Page 111 - White Papers - Omnibus healthcare information security

Sponsored by Bit9

Windows XP End of Life Handbook for Upgrade Latecomers

April 8, 2014, is the end-of-life date for Windows XP and Microsoft Office 2003. After that date, there will be NO MORE security updates and critical patches available unless you pay the high cost of out-of-band support. You considered upgrading to Windows 7 or Windows 8 but your hardware won't run these operating...

Sponsored by Bit9

The Convergence of Security and Compliance

This new white paper explains how a single, positive security solution, such as Bit9, facilitates the convergence of compliance and security - one agent that provides visibility, detection, response and protection and can automate and manage compliance for PCI-DSS, SOX, HIPAA, FISMA, GLBA, GPG 13, NERC CIP and other...

Sponsored by Bit9

Endpoint Security Demands Defense In-Depth and Advanced Analytics

When it comes to endpoint security, large organizations find themselves in a difficult situation. Most enterprises have host-based security software (i.e., antivirus software) installed on almost every PC and server, yet their IT assets are constantly attacked - and often compromised - by sophisticated malware and...

Mobility on Hold: Get Back on Track with Mobile Risk Mitigation

Mobile banking continues to gain momentum, growing faster than any other delivery channel to date. Many financial institutions want to expand capabilities in the mobile channel, but are concerned about security. Given the evolving threats, mobile innovation has outpaced the industry's appetite for deploying new...

GRC Reference Architecture

Governance, Risk and Compliance (GRC) represents a business oriented approach to establishing ownership and accountability throughout the organization to improve decision making. While this may seem straightforward, establishing a GRC program within an organization is not a simple task. It is also not a new...

Building an Intelligence-Driven Security Operations Center

The openness of today's networks and the growing sophistication of advanced threats make it almost impossible to prevent cyber attacks and intrusions. And even with the rise in cyber attacks with debilitating effects continue to impact the everyday operations of organizations industry-wide, security teams face ...

Getting Real About Security Management & Big Data

When dealing with "Big Data," the volume and types of data about IT and the business are too great to process in an ad hoc manner. Moreover, it has become increasingly difficult to secure meaningful information from the data being collected. Despite significant investment in information security, attackers appear...

Managing Web Security in an Increasingly Challenging Threat Landscape

The rise of mobility, BYOD and social networking is increasingly driving cybercriminals to exploit vulnerabilities in browsers and mobile apps. Every day more than 30,000 mostly legitimate websites become infected with malware. From drive-by downloads to spear phishing to XML injection, web-borne threats represent a...

Phishing 2.0 - How Web Security Can Protect Your Company

Today's spear-phishing attacks are highly targeted, technically sophisticated and represent a real threat to data security. Attackers can leverage information gleaned from social media to tailor messaging to individual targets, and can convincingly imitate legitimate senders. A successful attack compromises the...

Are Websites Still the Path of Least Resistance for Cybercriminals?

Even today, strange as it sounds, far too many websites have no protection at all. In organizations where developers are evaluated primarily on their ability to ship code on time, there is often a lack of incentive to adopt secure coding practices. Website protection services can quickly add measurable security to...

Leverage Continuous Monitoring to Achieve PCI-DSS Compliance

In the financial services industry, in-depth log analysis is essential to maintaining enterprise-wide security and meeting compliance requirements, including PCI-DSS regulations. In addition to being required to meet compliance standards, continuous monitoring of customers' financial data activity logs helps to detect...

DDoS Mitigation Strategy: A Two-Phased Defense

DDoS is a complex problem that represents a serious risk to the enterprise, and effective mitigation demands extensive preparation before the attack arrives. Organizations need a strategy that keeps local connections up at the beginning of an attack, and then cleans the upstream traffic prior to it reaching the...

Sponsored by Bit9

Java Vulnerabilities Report: Write Once, Pwn Anywhere

Java's ubiquity and vulnerabilities have made it the technology most frequently exploited by cyber attackers. So it is timely to closely explore the breadth and state of its deployment among enterprises. Bit9 undertook an examination of these questions, leveraging endpoint data across many organizations. Download...

Sponsored by Bit9

Close the Mac Security Gap in Your Enterprise

As Mac products grow in popularity in the enterprise, they are becoming increasingly attractive targets for cybercriminals. Advanced attackers are always looking for enterprise infrastructure vulnerabilities, and their knowledge of how to exploit Mac endpoints has grown. With this growth comes a new challenge for...

Essential Technology for Mobile Workforce Security

The number of devices in use by the enterprise is difficult to measure because of the large number of personal, unsecured and undocumented devices brought in by employees. Legacy approaches to mobile security are outdated at best and limiting at worst. It's widely agreed they don't fit today's mobile business...