Active Directory becomes very complex to manage in Windows networks. Administrators leave, users are given elevated privileges, applications require special accounts - very soon you have an Active Directory full of security weaknesses. 

This document discusses the use of PowerBroker software to address some of the security and audit problems inherent in native UNIX and Linux operating systems. The purpose of the document is to demonstrate the value of PowerBroker as a tool for reducing risk in environments where information security and risk avoidance are considered important. 

The federal government's push for electronic healthcare records has made data security even more pressing. This eBook takes a look at where healthcare IT leaders should begin and what they should watch out for as they move to embrace the HITECH Act and other initiatives. Read on to learn more. 

This paper looks at some common regulations (SOX, HIPAA, GLBA, Basel II, and NERC) and presents the argument for in-the-cloud authentication as the most advantageous response to access control related requirements. It also presents a practical solution for complying with these regulations. 

Enterprise businesses require the control framework involved in the PCI DSS to help improve internal operational, security and audit performance. This white paper details how alignment of business and PCI goals is important to ensure continuity and meet all internal security standards. 

Learn how Robot/SCHEDULE, the job scheduling and batch management software for IBM AS/400, has helped companies pass their internal and external audits for over 25 years. You can monitor who changed what job, produce reports that prove you are monitoring the schedule, and demonstrate the basic security that prevents unauthorized editing of jobs. 

Read this chapter from "HOWTO Secure and Audit Oracle 10g and 11g" (CRC Press, 2009) and learn how to secure Oracle by checking for weak passwords, configuring failed login policies, preventing DoS attacks with resource limits, and auditing user profiles. 

ArcSight Logger is a turnkey appliance for collection, efficient storage, and high-performance search and reporting of all enterprise log data. Read this paper to learn more details. 

Read the "Database Activity Monitoring (DAM)" chapter from "HOWTO Secure and Audit Oracle 10g and 11g" (CRC Press, 2009) and learn how to leverage DAM to prevent SQL injection attacks, monitor privileged users and track access to sensitive data. 

The combination of the ever-changing compliance landscape, Web 2.0 and technologies such as mobile devices have made it increasingly more difficult to track where your confidential data resides and put mechanisms in place to protect it. 

It sounds simple, but just try to figure out who accessed your confidential data yesterday. IT management standards insist on it, compliance standards require it, but can you deliver? 

Threats continue to increase in frequency and many industry regulations require two-factor authentication. However, security tokens and other forms of authentication are inconvenient for employees and expensive. View this webcast to discover how phone-based authentication differs from security tokens and other methods of authentication. 

Tired of falling asleep during code review meetings? Stop meeting – try peer code review with Code Collaborator. This time-saving tool lets you do fast and efficient reviews online, without the usual pain of meetings, printouts, or convoluted emails.