Manage

Manage

Learn to apply best practices and optimize your operations.

• Mobile data security creates big governance challenges

  As devices are used for increasingly complex processes, data becomes more vulnerable to loss. To keep pace, IT and security executives are developing comprehensive mobile data security plans and implementing stronger technology solutions. Continue Reading

• Data governance in the digital age

  In the digital age, companies are generating, storing and maintaining a sometimes overwhelming amount of "big data." The trend has forced companies to alter -- and sometimes completely revamp -- information governance strategy. The constant threat ... Continue Reading

• IT security best practices: Classification essential for big data

  As threats and regulations evolve, smart information governance strategies have become essential to data security and compliance in the digital age. Continue Reading

• The data governance keys to successful GRC automation

  Compliance officers have typically equipped themselves with spreadsheets to track compliance and manage audits, but the scope and complexity of today's regulatory environment stretch traditional methods to its limits. More organizations are ... Continue Reading

• Mobility gets boost from automated compliance management systems

  In this tip, learn how automated compliance management can overcome enterprise mobility complications and save valuable company resources. Continue Reading

• Tackling top regulation compliance challenges

  In this slideshow, get guidance on overcoming some of the top regulation compliance challenges of 2015.Continue Reading

• New tactics for improving critical infrastructure cybersecurity pushed by MIT consortium

  The MIT Sloan School of Management has launched a consortium that touts interdisciplinary research and cooperation as keys to improving cybersecurity.Continue Reading

• Data currency: Five steps to get max value from digital assets

  In this tip, learn digital information management strategies to take advantage of the growing data as currency movement.Continue Reading

• GRC automation: Flexibility, planning vital to success says Aflac CISO

  Aflac CISO Tim Callahan discusses the extensive planning required for the insurance giant to successfully roll out GRC automation processes.Continue Reading

• Regulation SCI creates new compliance focus for IT records and systems

  Regulation SCI requires that covered entities follow specific IT procedures, and could preview new levels of digital system compliance for the private sector.Continue Reading

• MDM policy helps protect information, mitigate security risk

  Enterprise mobility expert Bryan Barringer discusses the evolution of mobile device management and the data security benefits of MDM policy development.Continue Reading

• Fresh look at governance required to maximize information as an asset

  IGI founder Barclay T. Blair discusses lacking efforts to make information a business asset, and the initial steps required to maximize data value.Continue Reading

• For IT security and compliance jobs, experience a must

  The high demand for IT security and compliance is forcing companies to decide how previous job experience can offset the GRC skills shortage.Continue Reading

• Critical infrastructure compliance benefits from situational awareness

  For critical infrastructure, a combination of situational awareness and compliance could be the best approach to industrial control system security.Continue Reading

• Key management and distribution vital to encryption system

  In part four of this webcast, Securosis founder Rich Mogull examines the various key management and distribution options for effective cloud encryption.Continue Reading

• Contemporary digital information assets require new look at governance

  To protect and manage constantly evolving digital information assets, modern companies must reexamine data governance and classification.Continue Reading

• Records management strategies to maintain regulatory compliance

  Companies operating in the digital age generate more data than ever before. Storage costs also remain relatively cheap, so many businesses keep data "just in case" it is needed for business purposes or to settle a compliance issue. With so much data...Continue Reading

• Key enterprise mobile management software and technologies

  In the final part of this webcast series, enterprise mobility consultant Bryan Barringer lays out the most important mobility management software and techniques.Continue Reading

• BYOD best practices call for mobility governance team

  In part two of this webcast series, enterprise mobility expert Bryan Barringer discusses BYOD best practices to confront the challenges that accompany mobility.Continue Reading

• Don't let BYOD legal issues sink your BYOD initiative

  Companies best be aware of the legal issues that accompany their BYOD initiatives, mobility consultant Bryan Barringer explains in part one of this webcast series.Continue Reading

• Planning, follow-up required to ensure mobile compliance and security

  In this tip, learn why best practices such as continuous monitoring and third-party vetting are vital to long-term mobile compliance and security.Continue Reading

• Keep devices regulation ready with compliant mobile data management

  In this tip, learn how to prepare and implement a mobile data management policy that protects your organization against compliance violations.Continue Reading

• BYOD compliance: Keep mobile data regulation-ready

  As information is increasingly stored and handled outside the traditional corporate network, companies must ensure their mobile policy addresses their organization's unique compliance obligations. In this SearchCompliance handbook, learn BYOD ...Continue Reading

