risk & compliance Resources

Sponsored White Papers, Webcasts, and Downloads

ZDNet Resources

A Comprehensive, Best-Practices Approach to Business Resilience and Risk Mitigation: A successful governance and risk mitigation strategy must operate at multiple levels with broad coverage. Risk mitigation plans at many organizations fall short simply because they are not comprehensive and fail to take into account the reach and range of all the risks that they actually face. Often this occurs...; Tags: Organization, Risk & Compliance, Strategy, Security, Management; White papers 2007-09-01
Managing Badware and Policy Violation With Aanval and Bleeding Edge Threat Snort Rules: Badware, Instant Messaging IM, and Peer-to-Peer (P2P) apps, are prominent issues facing those with the task of securing enterprise computing environments. The risks are plentiful, including potential loss of confidential data, Trojans, and rootkits. The focus this month will detail the effort to manage those risks on ones network using...; Tags: Risk, Snort, P2P, Information Systems Security Association, Peer To Peer (P2P), Rootkits, Risk & Compliance, Strategy, Security, Internet, Spyware, Adware & Malware, Management; White papers 2007-03-01
Beyond disaster recovery: Becoming a resilient business: In today's rapidly changing business environment, it's important to be ready to respond to every threat or opportunity. In this white paper, you'll learn how to determine risks, calculate impact, evaluate your current structure's response and test overall resilience. Then see how IBM can help you combine several risk management...; Tags: IBM Corp., Disaster Recovery, Risk & Compliance, Strategy, Financial Planning, Financial Services, Security, Data Management, Management, Finance; White papers 2007-01-01

Additional Resources

FolderMatch (exe): FolderMatch compares and synchronizes any two folder trees or two files. Winner at the 2002,2003 and 2004 Shareware Industry Awards, it's a MUST-HAVE tool for keeping files and folders in sync as well as powerful insurance against loss of valuable data. Who can benefit from FolderMatch?Everyone who maintains multiple copies...; Tags: File, Salty Brine Software, FolderMatch, Productivity, Microsoft Word, Word Processors, Insurance, Microsoft Office, Office Suites, Software, Business Operations, Corporate Insurance; Software downloads 2008-07-04
I have to stop using Gmail :(: I have to stop using Gmail :(You can enable POP3 support in Gmail...If you switch on POP3 support in Gmail, then you can still comply with archiving procedures: http://mail.google.com/support/bin/answer.py?hl=en&answer=13273That way, you can both send and receive e-mails with an e-mail client like Thunderbird or Evolution or even Outlook Express. I...; Tags: E-mail providers, cloud computing, Using Gmail, Google Gmail, archiving, e-mail; Discussion threads 2008-07-03

