In Depth

In Depth

IT risk management

• How to combat advanced persistent threats: APT strategies to protect your organisation

  Simple defence strategies will go a long way to preparing businesses for APTs  Continue Reading

• Will businesses opt for SaaS in next ERP lifecycle?

  As companies weigh up options for enterprise resource planning (ERP) replacement in the current upgrade cycle, should businesses opt for SaaS-based or on-premise ERP? Jenny Williams reports  Continue Reading

• Security Think Tank: How can businesses measure the effectiveness of their IT security teams?

  How can businesses measure the effectiveness of their IT security teams to ensure they are getting value? Make sure security information is available...  Continue Reading

• The business value of balancing openness with security to manage risk

  The risks to businesses of using social media is a hot topic, but it is indicative of a much broader challenge that is facing not only business, but also government, publishers and regulators, in how to balance openness and collaboration with ...  Continue Reading

• Case study: Combining PCI DSS Compliance with Unprecedented IT System Analysis Capabilities

  Like it does with most organisations who must comply, the Payment Card Industry Data Security Standard (PCI DSS) triggered a review of how Ventura, one of the UK’s largest customer management outsourcers, handled its log and event data. Since ...  Continue Reading

• Ministry of Defence security: IT information assurance in the MoD

  The MoD should update its information assurance policy, argues Paul Shanes and Chez Ciechanowicz in this Royal Hollo2way MSc thesis article.  Continue Reading

• Security Think Tank: What should businesses do to ensure their IT defences resist APTs?

  Security threat reports are increasing, identifying targeted and advanced, persistent threats (APTs) as top priorities for all organisations of all sizes and sectors. The reality of APTs has recently been demonstrated by the successful theft of ...  Continue Reading

• 2011 Royal Holloway information security thesis series

  This series of articles from recent MSc graduates of the Royal Holloway University of London grapples with a variety of information security topics.  Continue Reading

• Can data security be pinned down?

  Every organisation knows that information is one of its most valuable assets; increasingly so does anyone looking to exploit that information for their own ends, be they criminals, ex-employees with a grudge or Wikileaks-style whistleblowers - not ...  Continue Reading

• CW Security Think Tank: What’s holding up the cloud?

  CW Security Think Tank: Are security concerns and a lack of adequate risk assessment tools the reason SMEs are not adopting cloud computing, or is the real reason something else that security professionals are also in a good position to address?  Continue Reading

• Ranking the global cyberthreat, IT infrastructure risks

  What's the real threat of global cyberwar, and how vulnerable are IT infrastructures?  Continue Reading

• Smartphone risk: Does your corporate smartphone policy stack up?

  Many organisations that allow smartphones to access their networks are woefully under-aware of many of the risks.  Continue Reading

• Uneasy feeling: Risk management for emerging types of security threats

  Calculating risk is never an exact science, particularly when new threat vectors are constantly emerging.  Continue Reading

• Quocirca: Where to buy good IT security

  When should buyers rely on what is provided by infrastructure suppliers and when should they turn to IT specialists?  Continue Reading

• Who is responsible for blocking malvertisments?

  In February the London Stock Exchange (LSE) came under scrutiny when an advertisement carried on its website was blamed for distributing a virus.  Continue Reading