Security Basics mailing list archives
Re: Compliance Is Wasted Money, Study Finds
From: Bert Knabe <bert.knabe () lubbockonline com>
Date: Thu, 08 Apr 2010 13:39:27 -0500
I agree completely. I'm sure most people with even moderate concern about security do. Unfortunately, it is often the case that the people who call the shots and the people who protect the information don't agree on what's really secure, or what should be secured. Was it on this list that I saw someone mention that if the perceived cost of fines and blackeye are cheaper than the cost of true security and the perceived likelihood of a successful attack, many companies will risk a breach? On 4/8/10 11:00 AM, "Doug Farre" <dougfarre () gmail com> wrote:
I always considered compliance as a good starting point (holistically). It is common sense to take the extra steps to protect your companies most vital assets. On Tue, Apr 6, 2010 at 2:31 PM, Bert Knabe <bert.knabe () lubbockonline com> wrote:On 4/6/10 1:23 AM, "Ivan ." <ivanhec () gmail com> wrote:For those who don't frequent slashdot....... "Enterprises are spending huge amounts of money on compliance programs related to PCI-DSS, HIPAA and other regulations, but those funds may be misdirected in light of the priorities of most information security programs, a new study has found. A paper by Forrester Research, commissioned by Microsoft and RSA, the security division of EMC, found that even though corporate intellectual property comprises 62 percent of a given company's data assets, most of the focus of their security programs is on compliance with various regulations. The study found that enterprise security managers know what their companies' true data assets are, but find that their security programs are driven mainly by compliance, rather than protection (PDF)." http://www.rsa.com/products/DLP/ar/10844_5415_The_Value_of_Corporate_Secrets .p dfThat's not really a surprise. While it's not the only thing that can cost big bucks or put you out of business, non-compliance is just about the only one that's checked regularly. Bert ------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d>> 1
-------------------------------------------------------------------------- ------ Doug Farre (209) 677-7483
Bert Knabe Technician Lubbock Avalanche-Journal 806-766-2158 Freedom is not worth having if it does not connote freedom to err. Mohandas Ghandi ------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
Current thread:
- Compliance Is Wasted Money, Study Finds Ivan . (Apr 06)
- Re: Compliance Is Wasted Money, Study Finds Bert Knabe (Apr 06)
- Re: Compliance Is Wasted Money, Study Finds Doug Farre (Apr 12)
- Re: Compliance Is Wasted Money, Study Finds Bert Knabe (Apr 12)
- Re: Compliance Is Wasted Money, Study Finds Doug Farre (Apr 12)
- Message not available
- Message not available
- Re: [Full-disclosure] Compliance Is Wasted Money, Study Finds Tracy Reed (Apr 12)
- Re: [Full-disclosure] Compliance Is Wasted Money, Study Finds Valdis . Kletnieks (Apr 12)
- Message not available
- Re: Compliance Is Wasted Money, Study Finds Bert Knabe (Apr 06)
- Re: Compliance Is Wasted Money, Study Finds Mike Hale (Apr 26)
- Re: [Full-disclosure] Compliance Is Wasted Money, Study Finds Valdis . Kletnieks (Apr 26)
- Message not available
- Re: [Full-disclosure] Compliance Is Wasted Money, Study Finds Mike Hale (Apr 26)
- Message not available
- Message not available
- Message not available
- Re: [Full-disclosure] Compliance Is Wasted Money, Study Finds Mike Hale (Apr 26)
- Message not available
- Message not available
- Message not available
- Re: [Full-disclosure] Compliance Is Wasted Money, Study Finds Stephen Mullins (Apr 26)
- Re: [Full-disclosure] Compliance Is Wasted Money, Study Finds Mike Hale (Apr 26)
- Message not available
- Re: [Full-disclosure] Compliance Is Wasted Money, Study Finds Mike Hale (Apr 26)