BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Chief Compliance Officers: Let Retina Threat Analyzer do the heavy lifting

Posted June 20, 2012    Peter McCalister

In a recent article on Dark Reading, The Compliance Officer’s Dirty Little Secret, the topic of how Chief Compliance Officers (CCO) form their decision making process(es) around compliance was brought to light. One major decision CCOs are responsible for making is whether to pay the fines associated with non-compliance versus the cost of achieving compliance. I’m sure there are many debates that can go back and forth of the efficacy of either case depending on industry, regulatory requirements, the degree of a breach, etc. but in MANY cases the former is far more costly than the latter when you think of legal risks from class action lawsuits (incurred following a breach), cost of notification to customers, brand image, potential stock price fallout not to mention the cost of consultants and technology to remediate the problem.

Retina Insight provides organizations with an in-depth enterprise view so compliance teams can make informed decisions on where their highest risk areas are located, as provided in our Threat Analyzer Asset Risk Heat Map. In the example below we see across the organization that the Cricklewood data center presents the highest risk (based on Total Asset Score) within the organization and is a natural starting point for corporate risk reduction.

Continue reading the entire article originally posted here.

Leave a Reply

Additional articles

Are Your Data Security Efforts Focused in the Right Area?

Posted January 28, 2015    Scott Lang

Vormetric Data Security recently released an insider threat report, with research conducted by HarrisPoll and analyzed by Ovum. Based on the survey responses, it is apparent that there is still a great deal of insecurity over data. However, the results also show that there may be misplaced investments to address those insecurities. I will explain…

Tags:
ghost

GHOST Vulnerability…Scary Indeed

Posted January 28, 2015    BeyondTrust Research Team

A vulnerability discovered by Qualys security researchers has surfaced within the GNU C Library that affects virtually all Linux operating systems. The vulnerability lies within the various gethostbyname*() functions and, as such, has been dubbed “GHOST.” GHOST is particularly nasty considering remote, arbitrary code execution can be achieved. In an effort to avoid taxing DNS lookups, glibc developers introduced…

Tags:
,
dave-shackleford-headshot

Your New Years Resolution: Controlling Privileged Users

Posted January 27, 2015    Dave Shackleford

Is 2015 the year you get a better handle on security? The news last year was grim – so much so, in fact, that many in the information security community despaired a bit. Really, the end-of-the-year infosec cocktail parties were a bit glum. OK, let’s be honest, infosec cocktail parties are usually not that wild…

Tags:
, , ,