<?xml version="1.0" encoding="UTF-8"?><!--RSS generated by Windows SharePoint Services V3 RSS Generator on 5/19/2013 4:17:37 AM--><?xml-stylesheet type="text/xsl" href="/Blogs/323296/_layouts/RssXslt.aspx?List=5f5fda43-51ba-49f2-bc7c-e93f31f9b586" version="1.0"?><rss version="2.0"><channel><title>IT Security Zone</title><link>http://www.isaca.org/Blogs/323296</link><description>RSS feed for the Posts list.</description><lastBuildDate>Sun, 19 May 2013 09:17:37 GMT</lastBuildDate><generator>SharePoint SusQtech:Blog</generator><ttl>60</ttl><image><title>IT Security Zone</title><url>http://www.isaca.org/Blogs/323296/_layouts/images/homepage.gif</url><link>http://www.isaca.org/Blogs/323296</link></image><item><title> IBM X-Force 2012 Trend and Risk Report</title><link>http://www.isaca.org/Blogs/323296/archive/2013/03/29/IBMX-Force2012TrendandRiskReport.aspx</link><guid>/Blogs/323296/archive/2013/03/29/IBMX-Force2012TrendandRiskReport.aspx</guid><description><![CDATA[developerWorks has just released an interview with X-Force Security Architect Michael Hamelin on the key findings in the IBM X-Force 2012 Trend and Risk Report. Please leave your ratings and feedback on the video landing page. Thanks! https://ibm.biz/BdxbTM]]></description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Calvin Powers</dc:creator><pubDate>Fri, 29 Mar 2013 13:14:00 GMT</pubDate></item><item><title>IBM 2013 Global Reputational Risk and IT Study</title><link>http://www.isaca.org/Blogs/323296/archive/2013/03/29/IBM2013GlobalReputationalRiskandITStudy.aspx</link><guid>/Blogs/323296/archive/2013/03/29/IBM2013GlobalReputationalRiskandITStudy.aspx</guid><description><![CDATA[Check out the video interview with Jack Danahy on the 2013 Global Reputational Risk and IT Study and please leaving your ratings and feedback on the video landing page. https://ibm.biz/Bdxb3k ]]></description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Calvin Powers</dc:creator><pubDate>Fri, 29 Mar 2013 12:14:00 GMT</pubDate></item><item><title>Managing Five Common Privileged Identity Management Scenarios</title><link>http://www.isaca.org/Blogs/323296/archive/2013/03/11/ManagingFiveCommonPrivilegedIdentityManagementScenarios.aspx</link><guid>/Blogs/323296/archive/2013/03/11/ManagingFiveCommonPrivilegedIdentityManagementScenarios.aspx</guid><description><![CDATA[on developerWorks, we've just published How To Guides for Five Common Privileged Identity Management Scenarios https://ibm.biz/Bdxnxe]]></description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Calvin Powers</dc:creator><pubDate>Mon, 11 Mar 2013 08:26:00 GMT</pubDate></item><item><title>Claims-based authentication for Sharepoint with Access Manager</title><link>http://www.isaca.org/Blogs/323296/archive/2013/03/05/Claims-basedauthenticationforSharepointwithAccessManager.aspx</link><guid>/Blogs/323296/archive/2013/03/05/Claims-basedauthenticationforSharepointwithAccessManager.aspx</guid><description><![CDATA[A new 5 part video series on developerWorks by Jenny Wong for implementing claims-based authentication for Microsoft Sharepoint using IBM Security Access Manager. Visit the new IBM Security Access Manager for Web on developerWorks Community for more video series related to Access Manager.]]