Security building blocks with ISO 17799 TIP - Get insights on ISO 17799's strengths and weaknesses, and receive practical advice on how to apply the standard in your own enterprise.
How do ISO 17799 and SAS 70 differ?
19 Feb 2008 EXPERT ANSWER - ISO 17799 and SAS 70 are two different policies that help organizations achieve compliance best practices. In this Q&A, Mike Rothman defines the policies and unveils the their differences.
How to apply ISO 27002 to PCI DSS compliance
28 Jan 2008 TIP - Expert Richard Mackey explains why the ISO 27002 can not only help organizations comply with PCI DSS, but also provide more structure to an overall enterprise compliance program.
Security survey finds increase in security standards adoption
SearchSecurity.com | 30 Oct 2008 ARTICLE - Ernst & Young's 2008 Global Information Security Survey finds both positive and negative trends in information security depending on how you look at the numbers.
A CISO's lessons in building a security plan
SearchSecurity.com | 16 Jan 2006 ARTICLE - The man in charge of information security at a Massachusetts insurance company explains how he built up the company's IT defenses from the top down.
Competing regulations clog road to compliance
SearchSecurity.com | 20 Oct 2005 ARTICLE - It's difficult for companies to cope with today's multitude of compliance regulations, but an expert at Information Security Decisions said security frameworks may be the answer.
Regulatory Compliance and ISO 27001
IT Governance Ltd. | 11 May 2006 BOOK CHAPTER - In this excerpt from "The Case for ISO 27001," author Alan Calder explains how infosec pros can use ISO 27001 to comply with complex and overlapping regulatory requirements.
Management Support
IT Governance Publishing | 13 Apr 2006 BOOK CHAPTER - In the excerpt from "Nine Steps to ISO 27001 Success: An Implementation Overview," Alan Calder explains the first key to ISO 27001 success and what it takes to set up for success.
MAGAZINE CONTENT (free subscription required):1 - 3 of 3
GRC: Over-Hyped or Legit?
Information Security Magazine | 01 Sep 2008 COLUMNS - Governance, risk and compliance (GRC) is being used as a catch-all phrase for most information security strategies and tagged onto various products, adding even more confusion in the market as to what it truly means or ...
Mix of Frameworks and GRC Satisfy Compliance Overlaps
Information Security Magazine | 01 Sep 2008 FEATURES - Three organizations reveal how they use a combination of frameworks such as COBIT or ISO 27001 along with GRC tools satisfy overlapping industry and federal regulatory demands.
Perspectives
Information Security Magazine | 24 Jun 2005 COLUMNS - Seal of Approval
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.
