June 25, 2008 11:48 PM
Posted by: Arian Eigen Heald
Data Breaches,
Identity theft,
PCI DSS,
SecurityThe study from Verizon had some interesting (and scary) information about the growing worldwide market for stolen data. For example, attacks from Asia, particularly in China and Vietnam, often involve application exploits leading to data compromise. - Folks over there know about coding,...
June 23, 2008 6:17 PM
Posted by: Arian Eigen Heald
cloud computing,
Cloud Security,
data security,
Security,
Start Laughing Now,
TCM (Truly Clueless Management),
Tearing My Hair OutI know I'm an IT Auditor, and we should eat acronyms for breakfast, but it seems as if the focus on "achieving compliance" has brought out the worst in us. "We're Compliant!" has become the holy grail of corporate management, and IT has jumped on the bandwagon because they can get funding for...
June 19, 2008 1:03 PM
Posted by: Arian Eigen Heald
Compliance,
Data Breaches,
Identity theft,
SecurityA Boston Globe article caught my eye. Although it's not news to me (or probably you), here is more than anecdotal evidence that many medium and small businesses are still not making...
June 17, 2008 1:00 PM
Posted by: Arian Eigen Heald
Data Breaches,
Identity theft,
Security,
Stupid Technology,
Tearing My Hair OutA few days ago I went with my partner to the local drugstore (all the big chains have these machines) to print out a jpeg to send with a card for Father's Day. The picture was on a thumb drive for easy transport, and I was along to provide technical support (I try to at least appear...
June 12, 2008 7:18 PM
Posted by: Arian Eigen Heald
Admins and Auditors,
Compliance,
IT audit,
SAS 70I noticed a recent post on the boards questioning the value of SAS 70 Reports. Given that I do about 15 a year, I thought I'd venture an answer to that question.
First, it's important to understand what a SAS 70 is NOT:
It's not a checklist;
It's not a certification;
It's not a...
June 10, 2008 12:56 AM
Posted by: Arian Eigen Heald
Identity theft,
Security,
TCM (Truly Clueless Management)Thieves continue to get more and more creative with personal information. Computerworld reports that so far 155 medical students from the University of California at...
June 3, 2008 3:01 PM
Posted by: Arian Eigen Heald
Compliance,
Eigen's Rules of Thumb,
IT audit,
Security,
Steps to an Easy Audit,
Tools & Tricks of the Trade,
Tools for Auditing and SecurityRule #1 - You can pay now, or you can pay later, but if you choose to pay later, you will pay MORE.
Rule #2 - You can outsource function, but you cannot outsource...