></description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Calvin Powers</dc:creator><pubDate>Tue, 05 Mar 2013 11:07:00 GMT</pubDate></item><item><title>Under the hood of IBM's Single Sign-On</title><link>http://www.isaca.org/Blogs/323296/archive/2013/02/27/UnderthehoodofIBM'sSingleSign-On.aspx</link><guid>/Blogs/323296/archive/2013/02/27/UnderthehoodofIBM'sSingleSign-On.aspx</guid><description><![CDATA[New on #dW: Under the hood of IBM's Enterprise Single Sign-On http://www.ibm.com/developerworks/library/se-esso/index.html ]]></description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Calvin Powers</dc:creator><pubDate>Wed, 27 Feb 2013 13:27:00 GMT</pubDate></item><item><title>The Fire Code and Shared Passwords</title><link>http://www.isaca.org/Blogs/323296/archive/2013/02/27/TheFireCodeandSharedPasswords.aspx</link><guid>/Blogs/323296/archive/2013/02/27/TheFireCodeandSharedPasswords.aspx</guid><description><![CDATA[Here's a case where shared passwords are used to protect businesses all over town, and yet it seems to work. Why? http://goo.gl/tmXmp]]></description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Calvin Powers</dc:creator><pubDate>Wed, 27 Feb 2013 07:56:00 GMT</pubDate></item><item><title>Audit, Surveillance, and Customer Service</title><link>http://www.isaca.org/Blogs/323296/archive/2012/12/12/Audit,Surveillance,andCustomerService.aspx</link><guid>/Blogs/323296/archive/2012/12/12/Audit,Surveillance,andCustomerService.aspx</guid><description><![CDATA[How a pair of missing pants taught me about audit, surveillance, and customer service and the implications for technology controls. http://goo.gl/Ck92l #security #privacy #audit]]></description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Calvin Powers</dc:creator><pubDate>Wed, 12 Dec 2012 10:00:00 GMT</pubDate></item><item><title>Skype Account Hijack Attack</title><link>http://www.isaca.org/Blogs/323296/archive/2012/11/14/SkypeAccountHijackAttack.aspx</link><guid>/Blogs/323296/archive/2012/11/14/SkypeAccountHijackAttack.aspx</guid><description><![CDATA[What kinds of security controls could have prevented the Skype account hijack attack? Can we do anything except rely on white hat penetration testing? http://goo.gl/iuj8X #security #skype #pentest]]></description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Calvin Powers</dc:creator><pubDate>Wed, 14 Nov 2012 09:42:00 GMT</pubDate><category domain="http://www.isaca.org/Blogs/323296/archive/tags/security/default.aspx">security</category><category domain="http://www.isaca.org/Blogs/323296/archive/tags/pentesting/default.aspx">pentesting</category></item><item><title>Legitimate Security Through Obscurity</title><link>http://www.isaca.org/Blogs/323296/archive/2012/11/07/LegitimateSecurityThroughObscurity.aspx</link><guid>/Blogs/323296/archive/2012/11/07/LegitimateSecurityThroughObscurity.aspx</guid><description><![CDATA[There are times when &quot;security through obscurity&quot; is a perfectly legitimate security control tactic, especially against opportunistic attackers. http://goo.gl/E5oGu #security #WCRaleigh]]></description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Calvin Powers</dc:creator><pubDate>Wed, 07 Nov 2012 08:30:00 GMT</pubDate><category domain="http://www.isaca.org/Blogs/323296/archive/tags/security/default.aspx">security</category></item><item><title>Payment Card Fraud and a Checking Account DMZ</title><link>http://www.isaca.org/Blogs/323296/archive/2012/10/31/PaymentCardFraudandaCheckingAccountDMZ.aspx</link><guid>/Blogs/323296/archive/2012/10/31/PaymentCardFraudandaCheckingAccountDMZ.aspx</guid><description><![CDATA[Could the IT DMZ be used as a model for controlling payment card fraud and help protect against skimming attacks like those at Barnes and Noble? http://goo.gl/k1tnu #security #pci #fraud #payment-card]]></description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Calvin Powers</dc:creator><pubDate>Wed, 31 Oct 2012 08:09:00 GMT</pubDate><category domain="http://www.isaca.org/Blogs/323296/archive/tags/security/default.aspx">security</category><category domain="http://www.isaca.org/Blogs/323296/archive/tags/pci/default.aspx">pci</category></item></channel></rss>