Re: Compliance Is Wasted Money, Study Finds



I always considered compliance as a good starting point
(holistically). It is common sense to take the extra steps to protect
your companies most vital assets.

On Tue, Apr 6, 2010 at 2:31 PM, Bert Knabe <bert.knabe@xxxxxxxxxxxxxxxxx> wrote:

On 4/6/10 1:23 AM, "Ivan ." <ivanhec@xxxxxxxxx> wrote:

For those who don't frequent slashdot.......

"Enterprises are spending huge amounts of money on compliance programs
related to PCI-DSS, HIPAA and other regulations, but those funds may
be misdirected in light of the priorities of most information security
programs, a new study has found. A paper by Forrester Research,
commissioned by Microsoft and RSA, the security division of EMC, found
that even though corporate intellectual property comprises 62 percent
of a given company's data assets, most of the focus of their security
programs is on compliance with various regulations. The study found
that enterprise security managers know what their companies' true data
assets are, but find that their security programs are driven mainly by
compliance, rather than protection (PDF)."

http://www.rsa.com/products/DLP/ar/10844_5415_The_Value_of_Corporate_Secrets.p
df

That's not really a surprise. While it's not the only thing that can cost
big bucks or put you out of business, non-compliance is just about the only
one that's checked regularly.


Bert


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------




--
------
Doug Farre
(209) 677-7483

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



Relevant Pages

  • Re: [Full-disclosure] Compliance Is Wasted Money, Study Finds
    ... "Enterprises are spending huge amounts of money on compliance programs ... be misdirected in light of the priorities of most information security ... programs is on compliance with various regulations. ...
    (Full-Disclosure)
  • [Full-disclosure] Compliance Is Wasted Money, Study Finds
    ... "Enterprises are spending huge amounts of money on compliance programs ... be misdirected in light of the priorities of most information security ... programs is on compliance with various regulations. ...
    (Full-Disclosure)
  • Re: Compliance Is Wasted Money, Study Finds
    ... "Enterprises are spending huge amounts of money on compliance programs ... be misdirected in light of the priorities of most information security ... programs is on compliance with various regulations. ...
    (Security-Basics)
  • Compliance Is Wasted Money, Study Finds
    ... "Enterprises are spending huge amounts of money on compliance programs ... be misdirected in light of the priorities of most information security ... programs is on compliance with various regulations. ...
    (Security-Basics)
  • RE: How does a customer get PCI audited?
    ... BDO Kendalls is a national association of separate partnerships and entities. ... indicator of actual security. ... Security Compliance isn't security, just ... You can be purple in the face with controls and training, ...
    (Security-Basics)