This document describes concepts and definitions for governance, elements of governance, distinguishing myth from reality, approaches that go beyond "just good enough", control frameworks etc. 

This video offers an overview of the cloud computing landscape as it relates to information security. Few organizations realize the vast and inherent risks that cloud computing presents, including data exposure, data loss, and a compromised infrastructure. View this video for detailed risk factors and how to secure cloud based services. 

This paper examines the impact of unreliable data on manufacturing companies. It then defines the requirements needed to guarantee data reliability in manufacturing and offers a practical approach to creating and governing that data. 

When an organization commits to implementing the technologies and tools to support role and entitlement management, it faces a number of sizable challenges. In this podcast, expert Richard Mackey counts down these organizational, process, and technical challenges that block the successful deployment of role and entitlement management technology. 

In this research, we examine the lessons that have been learnt from the current financial crisis, and propose ten practical lessons that could help to address perceived weaknesses in risk identification, assessment and management. 

This survival guide will help you and your company start to plan an effective business continuity plan. The end result should be a reduction in risk factors and to minimize the impact of disasters that are out of your control. 

This whitepaper will examine PCI DSS and explain how Lumension® Compliance and IT Risk Management can help organizations reduce the cost of addressing compliance. 

This Yankee Group report outlines the importance of taking both a broad and narrow approach to maintaining the health of network and security infrastructure. In the following sections, we describe and analyze the current risk landscape for enterprises and show the current state of operational management for enterprise networks and security. 

A successful credit card company must be able to accurately assess its credit risk at any given time. Having an up-to-date picture of which clients may default on payments is critical to this process, not only amongst new applicants, but existing customers too. 

Software vendors and enterprise organizations are increasingly using Common Language Infrastructure platforms like Microsoft .NET. However, using managed frameworks rarely includes an assessment of risks such as reverse engineering and algorithm exposure. Read this paper to learn about some approaches used to protect .NET applications. 

This whitepaper outlines four critical elements of cyber security intelligence that organizations must meet to ensure that the integration of the intelligence will help improve the safety and profitability of enterprises. This paper also presents specific questions to ask when determining the best approach for an overall risk-mitigation strategy. 

In this audio excerpt from his video presentation "Inside the cloud: Key security factors when considering managed services,"Jeff Reich discusses a few of the key technical risk factors involved with cloud computing.