Personal tools
You are here: Home Compliance Community Expert Articles

Publications from the Pro's

Articles, papers, reviews and overviews written by our team.

Common Information Security Threats Within Our Organization

By - Andrew Vesay CISSP

Security and compliance have become a must in boardrooms around the world. At the same time the lines between an organization's internal and external network have been blurred by a plethora of access mechanisms, mobile devices, and web based services. Our users are increasingly tech-savvy and many business services are available to them with a click of the mouse. All of these factors are making the job of protecting sensitive information more and more challenging.

Internal information issues are not always caused by malicious external parties, more often than not it is an insider purposefully or accidentally compromising internal information security. In this presentation we will look at the information security challenges around keeping our internal information safe. The presentation will touch on the key concepts of assessing internal information security risks and how security professionals profile potential impacts to information confidentiality, integrity and availability. The session will provide some practical examples of internal information threats and discuss control strategies for managing these risks.

This presentation was developed for an ISACA eSymposium on Data Protection and Data Security.

You can download an updated version of the presentation slides here.

You can view the recorded webcast from the ISACA eSymposium website. From this site you can view this presentation and other presentations that were part of the eSymposium.

Download this presentation

 

The Four Big Problems of IT Compliance

By - Andrew Vesay CISSP

IT compliance is a challenge facing many businesses today. In this article we break down the four major challenges surrounding IT compliance.

Download this paper

Authentication - Who Are You? Can You Prove It?

By - Andrew Vesay CISSP

Identifying users is a critical component of compliance and security. This newsletter article provides an overview of how authentication works and the issues facing businesses today.

Download this article

Written for - Compushare, Inc.

Web Application Security

By - Andrew Vesay CISSP

Security issues extend beyond the network into the application level. Close inspection of application programming for the web reveals many serious and significant issues that must be addressed.

Download this article

Written for - Compushare Inc.

Information Security Landscape

By - Andrew Vesay CISSP

Information Security is moving from the tech back room to the board room. This newsletter article discusses some of the things driving Information Security to the forefront of business planning.

Download this article

Written for - Compushare, Inc.

 Information Security in Today's Business World

By - Andrew Vesay CISSP

An overview white paper on Information security basics.

Download this paper

Written for client - Rockefeller Group Telecommunications

Practical Guide to Disaster Recovery

By - Andrew Vesay CISSP

An overview of Disaster Recovery and Business Continuity topics.

Download this paper

Written for client - Rockefeller Group Telecommunications

 

 

Document Actions