THE MAGAZINE

Privacy, security, and hypocrisy.

Top 10 Performing Security Stocks for July 2006

Nancy Flynn, in her new book Blog Rules: A Business Guide to Managing Policy, Public Relations, and Legal Issues, doesn’t waste time in getting to the statistics.

Only one in five of the top 200 merchants is in compliance with the Payment Card Industry (PCI) data security standard more than a year after the standard went into effect to improve security among merchants and credit card processors.

Who’s responsible for restoring the Web after disruption? Also, advice on laptop security, a book on corporate blogs, and slow compliance with the PCI data security standard.

Pressure to comply with regulatory efforts such as Sarbanes-Oxley and Gramm-Leach-Bliley is the key driver of enterprisewide encryption efforts, according to security professionals at 112 financial services companies surveyed by InfoTech, yet just over half of those surveyed said that encryption of data at rest is “a high priority for their organizations.” Less than a third said they think their firms are doing “an adequate job of encrypting data at rest.” Fifty-seven percent plan new encryption efforts in the near future. @ More results from Enterprise Encryption in the Financial Services Sector are available at SM Online.

Who’s responsible for restoring the Web after disruption? Also, advice on laptop security, a book on corporate blogs, and slow compliance with the PCI data security standard.

6

Percentage of organizations able to provide new employees access to all required applications and systems on their first day of work, highlighting the inefficiency of identity access and management practices, according to a study conducted by Computer Associates.

A historic New York university installs modern access control in new dorms.

Part history lesson, part scary bedtime story, Pat Choate’s Hot Property is chockablock with intellectual-property anecdotes spanning the past 200 years.

This is a “toolbox” book about detecting deception. It clearly and logically explains how to prepare for, structure, and conduct interviews and interrogations using the FAINT model.

The goal of the book is to show how to use “smart technology” (which, regrettably, the authors never define) to enhance computer security.

The book features the authors’ view of the interplay among fraud specialists, corporate security professionals, and IT security practitioners. Clearly favored are the fraud specialists.