Volume 3, 2013
by Dan Bogdanov, Ph.D., and Aivo Kalu, Ph.D., CISA
A cloud is a remote-access platform; thus, technical controls that remotely enforce a particular security policy are especially efficient.
|
Volume 3, 2013
by Christopher A. Moturi and Fredrick O. Bitta, CISA
One of the prime concerns in any audit for management is the logical access to computer systems and data.
|
Volume 6, 2012
by Gan Subramaniam, CISA, CISM, CCNA, CCSA, CIA, CISSP, ISO 27001 LA, SSCP
What are the subcontrols that I must consider and evaluate to assess the effectiveness of the system and the appropriateness of the access privileges granted?
|
Volume 6, 2012
by Rohit Sethi, CISSP, CSSLP, and Ehsan Foroughi, CISM, CISSP
SALM solutions offer the unprecedented ability to achieve auditable and scalable prevention-based application security.
|
Volume 5, 2012
by Alessandro Campi
This article focuses on the security of the authentication procedure set up by a service provider (SP) using a solution/tool obtained by a technical security provider (TSP).
|
Volume 5, 2012
by Steven J. Ross, CISA, CISSP, MBCP
In a recent meeting, the question being debated was whether there were situations in which the security of information could be prudently reduced.
|