Ericka Chickowski

Selecting the right NAC vendor can be an arduous process. Ericka Chickowski examines the necessary decisions.

The reality of the security market has brought new demands for any business dealing with large financial institutions. No matter how large or small, or whether public or private, if a partner is handling bank information theyll be subject to the same measure of security as their customers.

Like many businesses, Depository Trust and Clearing Corporation (DTCC) depends on its application developers to drive value for its organization. As the primary clearing agency in the United States responsible for clearing and settling securities transactions for a wide range of exchanges — including equities, corporate and municipal bonds, and government and mortgage-backed securities — DTCC handles approximately $5.5 trillion in transactions a day through its systems. These transactions are primarily routed through hundreds of applications built in-house.

As the nature of enterprise security and compliance has changed, so too has the way companies have had to manage the digital identity.

Once considered a peripheral communication tool used primarily by only some workers, instant messaging (IM) is now feared by many as a security hazard. For many enterprises, the simple solution was to block IM and force employees to use existing email, phone and fax resources. But the evolution of communication channels is leaving that model in the dust.

Companies working within the pharmaceutical industry are extremely secretive with their intellectual property. This can make any attempt to share information, particularly patient data, difficult.

Watchfire announced this week that it will take a page from the open source playbook by making some extended features its product platform public, as well as opening up the product to customers who want to develop their own plug-ins.

Microsoft issued a security advisory on Thusday night about targeted attacks exploiting a vulnerability in the Windows Server DNS Service.

Federal agencies scored an average grade of C- in this years information security scorecard, a slight improvement over last year.

The most mature information security programs cant always protect against theft of information if the perpetrator has access to the server room. Without the proper physical controls over the data centers and facilities which contain the information technology hardware, it is easy enough for an imposter to steal assets the old-fashioned way — with the five-finger discount.