Compliance Management

As 90 percent of a company's data is located near- or online, long-term data integrity and protection requirements are becoming increasingly important, especially when facing compliance audits. Data protection has traditionally fallen to the storage administrators who are often not as familiar with security and compliancy as they are to access and availability.

Virtualization is the new business reality. Forrester Research recently issued a report stating that 51 percent of North American companies have deployed or are testing virtualization technology.

A vulnerability on the website of former New York City Mayor Rudy Giuliani could have allowed SQL injection attacks and expose confidential information. Meanwhile, the MySpace page of U.S. Sen. John McCain, R-Ariz., was altered by Mike Davidson, who was upset the campaign had used his design templates and imagery without permission.

The Internet Security Alliance, a nonprofit forum for information sharing, has appointed Larry Clinton president. Since 2002, Clinton had served as deputy executive director and COO of the alliance. Prior to joining the group, he was vice president at the U.S. Telecom Association.

The mature information security program is one that takes advantage of all resources that are available. The security team and the audit staff provide a formidable force that can assure the integration and acceptance of an enterprise-wide information security program.

The Transportation Security Administration (TSA) said today that it is investigating a missing external hard drive containing sensitive information of about 100,000 employees.

Rep. Tom Davis, R.-Va., reintroduced the Federal Agency Data Breach Protection Act today, which would require victims of federal data breaches to be notified in a timely manner and mandates agencies have practices and standards in place to do that.

A new YouTube video shows a group of union protesters scouring through trash outside several Chase bank branches in New York, discovering documents with customer information that could be used for identity theft.