Join us for a discussion with Tommy Thompson, IT Security and Compliance Coordinator at Williams Company and Bob Shapiro, Principal Business Analyst at OpenPages, in which we will uncover strategies for implementing a more effective IT risk and compliance management program. 

Fixing software security vulnerabilities during development is expensive, difficult and time-consuming. But fixing them after deployment is far more expensive and counterproductive. In this video featuring security expert Diana Kelley, learn state-of-the-art techniques for building a secure software development process. 

Using OS lock down scripts can be time consuming and error prone. Keeping those scripts up-to-date as new guidelines are published requires a continuous cycle of research, interpretation, and script revision. Do you really have time for this? Security Blanket automates the process of locking down Linux and Solaris operating systems. 

Check out this case study to learn how Vesta implemented Tripwire® Enterprise to continuously monitor IT infrastructure for all unauthorized change, which helps maintain known, trusted, and compliant system environments and ensure audit requirements are met. 

Next-generation security management must be built upon a foundation of massive data collection, processing, and storage; deep and diverse data analytics; and virtualization and cloud intelligence. Read this paper to learn how to accommodate changing business and technology needs. 

Join Randy Rosenbaum of Alert Logic as he discusses ways to not only reduce the amount of time spent reviewing logs, but how to quickly respond to suspicious activity found in log data and evidence of log review to satisfy PCI auditors. 

Software vendors and enterprise organizations are increasingly using Common Language Infrastructure platforms like Microsoft .NET. However, using managed frameworks rarely includes an assessment of risks such as reverse engineering and algorithm exposure. Read this paper to learn about some approaches used to protect .NET applications. 

CodePro AnalytiX provides you with the metrics you need to incorporate self-improvement and optimization into the software process. Thus, CodePro AnalytiX is a full set of tools to support your organization in its quest for sustainable high levels of software quality, security and productivity 

This webcast shows you how you can accelerate the discovery, documentation, and organization of business rules hidden deep within enterprise applications and gain better understanding business logic, organizations can increase the adaptability of their enterprise applications and respond quicker to the need for change. 

The SANS/CWE list of the Top 25 Most Dangerous Programming Errors is already becoming the "standard" for developing secure applications in many large enterprises. In this webcast, review the prevalence of attacks that use vulnerabilities listed in the Top 25 and learn how to safeguard your code to avoid the most dangerous programming errors. 

Read this paper to learn of a new breed of data warehouse technology is emerging that addresses many of the implementation challenges organizations face 

Enterprise businesses require the control framework involved in the PCI DSS to help improve internal operational, security and audit performance. This white paper details how alignment of business and PCI goals is important to ensure continuity and meet all internal security standards.