• Keep security controls scalable, sustainable to adapt to new threats

  The constant evolution of data threats is forcing companies to continuously monitor and assess security controls to ensure they can adapt to new risks.Continue Reading

• Fast-advancing tech makes information security threats tough to grasp

  With technology advancing at faster pace than ever before, IT pros are having a hard time recognizing information security threats.Continue Reading

• As data threats and mandates persist, governance vital to manage risk

  Security threats and compliance rules complicate businesses' information protection efforts, but smart governance processes can help manage risk.Continue Reading

• Governance and analytics reduce big data risk, boost information value

  In this Q&A, ARMA 2014 Conference presenter Barclay T. Blair discusses how information governance strategies can help with big data risk management.Continue Reading

• The 10 questions to ask during a mobile risk assessment

  To both embrace the benefits of BYOD and shore up the security gaps created by it, ask these 10 questions when conducting a mobile risk assessment.Continue Reading

• The effect of SOX on corporate governance and IT operations

  Compliance mandates established by the 2002 Sarbanes-Oxley Act, or SOX, are not new, but many organizations still grapple with the myriad effects of SOX on corporate governance and IT operations. In this SearchCompliance handbook, we explore the ...Continue Reading

• SOX compliance reliant on data governance strategy, with IT support

  SOX compliance hinges on an effective data governance strategy, but much needed help is available from information technology tools and processes.Continue Reading

• Can automated segregation of duties benefit regulatory compliance?

  In this feature, Michael Rasmussen explains why automated SoD reduces compliance costs as well as the potential for fraud and lawsuits.Continue Reading

• Cloud computing risk management, governance and compliance

  Cloud computing risk management, governance and compliance processes are evolving as organizations increasingly turn to cloud services for storage, infrastructure and software needs, rather than running their own. But in moving to the cloud, ...Continue Reading

• Making the move to proactive risk assessment and crisis management

  Brian Barnier, a keynote speaker at the GRC Summit in Boston this week, discusses the benefits of proactive risk assessment and crisis management.Continue Reading

• Human- vs. machine-generated data: A cautionary tale

  In this ISSA video interview, security architect Evan Davison warns about some snags when analyzing both human- and machine-generated compliance data.Continue Reading

• GRC professionals' salaries increase as demand for their skills rises

  As businesses expand their IT security and compliance focus, GRC professionals are seeing salary increases with their broadened responsibilities.Continue Reading

• Preparation underway for Dodd-Frank conflict mineral disclosures

  Dodd-Frank conflict mineral provisions create new disclosure rules for public companies. In this tip, learn how to prepare for the regulations.Continue Reading

• The business case for information governance management and strategy

  Trouble getting the C-suite to invest in information governance management? Information governance expert Jeffrey Ritter offers three steps to help.Continue Reading

• Three strategies to align organizational compliance and security goals

  Compliance and security departments sometimes have an adversarial relationship, but organizations can benefit from aligning their strategic goals.Continue Reading

• Quiz: Corporate records management practices for the compliance-minded

  Corporate records management practices keep compliance officers at the forefront, so we've created the quiz to test your records management awareness.Continue Reading

• The keys to a compliance-ready records retention schedule

  Data retention and destruction have become key elements of compliance, making a retention schedule essential to a successful GRC program.Continue Reading

• The final differentiators to consider when choosing a GRC solution

  After determining its needs, your business has decided to acquire a GRC solution. Here are the final factors to consider before you make a decision.Continue Reading

• Big data era requires new approach to information governance strategy

  The big data age is increasing risk and storage costs for businesses, forcing many to reconsider their approach to information governance strategy.Continue Reading

• FAQ: What are the SEC social media rules for information disclosure?

  Under new SEC social media rules, companies can post business information on social networks. But does the policy create more questions than answers?Continue Reading

• Risk management, bottom-line benefits from records retention schedules

  Data storage is a major business concern. Records retention schedules can help alleviate risk -- and even boost the bottom line.Continue Reading

• Balance financial, risk aspects during electronic equipment disposal

  IT asset management expert Barb Rembiesa discusses the data security risk -- and potential business benefits -- of electronic equipment disposal.Continue Reading

• Three enterprise content management system security considerations

  Data governance strategy gaps can create huge security risks. Here are three questions to ask when developing an enterprise content management system.Continue Reading

• The ABCs of meeting quarterly PCI scanning requirements

  For some organizations, quarterly PCI DSS scanning requirements create confusion. Here are tips on the PCI scanning process to help stay compliant.Continue Reading

