Tuesday - May 13, 2008
The restaurant-slash-arcade-slash-bar Dave & Buster's is the latest U.S. outlet to suffer a breach of its credit card processing system. Hackers based in Ukraine and Estonia -- assisted by a guy in Miami -- apparently installed packet sniffer malware at the point of sale systems in several D&B outlets, which siphoned off "Track 2" data as the information was being transmitted over the company's network from the point of sale server to a data processor's server.
[More...]
Monday - April 28, 2008
Data management rules and regulations have become a major concern for businesses, due in large part to increasing oversight that often requires organizations to invest in new technologies in order to address compliance issues. However, the promise of enterprise technologies as a solution to the demands of data management compliance will go unmet absent a context of sound policy and strategic planning.
[More...]
Sunday - April 27, 2008
Identity theft, a cyber-crime causing inestimable damage for scores of ordinary citizens, has prompted passage of the federal FACT Act Identity Theft Red Flags Rule, issued this year. Part of the 2003 Fair and Accurate Credit Transactions Act, the rule aims to combat the scourge of identity theft, which each year victimizes 8.3 million Americans for a total of $15.6 billion in losses, according to the FTC.
[More...]
Saturday - April 26, 2008
When it comes to properly managing and protecting critical enterprise data and information resources, Corporate America is stuck between two strongly opposing forces. The U.S. is world "cyber-crime" headquarters, according to the Internet Crime Complaint Center 2007 Internet Crime Report.
[More...]
Wednesday - April 23, 2008
Web application vulnerabilities put critical business applications and back-end databases at risk from attack, theft and fraud. The Payment Card Industry Data Security Standard, which recognizes the threat Web application vulnerabilities pose to credit card data, allows organizations to choose between two mitigation techniques.
[More...]
Monday - April 21, 2008
Since 2005, millions of citizens have been affected by reported and unreported data breaches at payment processors, banks and retailers -- but the nation was still stunned when news broke out about the TJX data breach. This has indeed been a larger problem than most recognize, with some 88 million consumers affected by data breaches in the past two years alone, according to the Privacy Rights Clearinghouse.
[More...]
Friday - April 18, 2008
A divided FCC on Thursday grappled further with the thorny issue of how to relieve increasing online congestion, disagreeing sharply over whether government regulations are needed. The commission met at Stanford University during a seven-hour meeting delving into "net neutrality," the principle that all Internet traffic be treated equal.
[More...]
Thursday - April 17, 2008
The acronym GRC -- governance, risk and compliance -- has become a boardroom buzzword. The reasons? First, there are growing governmental and industry-specific compliance and security regulations. Next, there's the immediate need to effectively manage and mitigate the mounting business and operational risks associated with competing in a complex global market.
[More...]
Tuesday - April 15, 2008
As corporations implement compliance with various regulations such as Sarbanes-Oxley, they find that they end up with different zones within their network that can't talk to each other. This makes it difficult to implement an enterprise security solution. Adding virtualization to the mix complicates things further. Apani Networks has come up with a solution to this: EpiForce VM.
[More...]
Tuesday - April 15, 2008
Mid-market companies often have few choices when it comes to ensuring compliance with federal regulatory edicts for customer identity and financial records. Big companies use business process management and enterprise resource planning systems to track everything their employees do. Mid-size companies have to spend a small fortune or manage with manual spreadsheets and homegrown solutions.
[More...]
Monday - April 14, 2008
Microsoft has leapt into the brawl surrounding a recent proposal by the Federal Trade Commission to tighten restrictions on online advertising, responding with its own five-tiered plan for self-regulation. In December, the FTC released a set of proposed principles to "guide the development of self-regulation" in online behavioral advertising and sought comments from all interested parties.
[More...]
See More Articles in Governance & Compliance Section >>
Headline Feeds
Sign Up for Business and Technology News Alerts
