« Don't Be The Next CyberCrime Headline! | Main | Finding log gems among the norm in Sendmail »
Information Security Must Evolve
Speaking to the need for Information Security to evolve, Amrit makes three key points:
- The threat environment has become increasingly dangerous.
- Business is leveraging the Internet for innovation, moving away from brochure-ware to service delivery via the web. SaaS, SOA, web services, are creating complex and dynamic environments in which traditional methods of security and optimization no longer provide the same value to the organization.
- Regulatory compliance pressures are forcing organizations to gain greater visibility into their security programs.
He goes on to deliver one of the key answers to responding to these challenges -"Process is as important, actually even more so, than technology -start with process than add technology to support strong process, not the other way around".
This is more than right. It's critical to success. Most security teams we speak to are dealing with three levels of "compliance". First, regulatory (SOX, HIPAA, GLBA...). Second, industry and business (PCI...) and third, process and control. Executing against each of these individually would require an unbelievable and unsustainable effort. The reality is that compliance can be addressed best by starting with processes. It should be a "write once, run everywhere" activity.
This is the primary reason we're not just addressing individual mandates through our LogLogic Compliance & Control suites but also best practices and controls such as COBIT, ITIL and ISO. And, why our platform is a SOA that facilitates sharing of information and intelligence with other applications and systems. In doing so, we're getting directly at Amrit's final point: "Security can no longer exist in a silo or a vacuum, security programs and security professionals must align themselves with the business or face extinction."
Posted November 13, 2006 in LogMatters | Permalink
TrackBack
TrackBack URL for this entry:
http://www.loglogic.com/mt/mt-tb.cgi/104
November 2007
| Sun | Mon | Tue | Wed | Thu | Fri | Sat |
|---|---|---|---|---|---|---|
| 1 | 2 | 3 | ||||
| 4 | 5 | 6 | 7 | 8 | 9 | 10 |
| 11 | 12 | 13 | 14 | 15 | 16 | 17 |
| 18 | 19 | 20 | 21 | 22 | 23 | 24 |
| 25 | 26 | 27 | 28 | 29 | 30 |
Categories
Archives
- November 2007
- October 2007
- September 2007
- August 2007
- July 2007
- June 2007
- May 2007
- April 2007
- March 2007
- February 2007
- January 2007
- December 2006
- November 2006
- October 2006
- September 2006
- August 2006
- July 2006
- June 2006
- May 2006
- April 2006
- March 2006
- February 2006
- January 2006
- December 2005
- November 2005
- October 2005
- September 2005