• Get a free IT or corporate compliance plan template for assessing risk

  To adhere to regulatory guidelines, companies must develop strong compliance programs. These free IT and corporate compliance plan template examples can help.Continue Reading

• Audit management: Five strategies to streamline the PCI audit process

  Tired of the same Payment Card Industry (PCI) assessment headaches every year? Here are five process strategies to streamline the PCI audit process.Continue Reading

• A decision maker's guide to organizational records management strategy

  Records management strategy is the cornerstone of meeting IT compliance guidelines and regulations. Learn what resources and characteristics you need to stay up to speed.Continue Reading

• Five tips to help guide green compliance at your organization

  As more industries push for environmentally friendly processes, green compliance is a major concern. Here are tips to help incorporate the right green IT practices at your organization.Continue Reading

• Start at the end: Keys to an audit-driven corporate compliance program

  Creating an audit kit is usually the last part of corporate compliance program development. Our expert says your organization may be better served by flipping the process.Continue Reading

• Is your SaaS system in line with SOX compliance requirements?

  A SaaS vendor can provide many benefits, but adhering to SOX compliance requirements remains a concern. Here’s help to stay compliant when using Software as a Service.Continue Reading

• Five tips to balance risk management and compliance

  Being protected from risk does not automatically mean you are compliant. Learn how you can properly balance risk management and compliance with tips from some of our top articles.Continue Reading

• How protecting against the OWASP Top 10 helps prevent compliance risk

  Mapping security processes to protect against the OWASP Top 10 could ease Web application vulnerabilities and help some companies stay compliant.Continue Reading

• Five compliance strategy tips to help diminish your risks

  Having a tough time developing the right compliance strategy? Check out our must-reads to help you find ways to develop best practices, diminish risk and reduce costs.Continue Reading

• Application security best practices help meet compliance objectives

  Aligning application security best practices and compliance objectives helps companies comply with industry regulations and standards -- and may help reduce costs in the process.Continue Reading

• Avoid duplicated efforts to cut the cost of regulatory compliance

  The cost of regulatory compliance does not have to break the bank -- getting rid of duplicated efforts in compliance strategy is a good place to start.Continue Reading

• How GRC, sustainability and CSR relate to one another

  How your organization determines the relationships among GRC, sustainability and CSR depends on the context of each item -- and is dependent on management's goals.Continue Reading

• Increased depth of compliance regulations forces companies to adapt

  The increased breadth and depth of compliance regulations has forced companies to reorganize their organization and add the position of chief compliance officer.Continue Reading

• Data governance: Five steps to cloud solution success

  Effective data governance policies must be in place before adopting a cloud solution. Here are five steps to ensure your data governance policies are ready for a cloud migration.Continue Reading

• How NIST SP 800-39 will refine enterprise-wide risk management

  New NIST SP 800-39 guidelines refine governance models to help incorporate enterprise-wide risk management and assist organizations in making better risk-based decisions.Continue Reading

• Why voluntary compliance with compliance regulations is a good thing

  Some firms are opting for voluntary compliance with unnecessary regulations. Here are the benefits to following compliance regulations that don’t legally apply to your business.Continue Reading

• Are you in compliance with the ISO 31000 risk management standard?

  The ISO 31000 risk management standard is becoming an important development tool for shaping existing and new programs. Learn if your programs are in compliance with the standard.Continue Reading

• Using metrics to enhance information risk management

  Risk management metrics can dramatically improve your information risk management and compliance initiatives. But regulatory compliance officers have to take the initiative.Continue Reading

• Learning to manage risk-based internal controls must be a priority

  With internal controls based on some level of risk, organizations should make management of internal risk-based controls a critical business activity.Continue Reading

• Log management and compliance: What's the real story?

