Blog Elements

Half Sized Blog Element (Single Author Style)

Half Sized Blog Element (Multi Author Style)

Database Security with Application Security, Inc.

2010-11-23/0 Comments/in Review, Video/by SecurityOrb_Staff

The critical first step in any IT audit is to identify all assets and applications residing on the network… AppDetectivePro’s Database Discovery module provides complete visibility into the inventory of databases on any network. Simply connect a laptop running AppDetectivePro to the network, and without agents, database logins, or other knowledge, the solution will scan and identify every database by vendor and release level.

Virtual Seminar and Tradeshow: Security and Compliance in the Cloud

2010-11-23/0 Comments/in Training/by SecurityOrb_Staff

Cloud computing is opening up new areas of management and compliance issues for CIOs, IT managers, auditors and compliance and risk officers. Attend this FREE educational event, earn up to 4 CPE hours and get practical, indepent advice and best practices on how to define, defend and regulate cloud environments. For event details and to register, click here.

Database Security with Application Security, Inc.

2010-11-23/0 Comments/in Review, Video/by SecurityOrb_Staff

Virtual Seminar and Tradeshow: Security and Compliance in the Cloud

2010-11-23/0 Comments/in Training/by SecurityOrb_Staff

Full Sized Blog Element (Big Preview Pic)

Database Security with Application Security, Inc.

2010-11-23/0 Comments/in Review, Video/by SecurityOrb_Staff

Database Security and Compliance Efforts Start with a Scan

Manually assessing the security posture of a database is a complex task that requires expertise and significant resources. Manually measuring and demonstrating compliance with industry and government regulations is even more difficult, but by equipping your staff with AppDetectivePro™, you will immediately and significantly reduces the complexity of these tasks. IT auditors and advisors, regardless of skill level, will be enabled to perform easy and repeatable database security assessments and generate compliance reports. AppDetectivePro leverages AppSec’s SHATTER knowledgebase, the industry’s most complete collection of database vulnerability and misconfiguration checks to ensure the most comprehensive database assessment possible. The solution consists of three distinct functional modules:

Database Discovery
Database Vulnerability Assessment
User Rights Review

Database Discovery

With a policy driven scanning engine, AppDetectivePro utilizes its policy-driven scanning engine to identify vulnerabilities and misconfigurations. Issues identified include default or weak passwords, missing patches, poor access controls, and a host of other conditions. A flexible assessment framework allows auditors to choose between an outside-in, “hackers eye view” of the database, which requires no credentials, or a more thorough inside-in scan which is facilitated through a read-only database account. AppDetectivePro includes built-in templates to satisfy the requirements of security best practices and various regulatory compliance initiatives. Compliance standards covered include DISA STIG, NIST 800-53 (FISMA), PCI DSS, HIPAA, GLBA, Sarbanes-Oxley, ISO 17001/17799, CoBIT, and Canada’s MITS.

You can find more information here.

[media = 8]

Virtual Seminar and Tradeshow: Security and Compliance in the Cloud

2010-11-23/0 Comments/in Training/by SecurityOrb_Staff

Cloud computing is opening up new areas of management and compliance issues for CIOs, IT managers, auditors and compliance and risk officers. Attend this FREE educational event, earn up to 4 CPE hours and get practical, indepent advice and best practices on how to define, defend and regulate cloud environments. For event details and to register, click here.

When: Wednesday, 8 December 2010, 8:30am – 4:30pm (EST) (13:30 GMT)

Where: Your computer

ISACA has teamed up wtih SearchCompliance.com and SearchSecurity.com to give you direct access to renowned security and compliance experts and qualified senior IT peers.This online, all-day event offers several perspectives from industry leaders on managing risk and compalince in the cloud. Plus, you can explore the networking lounge and exhibit hall in between sessions where you can visit exhibitor booths, and interact with other ISACA members and ISACA staff.

The keynote, Cloud Computing: Building Trust in the Cloud, will be presented by Dave Cullinane, Vice President and Chief Information Security Officer of eBay. In his keynote, he will discuss how to securely leverage the extraordinary benefits of cloud computing.

In addition to the keynote, there will be three Educational Sessions presented by industry leaders that will explore cloud computing: