Web Single Sign-On | IANS - Information Security, Regulatory Compliance & Risk Management

05/14/2009 | Web Single Sign-On

NAC Vendors Course Correct to Meet Market Needs

NAC is a segment of security where every industry professional has a different definition of what NAC is and what it should do. IANS understands NAC as a product which enforces an organizations configuration and integrity standards before a visitor connects to a host and monitors requirements after a visitor is connected, while responding to connections that fall out of compliance

11/17/2008 | Web Single Sign-On

Malware and Spear Phishing: Practical Attack Defenses

Malware and spear phishing attacks against commercial enterprises, government agencies, and universities have become highly sophisticated and coordinated by international crime organizations and nation-states with high-level expertise and tremendous financial resources.

09/17/2007 | Web Single Sign-On

Summary of Findings: New England Information Security Forum

While the fear of leakage of sensitive data is on the minds of all IT security professionals and executives, there are no easy solutions for this enormous problem. Recommendations include developing a data security plan (which few have), and focusing first on protecting the structured data in one (or a few) key databases. Before buying add-on security solutions, delegates are

11/07/2006 | Web Single Sign-On

Microsoft’s NAC Strategy

Industry: Software Solution Provider or Product: N/A Background Info/Context: Following Code Red, Slammer, and Blaster, Microsoft changed its thinking on security. This led to Windows Service Pack 2 and creation of a system for IPSec enforcement of security policy. Microsoft established a goal to ship a network access protection product by the fall of 2004. Now in the fall of 2006

11/07/2006 | Web Single Sign-On

Why We Chose ForeScout

Industry: Healthcare Solution Provider or Product: ForeScout Background Info/Context: This small organization had a budget of just $30,000 and limited resources to select and implement a NAC. They had nothing in place so they weren’t interested in an optimal solution; just a good, quick, effective solution that worked with their limited budget. Problems: The key problems this

02/28/2005 | Web Single Sign-On

Proving the Value of Vulnerability Management

Overview To manage vulnerabilities, security professionals should take a tiered approach by getting buy-in from senior management to make vulnerability management a priority and by training the organization to minimize exposure to vulnerabilities. Tie dollars to the benefits of security and vulnerability management, using a return on investment argument when making purchases.

05/01/2003 | Web Single Sign-On

Summary of Findings: Lone Star Information Security Forum

The 2007 Lone Star Information Security Forum is the Institute’s 29th two-day, end-user event. To open each forum, the Institute’s Managing Partners share with the assembled delegates their view on the current state of the IT security profession based on interactions with end-users at prior Institute events.