The most common approach to securing a web application involves doing a single security test, usually a Web Application Security Assessment, when a development project is completed. While this is still a requirement, this paper discusses why security needs to be incorporated earlier and throughout the software development life cycle (SDLC). 

In this third podcast in a series of three, Augusto Valdez of Microsoft discusses the application advantages of Windows Mobile. Specifically, Valdez reviews what makes Windows phones a good platform for developing mobile applications, how to go about gaining access to applications for Windows phones and how to secure applications on mobile phones. 

As security threats grow in sophistication, securing critical data is becoming more challenging. Your exposure is increased and attacks are difficult to spot. In this webcast, White House Cybersecurity Advisor Howard Schmidt discusses what lies ahead in 2010 and makes key recommendations for an optimal defense strategy. 

You know you have to protect your sensitive data, but in order to do that, you have to find it. Data classification consists of identifying what information is confidential, then deciding how to store and secure that information. In this video, Adrian Lane of Securosis gives insight into the data classification process. 

In this three-part series podcast, hear from an industry expert as he discusses what's new with Windows Phones. Uncover why Windows Phones on Exchange server is the best mix for your enterprise and key advantages of leveraging business applications through Windows Phones. 

Securing an organization's assets requires work, but there are some basic steps that can simplify the task by taking a one-two-three approach. In this whitepaper, you'll learn how you can sort your security controls by categorizing and grouping them in order to help prevent common security problems. 

Fixing software security vulnerabilities during development is expensive, difficult and time-consuming. But fixing them after deployment is far more expensive and counterproductive. In this video featuring security expert Diana Kelley, learn state-of-the-art techniques for building a secure software development process. 

Rapid changes within technology, new server and software deployments, and the evolving sophistication of attack methods used to infiltrate systems and steal data create the greatest set of challenges faced by security and IT administrators trying to keep their systems secure and within regulatory compliance. Interested in reducing security risk? 

Do you know what data transport technology options are available in today's market? This paper will help you assess economic, operational, and security factors involved in selecting data transport technology and present Ethernet carrier services as an attractive data transport option. 

Listen to this podcast, featuring Richard Mackey, for tips on managing third-party risk, specifically for compliance. Learn how to choose the right partners and ensure they apply the same standards as your organization when securing your assets. 

Enterprise users and their data have never been further apart. Business pressures that keep employees out of headquarters and close to customers and partners have met head-on with other drivers that are bringing far flung servers back to the datacenter. 

Learn about security information management systems (SIMs) and how they support a security information lifecycle of collection, alerting, reporting, and forensics.