Regulatory Reality:

April, 2012

1

April 29, 2012  7:43 PM

Internal Audit: Whose side are they on anyway?



Posted by: David Schneier
assessment, assessments, Audit, compliance, control, control owners, controls, findings, GLBA, internal audit, NCUA, regulations, regulatory, Regulatory Compliance, risk, risk assessments, risks

My first encounter with an auditor was back in the mid-90's while working as an application project manager for a Fortune 100 company.  The group responsible for change management was going through an audit of their process and one of the changes that was selected for review happened to belong to...

April 14, 2012  2:23 PM

Anyone remember the Heartland breach?



Posted by: David Schneier
Add new tag, ATM, Audit, compliance, GLBA, PCI, regulation, regulations, regulatory, Regulatory Compliance, Security

Two weeks ago news broke about a huge, massive leak of credit card information from a processor called Global Payments and I braced for a firestorm of media coverage that was sure to follow.  Two weeks hence and it's pretty much a non-event.  A few days ago the State of Utah reported a breach of...


1