Manage

Manage

Learn to apply best practices and optimize your operations.

• MDM policy helps protect information, mitigate security risk

  Enterprise mobility expert Bryan Barringer discusses the evolution of mobile device management and the data security benefits of MDM policy development. Continue Reading

• Fresh look at governance required to maximize information as an asset

  IGI founder Barclay T. Blair discusses lacking efforts to make information a business asset, and the initial steps required to maximize data value. Continue Reading

• For IT security and compliance jobs, experience a must

  The high demand for IT security and compliance is forcing companies to decide how previous job experience can offset the GRC skills shortage. Continue Reading

• Critical infrastructure compliance benefits from situational awareness

  For critical infrastructure, a combination of situational awareness and compliance could be the best approach to industrial control system security. Continue Reading

• Key management and distribution vital to encryption system

  In part four of this webcast, Securosis founder Rich Mogull examines the various key management and distribution options for effective cloud encryption. Continue Reading

• Contemporary digital information assets require new look at governance

  To protect and manage constantly evolving digital information assets, modern companies must reexamine data governance and classification.Continue Reading

• Records management strategies to maintain regulatory compliance

  Companies operating in the digital age generate more data than ever before. Storage costs also remain relatively cheap, so many businesses keep data "just in case" it is needed for business purposes or to settle a compliance issue. With so much data...Continue Reading

• Key enterprise mobile management software and technologies

  In the final part of this webcast series, enterprise mobility consultant Bryan Barringer lays out the most important mobility management software and techniques.Continue Reading

• BYOD best practices call for mobility governance team

  In part two of this webcast series, enterprise mobility expert Bryan Barringer discusses BYOD best practices to confront the challenges that accompany mobility.Continue Reading

• Don't let BYOD legal issues sink your BYOD initiative

  Companies best be aware of the legal issues that accompany their BYOD initiatives, mobility consultant Bryan Barringer explains in part one of this webcast series.Continue Reading

• Planning, follow-up required to ensure mobile compliance and security

  In this tip, learn why best practices such as continuous monitoring and third-party vetting are vital to long-term mobile compliance and security.Continue Reading

• Keep devices regulation ready with compliant mobile data management

  In this tip, learn how to prepare and implement a mobile data management policy that protects your organization against compliance violations.Continue Reading

• BYOD compliance: Keep mobile data regulation-ready

  As information is increasingly stored and handled outside the traditional corporate network, companies must ensure their mobile policy addresses their organization's unique compliance obligations. In this SearchCompliance handbook, learn BYOD ...Continue Reading

• Keep security controls scalable, sustainable to adapt to new threats

  The constant evolution of data threats is forcing companies to continuously monitor and assess security controls to ensure they can adapt to new risks.Continue Reading

• Fast-advancing tech makes information security threats tough to grasp

  With technology advancing at faster pace than ever before, IT pros are having a hard time recognizing information security threats.Continue Reading

• As data threats and mandates persist, governance vital to manage risk

  Security threats and compliance rules complicate businesses' information protection efforts, but smart governance processes can help manage risk.Continue Reading

• Company-wide focus on security essential to data protection

  To adequately protect company data, businesses should start by promoting an organization-wide focus on security, said Secure Ideas CEO Kevin Johnson.Continue Reading

• In digital age, user empowerment will remain vital to cybersecurity

  As the line between business and personal data continues to blur, user empowerment could prove to be the key to an effective cybersecurity strategy.Continue Reading

• Compliance standards create false sense of cybersecurity awareness

  Organizations increasingly cater security controls to compliance standards, but doing so could leave critical data and other assets vulnerable.Continue Reading

• Communication, fundamentals key to cybersecurity strategy

  Data protection expert Winn Schwartau discusses information security and why companies should remember the past when developing cybersecurity strategy.Continue Reading

• Governance and analytics reduce big data risk, boost information value

  In this Q&A, ARMA 2014 Conference presenter Barclay T. Blair discusses how information governance strategies can help with big data risk management.Continue Reading

• Risk assessment a vital step in cybersecurity program development

  To protect digital information, companies must first determine where their biggest risks lie. In this tip, learn why risk assessment analysis is an important first step when crafting a cybersecurity program.Continue Reading

• The 10 questions to ask during a mobile risk assessment

  To both embrace the benefits of BYOD and shore up the security gaps created by it, ask these 10 questions when conducting a mobile risk assessment.Continue Reading

• Five strategies to migrate the e-discovery process to the cloud

  Follow this five-step strategy to ensure your e-discovery process and data management capabilities remain intact when moving operations to the cloud.Continue Reading

• Knowing your exact data needs key to cloud service agreements

  Before developing a cloud service agreement, companies must first determine their unique data management and e-discovery-specific requirements.Continue Reading

• The business case for cloud-based governance and e-discovery services

  There are many questions to consider when moving data management to the cloud, including the cost implications of cloud-based e-discovery services.Continue Reading

