The Data Lifecycle goes through 5 steps: creation, usage, transport, storage and destruction.
Archive for the ‘risk assessment’ Category
Data Lifecycle Management: How to reduce risk (part1)
Posted: 21st April 2010 by admin in Compliance, Security Assesment, Supplier Security, Unstructured Data, risk assessmentTags: data lifecycle, Data management, risk reduction, security, Technology
Comments Off
Washington State implements PCI law
Posted: 30th March 2010 by admin in Compliance, Could Computing, HIPAA, PCI, Security Assesment, risk assessmentTags: Data security, Minnesota, Payment Card Industry Data Security Standard, security
Comments Off
Image via Wikipedia
PCI laws are expanding around the country. Washington State is the latest to add a law to their books. Washington state follows Nevada and Minnesota in implementing Payment Card Industry Data Security Standard (PCI), the law is HB 1149. It changes the breach notification law they already had on the books. The key [...]
What are the challenges with protecting electronic documents?
Posted: 29th March 2010 by admin in Compliance, Corporate Stupidity, Security Assesment, antivirus, risk assessmentTags: Adobe Systems, Apple, Data loss prevention products, Document management system, malware, security
Comments Off
Image via Wikipedia
We have seen a lot of problems with Adobe vulnerabilities. Adobe has been getting beat up with all the negative publicity in the past few months. Apple is restricting access to Adobe on their devices. Has anyone tried their remote desktop sharing? I wonder if some vulnerability will be release in that application. [...]
FTC’s Additional Rules for HIPAA Security
Posted: 23rd August 2009 by admin in Compliance, Government Security, HIPAA, Security Assesment, risk assessmentTags: Federal Trade Commission, Health care, Health Insurance Portability and Accountability Act, security rule
Comments Off
FTC’s Additonal Rules for HIPAA Security
The Federal Trade Commission (FTC) recently issued a rule which gives more scope to the data breach notification rules as part of the Health Insurance Portability and Accountability Act (HIPAA). The addition targets companies that provide health info in an online storage facitlity. Things like Google Health or Healthvault would [...]