In an ideal world, it would be possible for organizations to prevent hacking. Given the many routes in to any given business coupled with social engineering tactics, it’s impossible to prevent hacking ...

It’s often forgotten there are three types of security controls. Administrative controls in terms of policies are easy to remember, since this is usually first on an auditors list of requested ...

At first glance, policies, standards, procedures and technical controls may appear more similar than they are. But these terms are not interchangeable -- each refers to separate and distinct aspects ...

Nov. 15 looms large for corporate executives who will soon have to certify compliance with Section 404 of the Sarbanes-Oxley Act. Their assertions on the effectiveness of internal controls over ...