I want to continue the discussion I started yesterday.
Is there a difference between “log management” and a “log management system”?
Posts Tagged ‘Information Security’
One Word Makes A World Of Difference…To Auditors and To Practitioners
Monday, April 7th, 2008Misquotes and Misinformation on PCI DSS Log Management
Sunday, April 6th, 2008I always invite feedback and comments about my articles and books. I like to know what people have found useful as well as hear how I can improve upon my writing and see if there is any more information I could have added or expanded upon.
So, I was interested to see that Dr. Anton Chuvakin read one of my recent PCI DSS logging compliance papers and posted to his blog about it.
However, he made a significant misquote and provided misinformation, which provide good topics for discussion…
Risks & Compliance: Giving Personnel Access to Their Own, And Coworkers’, Records is Generally a Bad Idea
Wednesday, April 2nd, 2008I get several questions from folks about various information security, privacy and compliance issues. I answer all I can. Most of them are great, thought-provoking questions that help to spawn a nice discussion!
I recently got a very good and interesting question from a healthcare provider that all organizations really need to put some thought into. With this in mind, the following is the de-identified message I recieved, along with my slightly edited reply…
Using PCI DSS-Compliant Log Management to Identify Insider Access Abuse
Tuesday, April 1st, 2008Today I just finished writing the last of a three paper series, “The Essentials Series: PCI Compliance,” in which I discuss and demonstrate three ways in which meeting the PCI DSS requirements for logging also benefits businesses by putting into place log management practices that:
This Is Business Continuity Awareness Week!
Sunday, March 30th, 2008Business Continuity Awareness Week (BCAW) is March 31st – April 4; at least it is in the UK and throughout Europe.
Business Continuity Awareness Week in Australia is the week from Monday, April 28th – Friday, May 2nd.
Employee Fined $13,096 for Drunken Hacking
Friday, March 28th, 2008Dan Swanson sent me this news story (thanks Dan!), which gave me a chuckle…
“Employee Fined $13,000 for Drunken Hacking”
A rather interesting part of his judgment:
Who Had The Brilliant Idea To Outsource U.S. Passports?
Thursday, March 27th, 2008Okay, after the recent passport files snooping debacle I found today’s news story, “Outsourcing passports ‘profound liability’” very ironic and concerning.
Not only for the reported huge waste of taxpayers’ dollars, but also for the security risks…
The Benefits of a Privacy Ombudsman
Wednesday, March 26th, 2008The folks from Cutter just notified me that an excerpt from a recent article I wrote, “Learning from a Privacy Ombudsman: A Case Study to Establish a Healthcare Services Ombudsman,” will soon be featured in the “Quote of the Day” section of the Cutter Web site.
Here’s the excerpt…
Yet Another Stolen Laptop With Clear Text Patient PII
Tuesday, March 25th, 2008Yet another in a long procession of laptop thefs, “Stolen laptop contains personal info of 2,500 patients“.
Here are the first few paragraphs…