Ask the Experts

Ask the Experts

IT risk management

• EU cookie regulations: Advice for firms in the US and other countries

  Expert Alan Calder responds to a reader’s question: Must companies outside the EU change their websites to comply with EU cookie regulations?  Continue Reading

• Open source software security issues: How to review OSS for security

  A reader asks how to judge the security of open source software products. Expert Michael Cobb lists three areas to check.  Continue Reading

• Are there Web service security standards or risk assessment checklists?

  As more organisations integrate business-critical functions with Web services, the security of those services becomes of greater importance. But are there Web service security standards whereby businesses can assess that security? Expert Neil ...  Continue Reading

• How to meet the PCI DSS compliance deadline on an IT security budget

  Learn how to meet the upcoming PCI DSS compliance deadline while sticking to an IT security budget by leveraging existing security infrastructure in this response from expert Mathieu Gorge.  Continue Reading

• Getting the most out of the gap analysis process

  In this expert response, Neil O'Connor explains how to get the most out of the gap analysis process in your organization.  Continue Reading

• Information security policy template and tips

  Information governance expert Neil O'Connor reviews the key considerations that must be made before framing an information security policy.  Continue Reading

• When IT security costs are cut, which security product is a must?

  Having trouble finding the right security product when budgets are tight? Expert Peter Wood explains which particular guidelines can help you find the appropriate technologies for your organization.  Continue Reading

• What considerations should be made when outsourcing IT infrastructure?

  Expert Peter Wood explains how to investigate a partner's security posture when your IT infrastructure is outsourced.  Continue Reading