Opera patches serious code exection flaw: Opera Software has joined the list of browser vendors shipping fixes for serious remote code execution vulnerabilities. The company's new Opera 9.5.1 patches at least four security issues, the most serious being a flaw reported by Microsoft's Billy Rios that could be used to execute arbitrary code....; Tags: Opera Software, Patch Management, Flaw, Security Statu, Security, Ryan Naraine; Blog posts 2008-07-03
Can Mozilla's security metrics project end the patch-counting nonsense?: In partnership with indie security consultant Rich Mogull left Mozilla has launched a valuable Security Metrics Project that could help to -- we can only hope -- put an end to the silly notion that patch-counting helps to determine a product's security posture. The idea is...; Tags: Mozilla Corp., Rich Mogull, Security, Ryan Naraine; Blog posts 2008-07-03
Q'n'A: Are Youtube users are royally screwed?: I've been reading the headlines today, and the main headlines on most of the top technology websites are about the YouTube/Google/Viacom saga. I'd like to call this: Youglecomgate, a potentially volatile situation hovers over the midst of everyone who has been on YouTube ever, so that's probably the majority of...; Tags: Google Inc., YouTube Inc., Viacom Inc., Corporate Communications, Internet, Networking, Marketing, Zack Whittaker; Blog posts 2008-07-03
Photos: Engineering New Orleans, post-Katrina: U.S. Army Corps of Engineers is putting a great deal of money and effort into new hurricane protection systems that it hopes can reduce the risk of catastrophic flooding in the future. by CNET News.com; Tags: Photograph, Strategy, Management, CNET News.com; Image galleries 2008-07-03
Seven Tech ways to make America better this July 4: Seven Tech ways to make America better this July 4Drill Here. Drill Now. Pay Less.Get the environazi boot of our neck.Build more refineries.Reduce government regulations.Eliminate the Endangered Species Act.Build more dams for flood control.Build more highways to relieve traffic congestion.Relax nuclear power plant requirements to build more reactors.Your mindset is...; Tags: PRODUCTIVITY, Strategy, Telecom & Utilities, vision, computer; Discussion threads 2008-07-03
YouTube vs. Viacom: Google's IP wins; Users lose: YouTube vs. Viacom: Google's IP wins; Users loseCompetition?Does Viacom think that a 10 minute pixellated clip of a show or movie is really competition for seeing the entire show/movie on a TV or big screen? This is getting ridiculous. If anything, having these clips on YouTube is free...; Tags: Network technology, NETWORKING, Viacom Inc., Google IP, YouTube Inc., IP, Google Inc.; Discussion threads 2008-07-03
SmartFolio (exe): SmartFolio is a state-of-the-art asset management software for investment professionals and private investors. It contains advanced portfolio optimization and risk management techniques, based on the latest achievements in portfolio theory. The software combines highly advanced and innovative analytics with a user-friendly, intuitive interface, perfectly suited to any level of expertise...; Tags: Asset, Modern Investment Technologies, SmartFolio, Asset Management, Operational Planning, Business Operations; Software downloads 2008-07-03
Care to spend your holiday weekend policing directory listings?: Care to spend your holiday weekend policing directory listings?waiting for 9 year oldsJust wanted to congratulate you seriously on pulling out of the LA times article on Whyville one of the unfortunately buried positive comments about the kind of learning that goes on in Whyville -- (buried because the editor...; Tags: Whyville; Discussion threads 2008-07-02
Firefox 2 dirty dozen: Critical vulnerabilities patched: Mozilla has shipped a high-priority update for Firefox 2, warning that there are at least five serious vulnerabilities that could lead to code execution attacks. With Firefox 2.0.0.15, Mozilla fixes at least 12 documented vulnerabilities -- five rated critical --Â that could put users at risk...; Tags: Mozilla Firefox 3.0, Mozilla Firefox, Critical Vulnerability, XSS, Mozilla Firefox 2.0, MFSA, Web Browsers, Internet, Ryan Naraine; Blog posts 2008-07-02
Remote code execution flaw in VLC Media Player: Researchers at Secunia have found a "highly critical" vulnerability that puts users of the cross-platform VLC Media Player at risk of remote code execution attacks. The vulnerability is confirmed in version 0.8.6h on Windows. Prior versions may also be affected. Â Â A patch is expected soon from...; Tags: Vulnerability, WAV, Secunia, Flaw, Security, Ryan Naraine; Blog posts 2008-07-02
PCI-DSS 1.1 points to outdated OWASP Top 10: OK, I'm not going to freak out about this too bad... I've already pointed out enough problems with PCI, but I did find it morbidly entertaining.Â My good friend Jeremiah Grossman pictured at right blogged today about the PCI-DSS 1.1 section 6.5, which covers "prevention of common coding vulnerabilities in...; Tags: XSS, PCI, Security, Storage, Hardware, Nathan McFeters; Blog posts 2008-07-02
Microsoft to ratchet IE8 security another notch in Beta 2: Sometime in August, Microsoft plans to release Beta 2 of Internet Explorer 8. Yesterday, I spoke with Austin Wilson, Director of Windows Client Product Management at Microsoft, about some of the security-related changes due in this milestone, and got a preview of the changes announced today. Here are some details...; Tags: Microsoft Internet Explorer 7, ActiveX Control, Microsoft Corp., Beta, Site, Web Browser, IE8, Microsoft Windows, ActiveX/COM/COM+/DCOM, Phishing, Web Browsers, Security, Operating Systems, Software, Software Development, Software/Web Development, Spam And Phishing, Internet, Ed Bott; Blog posts 2008-07-02
Demystifying BIOS updates - The DOs and DO NOTs: Demystifying BIOS updates - The DOs and DO NOTsSome of this advice is overly-cautious ...[i]When there’s a darn good reason for doing the update (as a rule I find that if I buy a cutting-edge board then there can be a lot of BIOS updates released over a short period...; Tags: BIOS, BIOS update, motherboard; Discussion threads 2008-07-02
McAfee S.P.A.M. experiment and more ridiculous HackerSafe failures: Stay with me here readers, I'm stringing two stories about McAfee together here, a little outÂ of the ordinary, so I hope it makes sense.Â If you aren't interested in the tech details of which there are very little, please do read forÂ a good laugh. Network World reported...; Tags: McAfee Inc., Organize-It, PCI, Phishing, Cyberthreats, Marketing Research, Storage, Hardware, Security, Spam And Phishing, Marketing, Nathan McFeters; Blog posts 2008-07-01
Researcher claims thousands of identities stolen during Social Engineering pentests: Kelly Jackson Higgins of Dark Reading, reported on research conducted by Joshua Perrymon, hacking director for PacketFocus Security Solutions and CEO of RedFlag Security, who has been performing social engineering exploitsÂ for numerous clientsÂ in the past yearÂ andÂ has apparently stolen thousands of identities with a 100 percent success rate. ...; Tags: Social Engineering, Identity, Dark Reading Article, Identity Theft, Security, Nathan McFeters; Blog posts 2008-07-01