Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

Compliance » Opinions »

  • IT trends and their legal disruptors

    If nothing else will cause CIOs insomnia in 2011 it will be the potential disruptive effects of legal issues that walk hand in hand with this year's IT trends. Most of the lists of trends look the same and there are those that will be proved to be over hyped. One thing that is certain after Wikileaks, Facebook privacy issues and an ever growing cloud on the horizon, it will be a busy year in the courts.

  • Prevent credit card fraud with PCI DSS

    Organised e-crime is on the rise and has grown increasingly sophisticated. The thriving business of buying and selling zero day vulnerabilities has been well documented, as well as the investment in paying developers to develop the malicious code. Although this level of sophistication in compromising systems has increased dramatically, it’s the same fundamental personal data that the perpetrators of these crimes are after; online banking details, personally identifiable information and credit card details.

  • Vendor View: Where's the risk in a recession?

    A financial crisis is not the time for organisations to become lax about the value of their information security assets.

  • A Lesson in Compliance from the Chemical Industry

    In many ways, the role of the CSO is directly tied to business profitability. By creating and enforcing policies that protect human, physical and intellectual assets, the CSO ensures the very integrity of the organization. This link to the bottom line, though, is about to become much stronger--and quite possibly much sooner than anticipated.

  • 1

    3 reasons why employees don't follow security rules

    A recent survey finds employees continue to ignore security policies. (Surprise, surprise.) Here's a reminder about what often is missing in organizations that tempts workers to walk the wrong side of security law.

  • Hole in My SOX

    Please allow me to eat some humble pie. Last year I used one of these columns to call for IT vendors to put a sock in all their pronouncements about Sarbanes-Oxley

  • E-discovery and Records Retention

    At almost every conference I go to, I get asked "How long should I keep documents, e-mail and other records?"

  • A Push to Standards for Network Forensics

    Digital forensics is still a young science. That newness, coupled with the fast-changing world of computer technology, has resulted in a taxonomy and methodology for digital forensics that is poorly defined and confusing to computer security experts and law enforcement

  • Data Breach? Here's What to Do, When and How

    There's been a data breach. It happened 268 times during 2006 (according to the Privacy Rights Clearinghouse). Now, it's happened to your organization. What do you do?

  • Records Retention: Who Cares?

    Few IT professionals want to worry about how long to keep (or how to properly destroy) company records. Many people consider records management even less interesting than watching paint dry. But interesting or not, it's becoming critical. Savvy IT leaders care about records retention. Here's why:

  • Higher Standards

    In the last two decades, we have seen the IS organization mature in its approach to software development.

rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.
Recent comments

HP and IDG news, product videos and resources