Home >

>

Auditing

An Information Technology (IT) audit or information systems (IS) audit is an examination of the controls within an entity's Information technology infrastructure. These reviews may be performed in conjunction with a financial statement audit, internal audit, or other form of attestation engagement.

Results 1 - 25 of 83 matches Sort Results By : Published Date | Title | Company name    
Automated Penetration Testing: Completing the Vulnerability Management Framework
By : Aomega Published Date: Nov 06, 2006
Recent regulatory additions require that companies take proactive measures like penetration testing to enforce data privacy and integrity.  By deploying a distributed model companies can execute testing from different security levels which is important in challenging posture based on level of access.
Download Now
Aomega
Effective Solutions for Firewall Management
By : Athena Security Published Date: Nov 20, 2009
Making routine changes to the infrastructure should not be an additional source of stress, but with the additional roles of monitoring and troubleshooting often times it is. The reasons for this added stress are described in this paper along with an effective solution for addressing these problems using SolarWinds Orion Network Configuration Manager (NCM) and Athena FirePAC for firewall analysis.
Download Now
Athena Security
Effective Solutions for Firewall Rule Cleanup
By : Athena Security Published Date: Nov 20, 2009
This paper presents some techniques to cleaning up the rule base along with an effective solution that addresses these automatically for you using Athena FirePAC for Firewall Rule Cleanup.
Download Now
Athena Security
Secure Remote Vendor Access to the Enterprise Data Center
By : Axeda Corporation Published Date: Sep 06, 2007
Enabling IT equipment vendors to perform remote service on your data centers helps maximize uptime and lower TCO—but at what risk? Dial-up modems and VPNs introduce security vulnerabilities and lack sufficient auditing capabilities—making it virtually impossible to track external access and maintain data center security. Download this white paper to learn how you can manage security risks, lower service-related costs, achieve regulatory and internal compliance, and more.
Download Now
Axeda Corporation
BMC Service Automation: The next step in the evolution of Business Service Management
By : BMC ESM Published Date: Nov 06, 2009
As you know, automation is a critical component in achieving long-term IT savings. We've compiled a few resources to give you an overview of the benefits of service automation and the technology behind our comprehensive solution.
Download Now
BMC ESM
CA Siteminder Web Access
By : CA Published Date: Oct 28, 2008
CA SiteMinder Web Access Manager provides policy based authentication and authorisation, supports multiple advanced authentication techniques, identity federation, and single sign on for Web applications. Traditionally, access management infrastructure has been developed separately for each Web application, leading to duplication and limited control and audit capability. SiteMinder provides centralised capabilities plus extensive additional facilities. Butler Group is impressed with its fine-grained authorisation capabilities, support for advanced authentication techniques, support for a good range of user directories, identity federation based on established standards, and the scalable architecture. Overall, SiteMinder is an impressive solution for mid-sized and large companies who use numerous Web applications to deliver sensitive or business critical data.
Download Now
CA
Server Resource Protection: A Critical Element of IT Security
By : CA Published Date: Oct 27, 2008
This white paper analyzes common vulnerabilities in protecting server resources and suggests a solution based on Server Access Management and Auditing. Working together, server access management and auditing can improve regulatory compliance and data privacy, provide greater IT accountability, partition access to superuser and root accounts, assign more granular responsibilities to individual IT people, monitor activities, and correlate actions across multiple systems.
Download Now
CA
Host Access Management with CA Access Control
By : CA Published Date: Mar 10, 2008
Your organization relies on servers to store and access to your most critical information resources. CA Access Control is a product that centralizes control and distributed enforcement of appropriate role-based access to sensitive server resources.
Download Now
CA
UNIX Host Access Management with CA Access Control
By : CA Published Date: Jul 25, 2007
UNIX and Linux systems have inherent security issues that pose high risk to the business objectives of complying with regulations and data protection.  To reduce security risks, you need full superuser containment and the ability to enforce strict access control to critical system resources through centralized and automated policy management across different platforms.
Download Now
CA
CA Access Control for Windows
By : CA Published Date: Feb 07, 2007
Learn how CA Access Control, a independent security system, complements the native Windows operating system and can enable a strong defense-in-depth security practice for your organization.
Download Now
CA
Leveraging Automation to Quickly Reveal Vulnerabilities
By : Cenzic Published Date: Nov 30, 2006
With web applications constantly evolving, finding vulnerabilities is a challenging, costly and time-consuming undertaking.  Find out how Cenzic's powerful security solutions help information security teams quickly identify problems, regularly assess web application security strength and ensure regulatory compliance.
Download Now
Cenzic
Cenzic: Application Security for Financial Institutions
By : Cenzic Published Date: Nov 29, 2006
