04.10.2005 Sarbanes Oxley for IT Security?
Sarbanes Oxley seems wholly focused on the accuracy of a company's financial records and controls around these records, so where does IT security come into the picture?...

04.10.2005 The Current State of SOX 404
The curtain went down on Act One of Sarbanes-Oxley a couple of weeks ago. In April, the Securities and Exchange Commission (SEC) held an open discussion in Washington and a compliance software vendor, Certus, put on their own conference in San Francisco called Frontlines...

04.10.2005 Stiffer penalties for data theft proposed in India
A committee set up by India's Ministry of Communications and Information Technology to amend the country's Information Technology Act 2000 has recommended tighter provisions and stiffer penalties for data theft...

03.10.2005 Basel II Compliance: Another Burden for European CSOs?
The Basel II capital adequacy framework is a regulatory tool that is designed to help mitigate the risk that haunts financial institutions. Its designers had a clear purpose in mind...

14.09.2005 EU privacy law poses compliance challenge for IT, warns Gartner
Preventing the release of confidential information will be a major challenge for IT directors as they strive to comply with the EU Privacy Directive, analyst firm Gartner has warned...

14.09.2005 Congress looks to pass data breach law
The U.S. Congress will look to pass consumer data protection legislation as it returns next week from its mid-year recess, but if Congress fails to act, a tough new state law will force interstate companies to disclose virtually all data breaches, no matter how small the risk...

11.09.2005 Information-Intensive Regulations
The introduction of several industry and government information-intensive regulations [such as European Union Data Protection Directive, Insurance Portability and Accountability Act (HIPAA), Sarbanes-Oxley Act of 2002 (SOX), the US Patriot Act, Gramm-Leach Bliley Act (GLBA) California SB 1386, Basel II, and others in recent years has made the issue of safeguarding private and sensitive information a major concern for organizations....