Risk Management

risk management in IT

what is the role of risk manager in IT industry.mean what responsibilites he have?

How do you create a Business Case for Security?

In a nutshell, which would be a good way of putting together a business case for a solution that mitigates security risks, when the "income" generated by the solution is not easy to define? Software/Hardware used: Not applicable.

Risk Assessment for Application Systems

Can please share the risk assessment methods/ questionnaires/approach for application systems.We understand that the assessment may cover technology, people, and process. We need to come-out with the assessment report indicating the risk level & rating of the application systems.

How to do a security assessment in a hospital environment?

Possible questions to ask to employee working in a hospital enironment when you are conducting security assessment?

What to do when files taken by hacker?

what to do if files were taken by a hacker

Checklist for managing risk of Data Center power shutdown

We are planning to have a shutdown of power at data center to upgrade electrical power feeder. In doing so, we need to know the checklist to ensure risks associated during the initiative are minimized and controlled. We have hundreds of servers located at the data center that store appls and...

USB port control policy

My company plan to roll out a policy on USB port control. I need guide to draft the policy.

What is the best way to implement a risk assessment in an IT department that will align COBIT controls with risks?

A compliance officer in Europe could use some advice from fellow IT professionals and executives. His IT budget is being scrutinized, as is the case in every organization in 2009; he needs targets to get things done more efficiently but without taking on more risk. His department is evaluating...

Video Conference risk & security policy

1. What is the risk with allowing the usage of video conference or web conference within an organization? 2. given this context, any sample of security policy?

Security!!

What security measures are considered when designing a web-application (besides the SSL encryption)? And what technologies are used to protect the application from brute-force, phishing, and pharming attacks."

Risk Management

I'm looking for information about the most pressing issues facing risk managers.

Selecting an area within security to start

Hi, I'm studying for an MSc in Information Security from Royal Holloway University of London, I have a B.Engg. degree in computers and a PG Diploma in Networking and Communication as well as the CCSA and CCNA. I'm also studying for the CISSP. Now, with all these qualifications, could you please...

Procedures for a new area.

We are a company where we have expirience on network remote administration and now we have open a new area, The area of security. Now I need to start to make new procedures like when a new customer come to us and ask if we can handle the security for his network... I need to know if some one can...

Compliance to Acts

How can softwares for url/content filtering or mail scanning be made compliant to HIPAA , Sarbanes-oxley act etc. ... What all features are required to be implemented to make them compliant ????

Moving into the InfoSec role

I work at a company that currently does not have a position dedicated to information security. I come from a background in networking with a good portion of my focus on firewalls and other security related technologies. I am interested in positioning myself into the role of InfoSec Admin at my...

wireless vlan

hi all, is it possible to have one link from a switch to an access point and split the network into two networks a wireless network from the AP and a wired port for a user connected thru RJ45 and still keep it secured.

Blue Socket Gateway and Certificates

We are currently attempting to implement a Blue Socket Gateway in order to authenticate our wireless clients. I have been instructed by Blue Socket that the certificate used by them will not work through a NAT translation and that I should put this device on the outside of my ASA firewall. ...

security problem

Hello, I have small workgroup having 10 computers in my office. I do some personal work in office like using yahoo messenger, checking personal e-mails and some online banking site. But how does one of my senior knows it? I do everything lonely and securely so that nobody in the office knows it....

Application Access Control Mangement

Is there an enterprise wide software management program that can manage access to our web-based applications, vendor specific programs located thru out the entire company, and our MS applications, including MS Outlook? In other words, we would like to control all of the various software programs...

Dos attack

I have been receiving security alert messages from our firewall nearly everyday. e.g TCP Packet - Source:144.120.8.89,39341 Destination:192.168.1.1,25 - [DOS] TCP Packet - Source:210.7.0.36,3473 Destination:210.7.12.23,135 - [DOS] Thu, 2006-10-19 16:30:03 - UDP Packet -...