Security and Audit

TEC Products

Information Security Software Evaluation Center http://security.technologyevaluation.com/ Information Security RFP Templates http://rfp.technologyevaluation.com/store.asp?catid=6 Information Security Selection Software Evaluation Reports http://rfp.technologyevaluation.com/rfi.asp?catid=SEC

Congress Acknowledges Outdated Banking Laws

by L. Taylor ... If a bank does decide to do an information security audit, the independent security auditor is hired by the bank which can create a conflict of interest. ... http:/.../Research/ResearchHighlights/Security/1999/10/news_analysis/NA_ST_LPT_10_26_99_2.asp - 7k - 1999-10-26 Summary: Following a previous TEC News Analysis on the security of financial transactions, Congress and the White House have agreed to put into place new legislation for monitoring banking, including on-line banking. New banking laws that are more current than today's Depression Era banking laws need to be crafte

Is Your Financial Transaction Secure?

by L. Taylor ... Banks audit themselves. It is up to the Board of Directors of each bank to provide the FDIC with an information technology and security audit report. ... http:/.../Research/ResearchHighlights/Security/1999/10/news_analysis/NA_ST_LPT_10_6_99_1.asp - 9k - 1999-10-06 Summary: The FDIC imposes IT integrity ratings on financial institutions. These ratings are known as URSIT ratings and are not disclosed to the public. There is no easy discernable way to know how safe your on-line transactions are.

Application Security, Inc. (AppSecInc)

... column-level encryption intrusion detection, intrusion detection, intrusion detection security audit, security audit, security audit vulnerability assessment ... http://directory.technologyevaluation.com/profile.aspx?vid=14321 - 5k

The Whys and Hows of a Security Vulnerability Assessment

by L. Taylor ... a form which entitles them to do an Ethical Hacker Penetration test, which is just another name for a Security Vulnerability Assessment, or security audit. ... http:/.../Research/ResearchHighlights/Security/2000/08/research_notes/TU_ST_LPT_08_09_00_1.asp - 23k - 2000-08-09 Summary: TEC outlines the reasons for having a Security Vulnerability Assessment done, how a security vulnerability assessment is performed, what can be gained by enlisting the Security Vulnerability Assessment process, and what you should expect to see in a Security Vulnerability Assessment report. After all, th

HIPAA-Watch for Security Speeds Up Compliance Part Two: Phase III ...

by Laura Taylor ... will like that the safeguards list includes the deliverables that are typically required to pass a FISMA-based security certification and accreditation audit. ... http:/.../Research/ResearchHighlights/Security/2004/08/research_notes/PN_ST_XLT_08_28_04_1.asp - 18k - 2004-08-28 Summary: Once the user defines compliance case boundaries and establishes the data criteria in Phases I and II, the HIPPA-Watch for Security tool begins Phase III by launching the risk analysis engine, and concludes with Phase IV, which generates the report. Using the HIPPA-Watch for Security tool can help an org

Los Alamos Loses Top-Secret Information, Again!

by L. Taylor ... The audit revealed numerous network weaknesses, the ability to be penetrated, and that even the security of closely guarded systems was vulnerable to compromise ... http:/.../Research/ResearchHighlights/Security/2000/06/news_analysis/NA_ST_LPT_06_20_00_1.asp - 8k - 2000-06-20 Summary: Another security compromise occurred at Los Alamos National Laboratories last month when two hard drives containing top-secret nuclear information disappeared. The security mistakes that are being made at Los Alamos are sloppy and unacceptable.

Security Snafu at NetBank

by L. Taylor ... Even if a bank uses due diligence and has periodic security vulnerability assessments by independent auditors, the security audit is only a snapshot in time ... http:/.../Research/ResearchHighlights/Security/1999/11/news_analysis/NA_ST_LPT_11_15_99_1.asp - 6k - 1999-11-15 Summary: Online internet bank NetBank suffered an embarrassing security exposure late last week when a customer discovered he had access to more funds and information than his own.

Human Resource Management Software Evaluation

... check processing and printing; labor distribution and accounting; payroll and regulatory reporting; IRS documentation; security and audit; and automated ... http://hr.technologyevaluation.com/ - 63k - 2009-03-09

Bootcamp for the Pros; Why Ernst & Young Will Lead Security ...

by L. Taylor ... eXtreme Hacking is for all intent purposes, a course on how to audit the security of an information technology network by not only learning what tools to use ... http:/.../Research/ResearchHighlights/Security/2002/01/news_analysis/NA_ST_XLT_01_19_02_1.asp - 16k - 2002-01-19 Summary: Original News & Educational Review Course Summary Ernst & Young, has put together the quintessential course for security engineers looking to improve their ability to protect their organization's website, systems, and network. Dubbed eXtreme Hacking, and carrying a price tag of $5,000 a slot, this co

HIPAA-Watch for Security Speeds Up Compliance Part One: Vendor and ...

by Laura Taylor ... information security officer; information services help desk or technical support; information systems management; internal audit; laboratory; marketing and fund ... http:/.../Research/ResearchHighlights/Security/2004/08/research_notes/PN_ST_XLT_08_27_04_1.asp - 22k - 2004-08-27 Summary: HIPAA-Watch for Security is a tool designed to guide organizations through the risk analysis required by the Health Insurance Portability and Accountability Act (HIPAA) compliance process (US). Relevant Technologies, a leading security research and advisory firm, evaluated HIPAA-Watch for Security to ver