Compliance

Solution Search:
Establish Frameworks to Reduce Costs and Strengthen Security by RSA, The Security Division of EMC
Standards-based compliance frameworks offer comprehensive security aligned to best-practice industry standards for security control such as ISO 27002, ITIL, CoBIT and COSO break down compliance silos to simplify compliance. Standards...
Achieving Compliance in a Virtualized Environment by Tripwire, Inc.
to regulatory and standards compliance, and then prescriptively describe how to mitigate risks. High profile information security failures resulting in the loss of cardholder data, confidential information, and personally identifiable information...
End-to-End Enterprise Compliance, Provisioning and Role Enforcement: With Sun Java™ System Identity Manager and SAP GRC Access Control by Sun Microsystems, Inc.
Identity access management (IAM) and compliance are becoming increasingly more important for the majority of enterprises. This white paper uses two scenarios to describe how a complete end-to-end IAM solution can be configured. Identity access management (IAM) and...
Archiving Email Compliance with Sunbelt Exchange Archiver by Sunbelt Software
Archiving for compliance is an important step in securing your company’s future. Learn how to select and implement an email archiving solution that will minimize the burden on your Exchange server and help to avoid costly legal penalties in...
Achieving Network Payment Card Industry Data Security Standard (PCI DSS) Compliance with Netcordia’s NetMRI by Netcordia
achieve and maintain PCI DSS compliance across your network. This paper describes the ways that Netcordia’s NetMRI can help you quickly achieve and maintain PCI DSS compliance across your network. NetMRI can manage and monitor the many demands of PCI DSS by...
A 15-minute Guide to Enterprise Compliance: Why Regulatory Complaince Is Not Enough by EMC Corporation
describes three categories of compliance and gives an overview of each. This guide describes three categories of compliance and gives an overview of each. Also it explains the risks of focusing solely on regulatory issues, suggests the required...
Strategies for Optimizing IT Operations and Enabling Comprehensive Compliance by CA
and ensuring comprehensive compliance with regulations plays a huge part in running a cost-effective and risk-free business. The combined enterprise goal of simplifying the daily operations of today’s data centers and ensuring comprehensive...
New Application Security Regulations: Building Compliance In by Ounce Labs
regulations, including auditing compliance with the OWASP Top Ten. Through the company’s PCI SmartAudit report, customers are able to automate the assessment of the vulnerability state of their critical applications. Only the Ounce Labs solution has been...
Ensuring PCI DSS Compliance in Virtual and Physical Environments by Tripwire, Inc.
this technology will affect their compliance initiatives. Check out this podcast and learn about: • Best practices for PCI compliance in virtual environments • Tips for managing risk in your company's virtual and physical systems • How virtualization factors into...
Understanding Log Shipping and Its Advantages for Compliance Archiving with Microsoft Exchange Server by Mimosa Systems
with journaling for Exchange compliance archiving. The objective of this white paper is to describe how log shipping compares with journaling for Exchange compliance archiving. Also it shows how Mimosa NearPoint harnessed this new approach to provide a...
Executive Summary: How to Achieve Comprehensive Network Security by Q1 Labs Inc
operations, investigations, and compliance, and compliance reporting. Security practitioners need to think about security management along three separate axes-operations, investigations, and compliance, and compliance reporting. Each of these functions...
Practical tips for unlocking virtualization and cloud computing cost savings by Third Brigade
significant security and compliance risks that aren't addressed by most server security architectures. New server and application protection systems can help dynamic datacenters unlock the cost savings promised by virtualization and better...
Email Archiving: Understanding the Reasons, Risks and Rewards by Proofpoint, Inc.
archiving technology. Regulatory compliance, legal discovery and storage management issues are driving more organizations to consider email archiving. Statistics show that as much as 60 percent of business-critical data now resides in email, making it the...
Quest MessageStats™ by Quest Software
and cost to a migration. E-mail System Compliance MessageStats provides clear indicators of compliance issues throughout an Exchange environment. Top senders, receivers and storage consumers are identified, making productivity issues and potential abuse...
Data Protection Laws and Compliance: A Growing Concern for the Modern Enterprise by Wave Systems
PC, the relevant legal standards for compliance and reasonable care, and finally the extent to which full disk encryption and remote admini... This white paper summarizes the nature of the risk of data breach resulting from a lost or stolen laptop PC, the relevant...
Podcast: Transform Your Desktop with Virtualization: VDI solutions from AMD, HP and VMware by VMware, Inc.
your users while maintaining compliance and security. Traditional desktop deployments are getting increasing more difficult and expensive for IT to manage. Sensitive data sitting on end user machines, roaming laptops and a workforce that's distributed...
Transform Your Desktop with Virtualization: VDI solutions from AMD, HP and VMware by VMware, Inc.
your users while maintaining compliance and security. Traditional desktop deployments are getting increasing more difficult and expensive for IT to manage. Sensitive data sitting on end user machines, roaming laptops and a workforce that's distributed...
