Former ISACA Head: SAS 70 Changes Coming

Marios Damianides, a partner in Ernst & Young's technology and security risk services group and past president of ISACA's board of directors, expects changes for SAS 70 and more collaboration between security and non-security management groups.

» Read more

FUD Watch | DNS Flaw Worth the Worry

Senior Editor Bill Brenner notes that it's pretty common for the research community to amp up the hype around certain security flaws. In the case of a flaw in the Internet's Domain Name System (DNS), the alarm may be justified this time. But the researchers tried to handle it responsibly, at least.

» Read more

How to Fraud-Proof Your Company

Fraud experts focus on ways to combat insidious insiders at the 19th Annual Association of Certified Fraud Examiners (ACFE) conference, and a convicted fraudster explains how he went down the wrong path.

» Read more

Cheap IT Security? The Tools Were There All Along

With the economy flirting with recession, security pros can't afford the security products they were eying a year ago. Fortunately, there are plenty of cheap tools to ensure a solid defense. Some of these tools have been in the arsenal all along, but you never knew it. (Part four in a series: How to Manage Security in a Recession)

» Read more

Recession Woes: What People Steal

With the economy tanking, security pros see a spike in old-time thievery. And what do people steal in recessionary times? Cash, clothes, cigarettes, copper - pretty much everything. (Part three in a series: How to Manage Security in a Recession)

» Read more

FUD Watch | Black Hat and the Hype Machine

Next month the hacking community will descend upon Las Vegas for the Black Hat and Defcon events. But are these events anything more than theater?

» Read more

Iowa's Floods: Tragic Lesson in Business Continuity

For security administrator Deb Hale, the recent tornadoes and floods in Iowa hit close to home and provided a sobering lesson in business continuity.

» Read more