|
![]() |
Information Security Government regulations and requirements such as the Gramm-Leach-Bliley Act (GLBA) and the USA PATRIOT Act help establish industry wide standards for Information Systems Security while ensuring compliance on a broad level. Section 501(b) of the GLBA stipulates that institutions must implement a comprehensive written information security program that includes administrative, technical, and physical safeguards appropriate to the size and complexity of the organization and to the nature and scope of its activities. The program should be designed to ensure the security and confidentiality of customer information, protect against unanticipated threats or hazards to the security or integrity of such information, and protect against unauthorized access or use of such information that could result in substantial harm or inconvenience to any customer. According to Symantec, more than 100 new viruses and 60 new software vulnerabilities are identified weekly. For most organizations, just the mention of Nimda, Code Red, or the Slammer virus, is enough to drive home the need for stronger IT security. |
A single virus or hacker can bring any business to a near halt, threaten core business assets, and entail hundreds of thousands of dollars in IT clean-up costs. Security issues can also arise from within an organization, from disgruntled employees or well-meaning individuals who fail to follow accepted and established security procedures. And yet, the competitive need to expand services and support flexible and secure business transactions over the Internet has never been greater. Todays dynamic technological landscape often erodes the protective value of the security procedures an organization is using, demanding continuous security updating, and proactive, adaptive network security assessments. Here-in lies the challenge. |
|---|
Security Audit - A Process, Not An Event An audit should build on previous audits to help refine your organizations security policy and correct defficiencies that are discovered during the audit process. A successful audit is about using organized, consistant, and accurate data collection and analysis to produce findings that can be measurably corrected. |
|
![]() |