Robert E. Davis's Blog, page 10

Information security management: access control convergence - part 2

Integrated policies improving access control are needed to increase safeguarding capabilities. Furthermore, due to technological and operational diversity, it is critical to have standard processes to control access that will permit economies of...

Judge orders LimeWire to cease and desist sharing unauthorized music files

As reported in the Wall Street Journal, LimeWire will no longer provide music downloads. According to the filed story, in an order issued on October 26, 2010, “U.S. District Judge Kimba Wood in Manhattan entered a permanent injunction,...

Information security management: access control convergence - part 1

Computer technology continues to advance toward a tiered decentralized world of distributed platforms for entering, processing, and retrieving information. Technological implementations are diverse and complex; however, all IT deployments should...

A Few Fundamentals of Networking Electronically Encoded Data

In this article select information technology (IT) networking concepts are presented to assist users in understanding today's digitally connected world.

Digital Rights Management software

Intellectual property right (IPR) issues affect Information Security Governance as well as Internet Governance deployments through a direct impact on 'Trust Management'. Since knowledge and ideas are an important part of cultural heritage,...

Compliance through Automation: Continuous Monitoring

Commonly, a Management Information System (MIS) is deployed to permit performance monitoring to assess compliance with adopted standards and enable corrective actions and/or process improvements to an entity

Information security management: physical token protection - part 2

As a corollary requirement, when considering physical tokens, functionality is directly related to capabilities. Consequently, physical token appropriateness should be evaluated based on the set of attributes applicable to the existing set of...

Information security management: physical token protection - part 1

Organizationally, information security normally is considered a program enabling and optimizing IT security services for the entity in order to satisfy business requirements, while simultaneously providing strategic and tactical IT security...

Data Communications Risk in Distributed Computing

As the distance between the message source and designated destination increases, accurate transmission becomes increasingly more risky.

IT Hardware Validity Checks

IT hardware validity checks are preventive and/or detective control measures that should be implemented to ensure appropriate data processing.