Articles on Risk Management

• Cloud Cloud Security Attestation Beyond SAS 70
  SAS 70 was designed for financial systems, not security certification—it only confirms controls the provider paid auditors to evaluate. Better options include SysTrust (prescriptive control set), ISO...
• Risk Management Protecting Corporate Data in the Age of Consumerization
  Employees demand consumer devices and services at work—younger employees won't use last year's tech or carry second laptops. They'll circumvent rules or leave for trendier companies. Security must...
• Assessments 5 Security Assessment Steps for Mid-Sized Firms
• Assessments Security Assessment Tips: Where the Risks Are
• Networking Firewall Deployment for Multitier Applications
• Research Auditing UNIX Systems: A Case Study