• The effect of SOX on corporate governance and IT operations

  Compliance mandates established by the 2002 Sarbanes-Oxley Act, or SOX, are not new, but many organizations still grapple with the myriad effects of SOX on corporate governance and IT operations. In this SearchCompliance handbook, we explore the ...Continue Reading

• In the face of consumer-centric technology deployment, IT must adapt

  The increased use of consumer-centric devices in the workplace forces IT governance teams to re-examine new technology deployment strategies.Continue Reading

• SOX compliance reliant on data governance strategy, with IT support

  SOX compliance hinges on an effective data governance strategy, but much needed help is available from information technology tools and processes.Continue Reading

• Study reveals legal obstacles created by data protection laws

  A new study has that found data protection laws and state secrecy rules have created legal obstacles for businesses conducting operations in Asia.Continue Reading

• Electronic discovery management in the age of big data

  Electronic discovery management can be a daunting task as data volumes grow exponentially. Many organizations find themselves completely reworking their information management strategies in response to legal and regulatory requirements that dictate ...Continue Reading

• Strict data management policy plays big role in e-discovery

  Data management policy is vital as businesses try to ensure systems and processes can quickly produce legal information for e-discovery purposes.Continue Reading

• Privacy laws create obstacles for e-discovery in the cloud

  Information governance expert Jeffrey Ritter discusses how privacy laws create barriers to cloud-based e-discovery, and strategies to manage these complications.Continue Reading

• Five key strategies for cloud-based e-discovery management

  In this tip, learn five strategies to ensure cloud-based information governance processes meet organizations' unique e-discovery management needs.Continue Reading

• Technology tools, policies for a corporate compliance program

  At many organizations, departments operate in silos, with a lack of communication leading to redundant or inefficient processes. But business leaders are increasingly looking to link disparate departments from an information governance, risk ...Continue Reading

• Often overlooked strategies hinder cybersecurity program development

  Corporate compliance and risk management expert Jeff Jenkins outlines three invaluable -- but often overlooked -- strategies that companies should incorporate during cybersecurity program development.Continue Reading

• GRC platforms assist risk, regulatory compliance strategy integration

  GRC platforms have become more common as organizations try to integrate compliance management with business strategy. Learn how these tools have evolved to meet regulatory compliance needs, and how one bank has reaped the risk management benefits.Continue Reading

• The modern myths of information governance training, storage costs

  In the second part of this Q&A, Jeffrey Ritter concludes his discussion on data management myths by explaining common misconceptions about storage costs and information governance training.Continue Reading

• Q&A: Common myths of modern data management processes debunked

  In this two-part Q&A, Jeffrey Ritter identifies five common, persistent 21st century information governance myths and explains why adapting data management processes to the digital age is not as radical as some think.Continue Reading

• Thwart 'dark data' risk with data classification tools

  As 'dark data' piles up, so do its associated risks and information governance issues. In this Ask the Expert, Derek Gascon offers steps for addressing dark data's GRC complications and explains how new data classification tools can help.Continue Reading

• Four steps to ensure IT investments benefit regulatory compliance

  The digital age complicates GRC management, and many organizations are turning to new tech to assist regulatory compliance processes. Jeffrey Ritter explains how companies can ensure these new IT investments meet the business's regulatory needs.Continue Reading

• CISOs need to help the business visualize IT security threats

  Security expert Richard Stiennon explains how CISOs get it wrong when explaining IT security threats to the C-suite, and offers a tested visual approach.Continue Reading

• Tackle BYOD challenges with mobile data management tools

  In this Ask the Expert, Derek Gascon discusses the mobile data management issues organizations face and how the right tools and policies can help.Continue Reading

• Can automated segregation of duties benefit regulatory compliance?

  In this feature, Michael Rasmussen explains why automated SoD reduces compliance costs as well as the potential for fraud and lawsuits.Continue Reading

• Five tips to steer mobile information governance and security

  When data is your most valued asset, BYOD and risk go hand in hand. These five tips can help steer your mobile information governance strategy.Continue Reading

• Audit and security partnership produces big business gains

  Audit and security teams may not always see eye to eye, but expert Ed Moyle reveals how they can benefit from a partnership.Continue Reading

• Twitter chat: Top information security threats revealed

  May #GRCchat participants share top information security threats and how to prevent data breaches caused by the biggest culprits: employees.Continue Reading

• Proven information governance strategy still useful in the digital age

  As the digital age forces businesses to consider new information governance investments, Jeffrey Ritter warns against ignoring established techniques.Continue Reading

• Twitter chat: Develop a risk profile for better breach prevention

  In this #GRCchat recap, a former Federal Communications Commission CIO discusses how a quantitative risk profile can mitigate financial risk.Continue Reading

