Governance in the CloudJoseph Kirkpatrick Security by abdication is when a company decides that rather than accept the responsibility of securing and maintaining systems, people or processes, it will abdicate the responsibility by moving to the cloud. The Impact of Governance on Identity Management ProgramsRafael Etges, CISA, CRISC, CIPP/C, CISSP, and Anderson Ruysam, CRISC, CISSP, ITIL What are the governance elements required to ensure the success of an IDM deployment in a complex enterprise environment? What is the bottom-line impact of having—or not having—these elements in place? The Significance of the Dodd-Frank ActLarry Marks, CISA, CGEIT, CRISC, CFE, CISSP, PMP Plus The relevant questions that need to be asked are: How does the Dodd-Frank Act impact IT auditors? How does the Dodd-Frank Act impact global organizations? Five Questions With…Hongwen Zhang, Ph.D. Hongwen Zhang is the CEO and cofounder of Wedge Networks, as well as the co-inventor of Wedge Networks patented technology WedgeOS. The Three Lines of Defence Related to Risk GovernanceKen Doughty, CISA, CRISC, CBCP Effective ERM involves the strategic implementation of three lines of defence as the first principle of the risk management framework. At each line of defence there needs to be risk governance guidance to support the ERM framework. HelpSource Q&AGan Subramaniam, CISA, CISM, CCNA, CCSA, CIA, CISSP, ISO 27001 LA, SSCP How do you define ‘limited personal use’ of systems, applications and other resources? How do you determine that someone has exceeded the permitted limit? Can any metrics be used to determine whether someone exceeds acceptable limits? The Train of DangerSteven J. Ross, CISA, CISSP, MBCP Serious cyberattacks have been in the news quite a lot recently. Large organizations in the United States, including Lockheed, Google, Citigroup and the International Monetary Fund, have all reported successful attempts perpetrated against them. JOnline: Certification—The Answer to Cybersecurity Woes?Derek Mohammed, Ph.D., CISA, CISSP, PMP Organizations need fully articulated security policies and procedures based on industry best practices to solidify their information system defenses and meet legal, contractual and regulatory requirements. L’impatto della governance sui programmi di gestione delle identitàRafael Etges, CISA, CRISC, CIPP/C, CISSP, and Anderson Ruysam, CRISC, CISSP, ITIL Quali sono gli elementi di governance necessari per garantire il successo di un’implementazione di un IDM all’interno di un contesto aziendale complesso? Qual è l’impatto finale dell’introduzione (o della mancata introduzione) di tali elementi? |
|
|