In this white paper, we take a look at how strong authentication can benefit eCommerce and online services. We will evaluate the risks that identity fraud, phishing and cybercrime pose for online service providers and discuss how strong user authentication can alleviate these risks. 

As ORCS introduced Windows Server 2008 into the network, they sought new ways to improve efficiency. The need for an improved patch management system, combined with the requirements for PCI compliance, presented a dual challenge that they hoped they could address with a single technology solution. And they did. Read this case study to learn how. 

You know you have to protect your sensitive data, but in order to do that, you have to find it. Data classification consists of identifying what information is confidential, then deciding how to store and secure that information. In this video, Adrian Lane of Securosis gives insight into the data classification process. 

This tech brief presents eight recommendations to help you proactively address the difficulties of access control in a Microsoft-centric environment, and avoid the common pitfalls, risks and costs. 

When you outsource cloud computing, you are putting your data in the hands of a third party. In this video, Rena Mears of Deloitte & Touche LLP reviews how cloud computing is effecting data classification and security. She answers some of the toughest questions about service provider agreements, compliance, and what’s next for data management. 

Participants at industry conferences and events often ask where the right place to start implementing security is. This is similar to starting off a talk with a doctor by asking “What medicine should I take?” The answer is going to be more questions. This article presents three questions to ask yourself before starting a security implementation. 

This paper describes seven practical steps information security professionals can take to integrate controls into IT production operations, to simultaneously achieve NERC compliance goals, and also IT operational and security goals. 

Reading this paper will help you understand the fundamentals of building a security architecture that helps you respond to business demands while safeguarding your organization. 

In a typical healthcare organization, hundreds to thousands of medical and support staff need to access patient data to do their job. How do you effectively enforce access controls to hospital information systems without hampering medical care efficiency and effectiveness? Read this paper and learn how. 

As IT commoditization continues to increase audit and control activities, IT gets better at identifying and documenting the causes of significant outages. In an increasing number of cases, these ITIL efforts show the source of the outage to be action from the security department, and the BSM processes show the impact to be devastating. 

In this white paper, Jon Oltsik, Principal Analyst at ESG, shows you where to start, how to focus on the real threats to data, and what actions you can take today to make a meaningful contribution to stopping data breaches. This is must read advice for storage and security professionals. 

A common notion is that an Intrusion Prevention System (IPS) is nothing more than an Intrusion Detection System (IDS) deployed in-line with blocking capabilities. This paper explains why that notion is incorrect.