• Hybrid strategies common as organizations strive for cloud GRC

  The lack of a common framework makes cloud security and compliance a difficult proposition. In this tip, learn best practices to ensure cloud GRC.Continue Reading

• Use security strategy to offset regulatory compliance challenges

  Mako Group CISO Brian O'Hara discusses the top regulatory compliance challenges organizations face today and how a solid security strategy can help.Continue Reading

• Digital information age informs GRC management

  In this #GRCchat recap, participants discuss how governance challenges in the digital information age influence companies' GRC management strategy.Continue Reading

• Intelligence-driven security has benefits, but beware its limits

  In this video, Vantiv CSO Kim Jones discusses why a lack of hard data makes some iterations of intelligence-driven security not so intelligent.Continue Reading

• How will the Heartbleed OpenSSL vulnerability influence Web security?

  In this FAQ, learn how the Heartbleed vulnerability was discovered, the potential damage inflicted by the bug and advice to avoid security risks.Continue Reading

• As threats mount, CISOs must rethink information security programs

  ISSA founder Sandra M. Lambert discusses how mounting threats drive information security changes, and why data protection is a competitive advantage.Continue Reading

• Cloud computing risk management, governance and compliance

  Cloud computing risk management, governance and compliance processes are evolving as organizations increasingly turn to cloud services for storage, infrastructure and software needs, rather than running their own. But in moving to the cloud, ...Continue Reading

• Revamp your information lifecycle management strategy for endless data

  More data, more problems? #GRCchat participants discuss new governance challenges and how to revamp an information lifecycle management strategy.Continue Reading

• What mobile data rules best protect business and personal information?

  Attorney Jeffrey Ritter discusses mobile management processes to help companies protect both their data assets and employees' personal information.Continue Reading

• Cloud computing issues and challenges: The GRC factor

  In our latest #GRCchat, tweet jammers discussed cloud computing issues and challenges and explained how governance, risk and compliance factor in.Continue Reading

• Data asset familiarity inherent to information security

  In this RSA 2014 video interview, learn why companies that ignore the scope of their data assets dramatically increase information security risk.Continue Reading

• For CISOs, collective intelligence key to data security strategy

  ISSA director Stefano Zanero discusses how information exchanges and intelligence-driven data security strategy could pay dividends for CISOs.Continue Reading

• Cloud-based software: Who is responsible for security in the cloud?

  When it comes to cloud-based software and services, who is responsible for security and compliance in cloud computing? #GRCchat participants weigh in.Continue Reading

• How to ensure security and privacy in mobile device management policy

  In this Ask the Expert, attorney Jeffrey Ritter discusses why clear data privacy and security rules are essential to mobile device management policy.Continue Reading

• GRC regulations force cloud services providers and customers to adapt

  As governance, risk and compliance regulations continue to expand, cloud services providers and customers must be willing to adapt their data management and security processes.Continue Reading

• Five steps to determine residual risk during the assessment process

  Even the best security controls have data management gaps that create risk. Here are steps to identify and offset residual risk during an assessment.Continue Reading

• Overcoming the next generation of information security vulnerabilities

  Former White House Cyber Advisor Howard Schmidt discusses data security vulnerabilities that should concern CISOs and gives tips to overcome them.Continue Reading

• Cloud computing and compliance: The role of regulation and risk

  Cloud computing and compliance carry a host of GRC complications. Join our #GRCchat March 27 to hash it out with SearchCompliance staff and experts.Continue Reading

• Device management: Enabling hardware-rooted mobile data security

  Many mobile devices lack built-in, secure hardware roots of trust. Here are steps IT can take to enable this hardware-rooted mobile data security.Continue Reading

• Business realities force converged take on managing information risk

  Duke Alden discussed the business benefits of a converged, company-wide approach to information risk management at the recent GRC Summit in Boston.Continue Reading

• Overcoming BYOD security risks: Policy transparency, foresight key

  Gretchen Herault, a VP at Monster and speaker at the GRC Summit in Boston, discusses BYOD security risks and how effective policy helps overcome them.Continue Reading

• The four essential rules of mobile information management

  As consumer devices are increasingly used to create and transmit corporate data, businesses are forced to rethink mobile information management.Continue Reading

• Use top-down risk assessment to break compliance and security barriers

  Combining compliance and security resources is difficult, but a company-wide risk assessment can help reduce redundant processes and improve GRC.Continue Reading

• Making the move to proactive risk assessment and crisis management

  Brian Barnier, a keynote speaker at the GRC Summit in Boston this week, discusses the benefits of proactive risk assessment and crisis management.Continue Reading

• NSA data collection raises corporate privacy, info management concerns

  We've searched our sister sites and uncovered great content explaining how NSA data collection efforts are influencing corporate privacy and security.Continue Reading

• New mobile data access points complicate data protection strategies

  In a world gone mobile, new devices inherently create new data access points and muddle IT's information governance and data protection strategies.Continue Reading

• Communication necessary to stay compliant in the face of shadow IT

  Shadow IT remains a challenge for tech departments but is under-the-radar for compliance pros. Learn how to stay compliant in the face of shadow IT.Continue Reading

• Will consumer protection measures evolve after the Target data breach?

