CSO Disclosure Series | What's Next with Disclosure Legislation?
An interview with lawyer and breach notification expert Tanya Forsheit on why the United States still doesn’t have a federal breach notification law. Part of an in-depth series about disclosing breaches
CSO Disclosure Series | The Dos and Don'ts of Disclosure Letters
One security breach, two letters, 11 lessons in the art of telling customers you screwed up. Two PR pros deconstruct the messages that Monster.com and USAJOBS were really giving to customers whose personal information had been disclosed. Part of an in-depth series about disclosing breaches.
CSO Disclosure Series | What California's New Medical Disclosure Law Means for the Rest of Us
New state law AB 1298, aimed at reducing instances of medical identity theft, could prompt similar legislation elsewhere, but experts are still unsure whether out-of-state companies with information about Californians must comply
Numbers: ITIL, COBIT and More; Who Uses What?
Adoption rates around the world for ITIL and other guidelines. From the 2007 Global Information Security Survey.
PCI: Smart or Stupid?
The data security standard isn't as complex as some would have you believe
PCI Is Security Simplicity, Not Complexity
The payment card industry data security standard seems to make relatively smart people instantly dim-witted as they complain about its so-called complexity.
The Compliance Cop-Out
Regulatory compliance is one reason for security spending, but it can't be the only reason
Expect No Privacy at Work
Acceptable use policies strongly suggest personal computing belongs at home, not in the workplace
ISO 2700: Security Asleep?
The ISO security standards--first ISO 17799, which is being replaced by ISO 27001 and 27002--are real yawners.
Legislative Tangle
While the federal government's push to trace the movement of drugs has been slowed, several states have stepped in with rules of their own.
Data Center Directions Virtual Conference
Attend this free, 100% online event exploring tools and techniques for making your data center deliver for today and tomorrow.
Maximizing Site Visitor Trust Using Extended Validation SSL
Now with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in the free VeriSign white paper.
- More Headlines
- Change Topic
Data Protection
- Microsoft to Release Four Critical Patches
- New Ways to Approach Security in a Web 2.0 World
- Study: Weak Passwords Still Main Security Defense
- Vetoed Data Breach Bill Goes to Schwarzenegger Again
- Google Chrome at Risk from 'Carpet Bomb' Bug
- Information Security Governance: Centralized vs. Distributed
- MBTA Flaw Disclosure: The Students Speak Up
- Leading a Converged Security Operation: Critical Skills
- New Security Rules on Tap for Credit-Card Handlers
- Security ROI: Fact or Fiction?


