Failure to follow fundamental common-sense security policies can produce disastrous results, as the state of Utah discovered

Compliance alone should never be the only goal

In tough times, compliance efforts may seem optional

When it comes to mounting a successful defense in what is a fast-changing threat environment, best practices require consistent execution

To remain compliant, your approach must grow in scale with your business

Cloud, appliance, software? If you were planning on developing a security monitoring platform, which architecture would you use?

Oracle's recent patch contained exploit code

How the increased level and sophistication of of targeted attacks since 2008 may impact this year's U.S. Presidential election campaigns

Compliance is about being better and not just proving you are right

Do we need logging standards, or should we just follow the leaders to help direct our logging efforts?

As soon as you train your colleagues about compliance, noncompliance is back in charge

A look at database monitoring and reverse proxies

Compliant systems do more than prevent problems -- they help solve problems that happen

At what point does turning a blind eye to the loss of revenue spark the inevitable conversation: 'Maybe we should be monitoring this infrastructure more closely?'

A look at some free tools to help tackle database security

Information security is at the mercy of your entire staff's habits

Is the often-pitched 'single pane of glass' a benefit to security monitoring tools or yet another point of contention?

Too many in business assume compliance is primarily a technology issue

Some data-owning businesses are getting into the Internet authentication market -- and that's good news

Compliance in many organizations is seen as only a costly inconvenience

Authenticating users without explicit login

Clarifying the technical findings on a weakness in RSA crypto keys and some recommendations on how to prepare and protect your assets from the next inevitable crypto weakness discovery

If you attended the 2012 RSA Security Conference, BSides San Francisco, or the America’s Growth Capital Summit, you no doubt noticed claims of SIEM vendors jumping on the 'big data security' bandwagon

It may be boring or scary to management, but compliance is ultimately their burden to bear

The best insurance for your organization is often the processes required for compliance