The Cenzic Hailstorm® solution helps financial institutions comply with GLBA and other laws by automating risk assessment, checking for vulnerability to the injection of malicious code into Web servers, automating the testing of code and key controls during the software development process, and helping them respond to new vulnerabilities in the software development lifecycle.
Download Now
Cenzic
Securing Web Applications: The Time Is Now
By : Cenzic Published Date: Nov 21, 2006
Enterprises need to utilize software testing that can automatically review applications for security problems. This document examines the market drivers and technology associated with software security code review products and discusses how Cenzic is addressing this urgent need.
Download Now
Cenzic
Evaluating a Storage Security Solution
By : Decru Published Date: Apr 23, 2007
Company data is vulnerable to threats from - insiders, unauthorized access to data, data backup, off-site mirroring - just to name a few. Encrypting data at rest, on tape or disk, significantly mitigates these threats. This document provides guidance into some of the factors a company should consider when evaluating storage security technology and solutions.
Download Now
Decru
Understanding and Managing Security Audits
By : Ecora Software Published Date: Aug 15, 2007
Better preparation means better results – Learn how to prepare for an audit; how to develop a self-audit process; how to develop a security template; and much more.
Download Now
Ecora Software
Practical Guide to Sarbanes-Oxley Compliance
By : Ecora Software Published Date: Aug 15, 2007
Learn about the Sarbanes-Oxley regulatory background and its impact on IT departments. This document provides information pertaining to access issues, change documentation, disaster recovery planning and illustrations of key audit-ready reports.
Download Now
Ecora Software
EvolveWare’s S2T Technology - Automated Software Analysis, Documentation & Transformation
By : Evolveware Published Date: Nov 06, 2006
Software analysis, documentation, migration, upgrades or replacements are daunting and risky endeavors because they are primarily manual and time-consuming. EvolveWare’s S2T Technology provides a solution to these problems with tools that automate the process up to 90%, thus reducing the time and cost of such initiatives by as much as 40-60%.
Download Now
Evolveware
A CISO's Guide to Securing Open Source Software
By : Fortify Published Date: Nov 19, 2008
For a CISO, open source introduces a new source of risk and unique security challenge: how do you influence developers over whom you have no direct management control? Jennifer Bayuk, former CISO of Bear Stearns, provides insight on best practices for evaluating, deploying and managing open source code.
Download Now
Fortify
Software Assurance - An Executive Discussion on Securing the Enterprise
By : Fortify Published Date: Nov 19, 2008
While investments to secure the enterprise continue to rise, breaches into company systems and data are skyrocketing. These cyber crimes are consistently debilitating organizations operations, reputations and ultimately, viability. Today’s CEOs are demanding aggressive strategies to protect their business. CIOs and CSOs are working together to employ proven Business Software Assurance approaches across the enterprise to stay ahead of constant threats.
Download Now
Fortify
Dig Your Own Hole - 12 Ways to Go Wrong With Java Security
By : Fortify Published Date: Nov 19, 2008
This webinar explores 12 of the most common security traps in Java by examining the causes of security failures in modern Java–based applications. Approaching security with an “outside in” style, we look at vulnerabilities from a developer’s perspective, focusing on the source code.
Download Now
Fortify
How Europe's largest e-commerce business secures its applications
By : Fortify Published Date: Nov 19, 2008
Adrian Asher, Chief Security Officer at Betfair, an online UK betting exchange explains how he manages a “culture of security” and protects the Betfair brand in this 20-minute candid interview.
Download Now
Fortify
Howard Schmidt, Former CSO for Microsoft and eBay and Former White House Cyber Security Czar
By : Fortify Published Date: Nov 19, 2008
With an extensive background in police, military, government, and industry security, Howard Schmidt explains how to respond to the changing landscape of cyber threats and how business leaders are helping set the standards for application security. He then profiles industry role models who are setting the standard for application security.
Download Now
Fortify
Free Trial Download for GFI MailArchiver for Exchange Server
By : GFI Published Date: Jul 20, 2009
GFI MailArchiver is the #1 email archiving, management and compliance solution for Exchange Server. Perfect for the needs of SMBs, GFI MailArchiver is easily to install and requires minimal administrative effort.
Download Now
GFI
Using GFI LANguard Network Security Scanner to Secure Your Internal Network
By : GFI Published Date: Jun 14, 2007
This document shows you how to use GFI LANguard N.S.S. to identify vulnerabilities on your network (excerpt from manual).
Download Now
GFI
How to Perform Network-Wide Security Event Log Management
By : GFI Published Date: Jun 14, 2007

Download Now
GFI
 
Results 1 - 25 of 83 matches Sort Results By : Published Date | Title | Company name    
Home >

>

Auditing

<< Start < Previous 1 2 3 4 Next > End >>

More Topics
SUBSCRIBE FORM
Receive an email alert whenever new research is added into:
Auditing
Enter your email below:

RELATED TOPICS
Best Practices
254 Documents
Business Management
348 Documents
Compliance
284 Documents
Enterprise Software
201 Documents
Governance
31 Documents
HIPAA Compliance
73 Documents
High Availability
88 Documents
IT Management
363 Documents
Project Management
129 Documents
Sarbanes Oxley Compliance
77 Documents
Security
419 Documents
Security Management
292 Documents
Software Compliance
36 Documents

    
 
White Papers powered by
Learn about
White Paper Lead Generation
opportunities