Change management: Information security professionals have been known to cringe when they hear these words. But the change management process doesn't have to be as complicated as it might seem. 

There is some confusion in the marketplace about intrusion-security systems. Intrusion Detection Systems and Intrusion Prevention Systems have similar names and tend to get lumped together into a single security category: Intrusion Detection and Prevention. But the capabilities and underlying design of these systems couldn't be more different. 

The purpose of this whitepaper is to describe best practices for securing IBM System i/i-Series/AS400 systems and detail the AS400 monitoring service provided by SecureWorks. 

This collection of slides from the Information Security Decisions Conference presents an overview of some common web 2.0 security threats and how to deal with them. The presentation covers the evolution of threats, how web 2.0 is changing them, what vulnerabilities to focus on, and how to reduce risk. Download the slides to learn more. 

This collection of slides from Diana Kelley and Ed Moyle presents an overview of PCI DSS requirements 7 through 12. Check it to learn about the second half of PCI DSS, learn what each one means, and how it will be effected by version 1.2 of PCI DSS. 

NetBotz protection brings a crucial layer of physical security to any IT environment—big or small—by constantly monitoring and protecting your IT assets from environmental threats and human error. 

This white paper outlines a sound, process-based approach to protecting the critical privileged accounts found in most applications, databases, and infrastructure devices throughout the enterprise. This approach integrates features like automated password resets and management workflows, secure storage of credentials, and a sealed operating system. 

This collection of articles from Realtime Publishers presents a clear and concise overview of security information management (SIM). The articles present the business case for SIM, operational and organizational issues, and hints and tips for ensuring a successful SIM implementation. 

The new Role-Based Access Control utilities enforce entitlements down to the data and device level. The ability to effectively provision and audit these fine-grained controls across diverse technology domains is still a challenge. Read this transcript for practical guidance on how to implement a unified policy management infrastructure for RBAC. 

The new Role-Based Access Control utilities enforce entitlements down to the data and device level. The ability to effectively provision and audit these fine-grained controls across diverse technology domains is still a challenge. In this webcast, receive practical guidance on how to implement a unified policy management infrastructure for RBAC. 

Online communities, social networks, and global sharing of rich media are just a few of the new beyond-traditional extranet technologies being adopted today. This paper shows how to implement greater security for new social media enabled extranets, and how in-the-cloud services combined with mobile credentials enable two-factor authentication. 

GFI WebMonitor controls your Internet users' browsing habits through web categorization and web filtering, covering over 165,000,000 URLs. It also monitors downloads in real-time, protecting your network from viruses, malware and phishing attacks. 

The Websense Security Labs Team provides a review of recent threats in this presentation transcript. Learn more about techniques for defending your organization from Web threats. Techniques include the monitoring, classification, and identification of all Web content in real time. Read on to learn more.