  As more companies deploy security information and event management tools, as well as log management solutions, it's time to take a look at the regulations that apply to logging.Continue Reading

• PCI DSS requirement: Maintaining a vulnerability management program

  The third PCI DSS focus area requires antivirus software, secure coding practices, patch management and change control processes be in place.Continue Reading

• Inside Ryder Truck Rental's PCI compliance project

  In 2007, Julio Gonzalez, director of IT, GRC and network operations at Ryder Truck Rental, kicked off a PCI project aimed at addressing any credit card exposures.Continue Reading

• How to create an effective data protection strategy for IT compliance

  To build an effective data protection strategy for IT compliance, enterprises should view sensitive data as an intellectual asset.Continue Reading

• Due diligence on a disaster recovery plan enables business continuity

  Creating an effective disaster recovery plan is essential to business continuity, regardless of ambiguity around IT controls for data protection.Continue Reading

• Contingent controls complement business continuity, DR

  An important aspect of managing risk is to build in contingent controls alongside your disaster recovery and business continuity implementation.Continue Reading

• Applying the ISO 27005 risk management standard

  The ISO 27005 risk management methodology standard has weaknesses when it comes to risk measurement. "Fuzzy math" theory can help fill the gaps.Continue Reading

• Best practices and requirements for GLBA compliance

  GLBA requirements to protect personal information have become more relevant than ever. In this tip, Paul Rohmeyer examines best practices for GLBA compliance.Continue Reading

• Lack of incident response plan leaves hole in compliance strategy

  Without an incident response plan, businesses can tend to be reactive rather than proactive when data breaches occur. Here are some steps to follow.Continue Reading

• Unified Compliance Framework unties overlapping compliance standards

  Compliance professionals and vendors are turning to the Unified Compliance Framework as a common language for overlapping compliance standards.Continue Reading

• A business continuity management standard would offer consistency

  BCM standards by themselves may not be necessary, but compliance with a standard is -- and a globally recognized BCM standard for consistent measurement would be a good thing.Continue Reading

• Business Model for Information Security: Security right the first time

  The Business Model for Information Security, a new framework introduced by ISACA, employs 'systems thinking' models that promise to get security right the first time.Continue Reading

• FAQs about compliance audits in IT

  New and more complicated regulations have made compliance audits a fact of life for modern organizations. Learn about IT's role in the audit process in this FAQ.Continue Reading

• FTC compliance mandates new rules for social media marketing

  Revised rules on social media marketing mean that FTC compliance will require effective new corporate policies for online marketers and employees.Continue Reading

• Does using ISO 27000 to comply with PCI DSS make for better security?

  PCI DSS is under fire for not providing enough security in the process of securing credit card data. Using ISO 27000 to complement PCI may provide better compliance and security.Continue Reading

• Are mandatory business continuity management standards good business?

  Compliance with business continuity management standards demonstrates that a company is committed to protecting its business -- but the U.S. falls short of making BCM mandatory.Continue Reading

• PCI DSS compliance requires new vendor management strategy

  Requirement 12.8 requires a better vendor management strategy for PCI DSS compliance.Continue Reading

• What's the Massachusetts data protection law and what does it require?

  Massachusetts' data protection law, 201 CMR 17.00, focuses on prevention rather than notification. Here are the technologies and policies you'll need for compliance.Continue Reading

• Comparing how-to guides for business continuity standards

  What needs to be done to comply with business continuity standards? First, perform a risk assessment, then define your business continuity strategy.Continue Reading

• Chapter excerpt: Decision-making processes and IT governance

  Find out how sound decision-making processes form the foundation of IT governance policies by allocating decision rights and accountability.Continue Reading

• Business model risk is a key part of your risk management strategy

  Management consultants Amit Sen and John Vaughan discuss business model risk, a way to apply risk management policies to new or changed business processes.Continue Reading

• How to mitigate operational, compliance risk of outsourcing services

  Companies must have an approach to evaluating partner risk, the level of risk of both the service and the provider, and the adequacy of the security practices of the provider.Continue Reading

• Applying risk assessment to your disaster recovery plan

  Before implementing a disaster recovery plan, perform a comprehensive risk assessment of all the potential vulnerabilities your business faces.Continue Reading

• Why it may not be ideal for your lawyer to be your compliance officer

  While lawyers bring a certain expertise to the table, business leaders need a broader range of technical, security and communications skills in their compliance officers.Continue Reading

• PCI DSS 3.1 requirement best practices

  Requirement 3.1 of the PCI Data Security Standard requires minimum cardholder data storage. In this tip, learn how to determine how much data your organization should store.Continue Reading

• PCI DSS pre-assessment: Managing the process to limit liability

  Conducting a PCI DSS pre-assessment can save quite a few headaches later on in the compliance process. However, it can create a lot of new ones if it isn't managed with liability in mind. Contributor Rick Lawhorn offers a brief primer on the ...Continue Reading

• Best practices for managing compliance with security standards

  Financial organizations must learn to tie their compliance efforts to their information security practices. Here are four best practices for managing compliance with industry security standards.Continue Reading