security is incredibly important for financial institutions, and it's the data custodian's job to make sure that data is safe. Security management expert Mike Rothman explains more.

	Data loss prevention (DLP) tools: The new way to prevent identity theft? 27 Feb 2008 TIP - To protect confidential information, some security pros are turning to data loss prevention technology. Peter Giannoulis explains the strengths and weaknesses of DLP products.

	VIEW ALL EXPERT TECHNICAL ADVICE ON DATA PRIVACY

NEWS: 1 - 3 of 47

	IRS faulted for lax security controls, dangerous data risks SearchSecurity.com | 20 Oct 2008 ARTICLE - An inspector general audit criticizes the IRS for deploying a customer data and account management system with known security flaws. The IRS tried to have the report suppressed.

	PCI is about eliminating data, not securing it, former QSA says SearchSecurity.com | 15 Sep 2008 ARTICLE - Former QSA turned Forrester analyst John Kindervag calls PCI a "communicable disease." Anything introduced to the network is in PCI scope if credit card systems aren't segmented.

	Google amends log retention rules, privacy advocates respond SearchSecurity.com | 09 Sep 2008 ARTICLE - Privacy advocates want more information about Google's methods of making its server logs anonymous.

	VIEW ALL NEWS ON DATA PRIVACY

REFERENCE & LEARNING: 1 - 3 of 8

	Information security book excerpts and reviews SearchSecurity.com | 22 May 2008 INFORMATION SECURITY BOOKSHELF - Visit the Information Security Bookshelf for book reviews and free chapter downloads.

	A Business Guide to Information Security: Threats and Compliance Kogan Page | 16 Jan 2006 BOOK CHAPTER - This excerpt from "A Business Guide to Information Security," identifies six future risks to information security and how they will affect individuals and organizations.

	Information Security Decisions Fall 2005 19 Oct 2005 FEATURED TOPIC - Learn how to develop security metrics, centralize your security practices and more in these presentations from Information Security Decisions Fall 2005.

	VIEW ALL REFERENCE & LEARNING ON DATA PRIVACY

MAGAZINE CONTENT (free subscription required): 1 - 3 of 5

	Product Review: Workshare Protect Premium 6.0 Information Security Magazine | 01 Sep 2008 HOT PICK & PRODUCT REVIEWS - Workshare Protect Premium 6.0 seeks to eliminate the malicious or accidental leakage of sensitive corporate data.

	Architect Security and Compliance Programs to Be Complementary Information Security Magazine | 01 Jun 2008 COLUMNS - Perspectives: Shake On It

	Going Global Information Security Magazine | 01 Feb 2007 FEATURES - Organizations sending data abroad must be prepared to comply with a slew of privacy and security regulations.

	VIEW ALL MAGAZINE CONTENT ON DATA PRIVACY

WEBCASTS: 1 - 3 of 3

The Importance of Data Integrity and Why You Should Care - Vendor Webcast VIEW WEBCAST PREMIERED:   15 NOV 2006, 09:00 EST (14:00, GMT) SUMMARY:   In this webcast, join Randolph A. Kahn, author of the book "Privacy Nation" for a one-hour discussion on the importance of your company's data integrity and why you should care. Mr. Kahn also discusses how to effectively secure your company's valuable information and appropriately classify your data.

	Overcoming the Myths and Confusion of Payment Card Industry (PCI) Compliance - Vendor Webcast VIEW WEBCAST PREMIERED:   28 JUN 2006, 14:00 EDT (18:00, GMT) SUMMARY:   Attend this webcast and explore Payment Card Industry (PCI) standards and the measures your company should take to effectively secure customer credit card information.

The Fast Track to Compliance: Better Management for Network Security - Vendor Webcast VIEW WEBCAST PREMIERED:   22 SEP 2004, 12:00 EDT (16:00, GMT) SUMMARY:   Join META Group analyst and noted compliance expert Paul Proctor (keynote speaker, Oct. 2004 Information Security Decisions) as he takes a fresh look at how complex network security systems should be managed in the age of HIPAA, Sarbanes-Oxley, GLBA, and other wide-reaching regulations.

	VIEW ALL WEBCASTS ON DATA PRIVACY

WHITE PAPERS

	Web Application Security: Automated Scanning versus Manual Penetration Testing Published by: Logicalis | 11 Dec 2008 WHITE PAPER - This paper explains the two primary methods for discovering Web application vulnerabilities: using manual penetration testing and code review or using automated scanning tools and static analysis.

	The Dirty Dozen: Preventing Common Application-Level Hack Attacks Published by: Logicalis | 11 Dec 2008 WHITE PAPER - This paper describes 12 of the most common hacker attacks and provides basic rules that you can follow to help create more hack-resistant Web applications.

	Achieving PCI Compliance without Appliance Sprawl: Securing Web Applications and Databases with Crossbeam Solutions Published by: Crossbeam Systems | 19 Nov 2008 WHITE PAPER - Read this paper to learn about the many benefits of Crossbeam Solutions, including how it helps customers consolidate anywhere from 20 to 50 separate appliances into one highly available, scalable system.

	VIEW ALL WHITE PAPERS IN THIS TOPIC

DEFINITIONS: 1 - 2 of 2

	P3P 04 Jul 2003 WORD - P3P (Platform for Privacy Preferences) is a protocol that specifies a way to determine if a Web site's security policies meet a user's privacy requirements. P3P includes a machine-readable vocabulary and syntax that can be ...

	cypherpunk 15 Sep 2001 WORD - Cypherpunk, a term that appeared in Eric Hughes' "A Cypherpunk's Manifesto" in 1993, combines the ideas of cyberpunk, the spirit of individualism in cyberspace, with the use of strong encryption (ciphertext is encrypted text) ...

	VIEW ALL DEFINITIONS ON DATA PRIVACY

	SEE ALSO - Topics Related to Data Privacy:  PCI Data Security Standard, FFIEC, Gramm-Leach-Bliley Act (GLBA), HIPAA, Sarbanes-Oxley Act, Data Security Breach Laws and Notification, Security Audit, FISMA