  The Target data breach has led legislators to reexamine retailers' data security processes. Will it lead to new consumer protection measures?Continue Reading

• Human- vs. machine-generated data: A cautionary tale

  In this ISSA video interview, security architect Evan Davison warns about some snags when analyzing both human- and machine-generated compliance data.Continue Reading

• Three steps to achieve defense in depth for mobile GRC applications

  Mobile apps are vital to GRC processes but are vulnerable to hackers. In this tip, learn how to achieve defense in depth for mobile GRC applications.Continue Reading

• Enterprise compliance and security: The ties that bind

  Enterprise compliance and security departments sometimes have a fractious relationship, the two essential functions struggling to establish common ground and work together to protect the organization as a whole. In this SearchCompliance handbook, we...Continue Reading

• Protecting information: Why what you don't know will hurt you

  In this video, Pauline Neville-Jones discusses why acknowledging IT system vulnerabilities is the first step toward businesswide cybersecurity.Continue Reading

• How to leverage big data tools and access compliance reports

  Why is it so difficult for GRC experts to access, maintain and produce compliance reports? Learn how access controls and big data tools can help.Continue Reading

• Building digital trust: Making the most of your information assets

  Corporate success is increasingly reliant on information asset management. Jeffrey Ritter explains why building 'digital trust' can help.Continue Reading

• Walking the tightrope: The compliance and security balancing act

  Just because data is secure does not mean it's compliant, and vice versa. In this tip, learn how to strike the right compliance and security balance.Continue Reading

• Video: What innovations make biz most vulnerable to technology risk?

  Some of the latest cutting-edge innovations create unforeseen technology risk for organizations. Should you be worried? See what security experts say.Continue Reading

• The three missing links to assure records management compliance

  In this tip, Jeffrey Ritter discusses the often overlooked digital information governance factors needed to maintain records management compliance.Continue Reading

• Craft a complete information governance structure: Tips from #GRCchat

  Our tweet jam participants share their picks for what makes an effective information governance structure. Is your framework up to snuff?Continue Reading

• GRC programs on the rise with data management complexity tides

  Organizations have turned to GRC programs to avoid regulatory issues and keep data secure. But can these programs also benefit the bottom line?Continue Reading

• Expert tips for a successful information management strategy

  In this video Q&A, eDJ Group CEO Barry Murphy explains why mobility and cloud use make data profiling vital to an information management strategy.Continue Reading

• Investment Company Act rule reduces liability for misled CCOs

  The SEC has issued its first sanctions under the Investment Company Act's Rule 38a-1(c), which is designed to protect misled CCOs from liability.Continue Reading

• Data management strategy good for business and a boost to compliance

  In this Q&A, Derek Gascon of the CGOC discusses how smart data management is good for business, improves security and helps maintain compliance.Continue Reading

• Bottom-line benefits of a risk stress test for information governance

  In this tip, Jeffrey Ritter explains how stress testing information governance controls enables better business and can even boost the bottom line.Continue Reading

• GRC professionals' salaries increase as demand for their skills rises

  As businesses expand their IT security and compliance focus, GRC professionals are seeing salary increases with their broadened responsibilities.Continue Reading

• ARMA 2013: Unique business needs force information governance to adapt

  ARMA International's Diane Carlisle discusses how a clear understanding of business processes is vital when incorporating data governance strategy.Continue Reading

• Can application performance monitoring tools improve regulatory compliance?

  Application performance monitoring has proven beneficial to several areas of IT quality assurance, but can it be trusted with ensuring compliance?Continue Reading

• ARMA 2013: Tech poses new challenges for records management strategy

  In this ARMA 2013 video Q&A, ARMA International's Diane Carlisle discusses how modern technology poses new records management strategy challenges.Continue Reading

• Adapt continuous monitoring of data to benefit compliance controls

  In this tip, learn how integrating data security continuous monitoring processes with regulatory controls provides big benefits for compliance teams.Continue Reading

• FAQ: What changes are afoot under PCI DSS 3.0 requirements?

  In this FAQ, learn how new standards under PCI DSS 3.0 are changing the approach of businesses to payment card security and regulatory compliance.Continue Reading

• Q&A: Adapting data governance strategies to the digital age

  Data governance expert Jeffrey Ritter discusses how incorporating modern information management best practices can improve overall business processes.Continue Reading

• Big changes to Adobe licensing may increase audits in short term

  Adobe's transition to a subscription-based cloud system creates many new user agreement options. But will the change also increase users' audits?Continue Reading