When software is installed on information systems, it is important that it is controlled to help ensure compliance is maintained with...

When managing infrastructure, businesses’ need to ensure that infrastructure device management controls are addressed and implemented. It...

Protect your Internal Information Systems If organizations have internal information systems that connect to any external systems in...

When outsourcing development and external systems, businesses should be careful to outline the obligations and requirements of those...

The string of to-do’s when developing, acquiring, reviewing, and finally accepting a new system can be confusing. Here are a few pitfalls...

What Is SDLC and Why Should I Maintain it? In simple terms, a System Development Life Cycle (SDLC) is a project management model that...

Here we will discuss the process to look out for when seeking to protect your organization. Specifically, we will be looking into shared...

One of the primary goals of this Security Program is to protect the confidentiality, integrity, and availability of information assets,...

Email, Messaging applications, and Internet services have dramatically improved the efficiency of business operations over the years....

Security boundary defense solutions should be leveraged to protect organizations from the infiltration or exfiltration of data by bad...

Penetration testing can be a daunting undertaking for organizations, but it is generally required for achieving and maintaining...

If organizations do not effectively maintain regular backups of systems, configurations, and information, they are not likely to have the...

Malicious and mobile code protection is critically important. New variants of malicious code are released every day while mobile code...

Organizations are susceptible to a significant physical data security incident or data breach if physical data and media containing...

Organizations need to ensure they effectively address the security of information assets that are taken off-site. It may be difficult to...

The lack of basic power and telecommunications cabling security controls, along with protective measures, could cause unexpected outages...

Equipment should be protected from power failures and other disruptions that may be caused by failures in supporting utilities....

Organizations should ensure that before equipment (e.g., servers, network infrastructure, information systems) is installed, the location...

In the first work week of the year, I’ve seen several different articles and blog posts about predictions and what to expect from an IT...

External and environmental threats can cause unexpected damage to information assets, as well as the facilities in which they reside....