Posted on July 1st, 2009 by Jackie Gilbert
Today during the Gartner Information Security Summit, SailPoint participated in a very interesting program put together by Gartner called the CISO Boardroom – an invitation-only forum designed to help CISOs and CSOs explore key IT security issues and strategies with their peers. We participated in a round table discussion where a vice president of enterprise [...]
Filed under: Customers, Identity Governance, Risk Management, SailPoint | 1 Comment »
Posted on June 30th, 2009 by Jackie Gilbert
Yesterday, we kicked off the first day of Gartner’s Information Security Summit (#GartnerSecurity) in Washington, DC with Chris Byrnes’ keynote, “Your Role in Information Security.” A major theme throughout the presentation was the growing emphasis on business risk management globally. Gartner predicts that in the next 18 months, the amount of legislation and regulation affecting [...]
Filed under: Risk Management | No Comments »
Posted on May 29th, 2009 by Jackie Gilbert
I read an interesting piece in InfoWorld by Roger Grimes, “A Sweet Solution to the Insider Threat.” The premise of Grimes’ article is that companies should use computer decoys, or “honeypots,” to catch workers attempting to login to resources they have no business reason for accessing. Honeypots by their very nature are fake computers that [...]
Filed under: Identity Governance, Insider Threats/Security Breaches, Risk Management | No Comments »
Posted on April 23rd, 2009 by Jackie Gilbert
I’ve been at the RSA Conference all week, so I just noticed an intriguing news item from The Register on Monday. The article details survey results from an unnamed security vendor, concluding that one-third of workers are open to bribes for data theft. It’s beyond the scope of this blog to speculate on the statistical [...]
Filed under: Identity Governance, Insider Threats/Security Breaches, Risk Management | No Comments »
Posted on April 16th, 2009 by Kevin Cunningham
Verizon Business just posted the results of their 2009 Verizon Business Data Breach Investigations study this morning. This is Verizon Business’ second annual study, and it highlights some interesting – and unfortunately not surprising – statistics. Of the 285 million compromised records that Verizon studied, 93 percent occurred in the financial services sector (keep in [...]
Filed under: Compliance, Identity Governance, Risk Management | No Comments »
Posted on March 16th, 2009 by Jackie Gilbert
Recently, an iGoogle “quote of the day” made me stop and think. Usually, I read the quotes, smirk, and move on. But this one was different: Technology is dominated by two types of people: those who understand what they do not manage, and those who manage what they do not understand. – Archibald Putt (a [...]
Filed under: Identity Governance, Risk Management | No Comments »
Posted on March 13th, 2009 by Kevin Cunningham
For the past several weeks, I’ve been racking up the frequent flier miles, canvassing the identity management marketplace and talking with customers from various industries and geographies. My overwhelming conclusion from these meetings is that the concept of identity governance has rapidly evolved over the last 12 months from an auditor’s concern to an urgent [...]
Filed under: Compliance, Customers, Identity Governance, Risk Management | 1 Comment »
Posted on February 25th, 2009 by Jackie Gilbert
Heads up – there’s been another “massive” credit card security breach – the 3rd such incident in recent months. We don’t know which company suffered the breach, but it appears to be another card payment processor. We’re still in the “whisper period” as some call it – Visa and MasterCard have begun notifying banks, and [...]
Filed under: Identity Governance, Insider Threats/Security Breaches, Risk Management | No Comments »
Posted on February 23rd, 2009 by Darran Rolls
Lately I’ve been talking to a lot of customers and prospects about how to proactively approach risk mitigation with identity-related technologies. In today’s climate, I see an ever increasing need for a new approach to managing identity and the need for a more “directed” focus for the deployment of identity management infrastructure. Over the past [...]
Filed under: Identity Governance, Risk Management | No Comments »
Posted on February 17th, 2009 by Mark McClain
I just read a Wall Street Journal article by Bruce Schneier, the CTO of BT and a renowned security author. The piece, “Thwarting an Internal Hacker,” is timely given recent security breaches hitting the news (including Heartland Payment Systems and Fannie Mae, which he references) coupled with the economy. I’ve already written about how the [...]
Filed under: Identity Governance, Insider Threats/Security Breaches, Risk Management, User Access Control | No Comments »