Hot Spots: A New Level of Backup Reporting by Storage Magazine
who's being held accountable for compliance with regulatory mandates. Backup reporting has evolved to focus more on providing visibility into storage assets, system vulnerabilities, performance metrics, capacity trending and forecasting, service levels...
8 Steps to Data Security Compliance by Symantec Corporation
but also to demonstrate regulatory compliance. Learn more about the industry’s first integrated solution suite to prevent the loss of confidential data wherever it is stored or used—across endpoint, network, and storage systems. The layered architecture enables...
IT Agility: Balancing Performance, Security and Cost in a Tight Economy by CA
support and regulatory compliance. This session will focus on some of the “Big Questions” in IT and examine best practices driving IT decisions, including: • How to effectively integrate security into the network and application infrastructure • Why...
eBook: 2009 Spending Priorities in the UK by SearchSecurity.co.uk
and the increasing number of compliance regulations over the past few years have refocused IT priorities back on information security for 2009. Check out this expert eBook and learn more about: * How your company can leverage the Data Protection Act, PCI DSS...
Data Loss Prevention: Keeping Sensitive Data out of the Wrong Hands by Symantec Corporation
property, or violating compliance obligations. Learn more about DLP issues, strategies and solutions. More and more, organizations are developing enterprise-wide approaches to governance, risk, and compliance. They create unified control sets that...
Ensure Upgrade Success with PeopleSoft Enterprise Archiving Strategies by IBM
accessibility for data retention compliance and reporting purposes. Many organizations running PeopleSoft Enterprise are now actively considering their upgrade paths in order to stay competitive and take advantage of the newest technology. Removing and...
Talking Storage with Fred Moore by CA
protection, management, compliance, and a variety of other storage topics. IT departments are faced and familiar with the challenges posed by evolving technology and mass arrays of data. New applications and technologies are constantly being...
eBook: Capacity Planning Eases Path to Virtualization by Hewlett-Packard Company
data center changes the game for compliance and e-discovery. Virtualizing any aspect of your data center changes the game for compliance and e-discovery. Make sure you know exactly where your applications are running, that your server controls are intact and...
PCI’s False Dilemma: Code Review or Application Firewall? by Imperva
their Web applications to meet compliance standards, PCI regulations present a choice of two options: Perform a code review or install a WAF, this however is a false choice. For organizations attempting to secure their Web applications to meet compliance...
IBM Software: A Green Strategy for Your Entire Organization by IBM
efficiency, cost containment and compliance. With today's market realities-rising energy costs; shrinking power and space capacity; increased regulatory scrutiny; and higher customer expectations-going green is not only socially responsible, it's an economic...
Oracle Advanced Compression by Oracle Corporation
data growth and storage, regulatory compliance, and application scalability and performance challenges. Oracle Database 11g introduces the Advanced Compression Option to help customers cope with data growth and storage, regulatory compliance, and...
Mainframe Tape Technology: Eight Myths, Realities and Best Practices by CA
shows you how to address regulatory compliance, archiving, risk management, and cost issues. You’ll learn best practices to negate these common mainframe tape misconceptions: • Tape storage enables simple integration and management of multi-vendor technologies...
Change management for the IBM i: Fast tips by Remain Software
can help with Sarbanes-Oxley compliance and how SCM can help you avoid scope creep. Not sure if software configuration management is necessary on the AS/400? John Ghrist will explain some of the benefits of SCM including how greater transparancy in the...
Related Best Practices
How to implement disk-to-disk backups
Indexing and search features allow you to find data into the future -- often in response to compliance regulations or e-discovery requirements. "Integration of these technologies with D2D solutions will enable organizations to better meet SLAs and to apply certain features to data," says Heidi Biggar, analyst with Enterprise Strategy Group.

Be sure to include... More...

FAQ's
What should you do if you can't realistically encrypt everything, like many people are interpreting many of the security regulations to say?
at risk, decide just what you're trying to protect and follow the security/compliance laws and regulations pertaining to your own industry. Then, make informed decisions based on your specific needs and situation. Don't encrypt just because some auditor tell you that it's a best practice. Don't encrypt because a... More...
Why should I encrypt tape?
tapes, security becomes a great concern, particularly when looking at compliance. Take PCI for example, where you are handling private or personal information that can not end up in the wrong hands.

Tape encryption is especially needed in this instance if the tape media leaves your premises, which technically... More...

Who needs a backup reporting tool?
are organizations that want to be proactive about service levels or compliance to jumpstart some of these operational improvements.

Checkout the entire Backup reporting FAQ Any organization that performs a regular backup can use visibility into those processes, which they're not likely to get with a... More...