More than 60% of large enterprises believe a significant network breach is likely within the next 3 years, yet most are not capable of effectively discovering the full scope of incidents. This survey details how management and staff within large organizations view the importance of being prepared to respond to network security incidents. 

IBM has created a pair of complementary views to bridge the communication gap between the business and the technical perspectives of security to enable convergence in thought and process. The IBM Security Framework addresses the business view, and the IBM Security Blueprint addresses the technical view. 

This Pocket E-Guide examines using one or more of the compliance regulations as a framework rather than relying solely on the traditional information security guides to build a security framework. 

A common notion is that an Intrusion Prevention System (IPS) is nothing more than an Intrusion Detection System (IDS) deployed in-line with blocking capabilities. This paper explains why that notion is incorrect. 

Existing agile methods often focus on small, single-team projects, overlooking the broader impact of large programs. This paper outlines a distinct planning framework that has been successful in large-scale agile software development projects and relies.. 

Enterprise businesses require the control framework involved in the PCI DSS to help improve internal operational, security and audit performance. This white paper details how alignment of business and PCI goals is important to ensure continuity and meet all internal security standards. 

In one neat package, the Web Platform Installer gives you the frameworks, web server, database, tools and applications you need to quickly build and run Web applications and solutions on Windows. 

While netbooks enable easy use of internet and web-based applications at a low price, the computing device still has many limitations in terms or processing power, storage and applications capabilities. Watch this webcast to learn the pros and cons of netbooks and other larger format notebook systems. 

Read this chapter from "HOWTO Secure and Audit Oracle 10g and 11g" (CRC Press, 2009) and learn how to secure Oracle by checking for weak passwords, configuring failed login policies, preventing DoS attacks with resource limits, and auditing user profiles. 

In this podcast, our expert explains whether users really need both anomaly and signature based strategies, and if so, how to overcome implementation challenges. 

Read this paper for an in-depth discussion of malware identification, naming and classification and an exploration of the most useful ways for administrators to detect and analyze threats.