Welcome Guest. | Log In | Register | Membership Benefits


Topics:   Dark Dominion : Compliance Tech Center

Dark Reading Launches New Tech Center On Security And Compliance

New Compliance Tech Center will cover relationship between security initiatives and compliance initiatives

Aug 15, 2011 | 12:01 AM | 

By Tim Wilson
Dark Reading

Today Dark Reading launches a new feature: the Compliance Tech Center, a subsite of our website devoted to bringing you more detailed news, insight, and in-depth reporting on security issues as they relate to compliance with regulatory and industry standards.

This is the tenth of our Dark Reading Tech Centers, which are designed to provide you with a more focused view of specific issues, threats, and technologies in the world of IT security. The Tech Centers offer in-depth reports and studies, breaking news, and links to additional articles and information not found on the main Dark Reading site. Just as a traditional newspaper offers in-depth sections or supplements on sports, entertainment, or politics, the Dark Reading Tech Centers provide an additional range of news and information for readers who have an interest in specific aspects of IT security.

While Dark Reading has been covering compliance issues -- as they relate to enterprise security -- for more than five years, we are excited to have a special place in which to explore the compliance process and its impact on organizational security. With the introduction of the Compliance Tech Center, we will have the space and resources to study the various security-related aspects of compliance. The goal of the Compliance Tech Center is to help security professionals understand how compliance initiatives affect security initiatives, and how compliance efforts can sometimes accelerate -- or inhibit -- the broader enterprise security effort.

With this charter in mind, you can expect the Compliance Tech Center to take a slightly different perspective than the rest of the Dark Reading site: It will offer more tutorials and explanatory features designed to help illuminate the security aspects of all the different compliance requirements, including PCI, FFIEC, SOX, HIPAA, FISMA, NERC, and GLBA. Our hope is that we can help security professionals make some sense of this “alphabet soup” and get some insight on how these requirements might affect their day-to-day operations.

The goal of the Compliance Tech Center is to help you get the latest information on compliance requirements, particularly as they relate to security. In some cases, we’ll discuss the ways that security teams can use the compliance hammer to drive home the programs they want to see done in their enterprises. In other cases, we’ll discuss how compliance efforts can confuse or inhibit the security process, and what the security team can do about it.

Of course, the creation of the Compliance Tech Center doesn't mean that our coverage of standards-related security topics on the main Dark Reading site will decrease. You'll continue to see news and analysis of new developments in security requirements, and strategies for leveraging compliance initiatives will remain a topic of discussion for our bloggers and comments sections. But when you click on those stories or blogs, you'll be brought here, to the Compliance Tech Center, so that you can see the full range and depth of analysis that we offer on the topic, and gain additional context to support what you're reading.

We think the Compliance Tech Center will help you understand the security challenges that your organization could face, and guide you to make good decisions about the tools and practices that might work best. But in the end, this is your site. Please let us know what you think of the Tech Center, our coverage of compliance initiatives, and what you'd like to see us cover in more depth. We can't guarantee we'll answer every query with a story or in-depth report, but we'll do our best to meet your needs for additional information and analysis.

If it has to do with security and compliance, then you'll find it here. And if you don't, let us know -- our goal is to be the most comprehensive source of security-related compliance news and information on the Web.

Tim Wilson, Editor, Dark Reading



Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

Dark Reading encourages readers to engage in spirited, healthy debate, including taking us to task. However, Dark Reading moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. Dark Reading further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
Subscribe to RSS



Compliance Reports

report How To Boost Security Via FFIEC Compliance
With just a smartphone, users can conduct nearly all their banking business at any time of the day or night. However, all this flexibility and convenience opens up new avenues for fraud and cybercrime. Guidelines laid out by the FFIEC several years ago predate many of the capabilities-and vulnerabilities-that are in place today. In this report, we examine the latest guidelines and provide advice on how you can extend the work done to comply with FFIEC guidelines to strengthen your organization's overall security posture and keep customers and their data safe.

report Keeping Compliance In Check
Configuration mistakes, access control gaffes, poor documentation--it doesn?t take much for a compliance audit to go all wrong. In this special retrospective of recent news coverage, Dark Reading takes a look at the costs, common missteps and best practices for compliance, as well as the day the Internet nearly went dark due to the threat of new regulations.

report FISMA Lifts All Compliance Boats
FISMA may not be on your radar now, but it likely will be at some point. Geared specifically toward the federal government and its affiliate agencies and third parties, FISMA is a very specific set of requirements aimed at establishing and maintaining at least a baseline level of computer and network security. FISMA requires unique categorization and classification of information assets, not to mention a boatload of documentation to prove compliance. But once your organization achieves FISMA compliance, it will likely be compliant with just about every security mandate out there.

Other reports from the Compliance Tech Center:

Related Content

Log Management in 2012 and Beyond
2012 brings interesting changes to the log management world. Now, more than ever, it is critical to understand the impact to your log infrastructure and the solutions that will better prepare you to manage your security posture.

SANS Log Management Survey Report
Organizations are increasingly dependent on log management to support core business functions, including cost management, service level and line-of-business application monitoring, as well as traditional IT- and security-focused activities.

Cut the Time and Effort of Troubleshooting and Reporting
Organizations generate millions of logs a day and struggle with centralized collection, storage and analysis of those logs. ArcSight Logger is a universal log management solution that unifies searching, reporting, alerting and analysis across any type of IT data. It consolidates silos of logs into a single indexed repository for fast detection and mitigation of operational issues.

Get Turnkey and Automated PCI Compliance
PCI compliance monitoring is seamless with the self-contained ArcSight PCI Logger solution for log collection, storage and analysis. No database administration expertise is required and a web-based interface simplifies deployment and ongoing management.

Swiss Bank Meets Compliance Requirements and Protects Customer Data
Due to long-term data retention requirements, Swiss bank EFG needed a cost-effective way to collect, secure and store audit-quality log data in an easily accessible log repository. ArcSight Logger helps EFG meet key requirements of Switzerland?s banking laws fast and cost-effectively.




Featured Webcasts
Featured Whitepapers
Featured Reports