CA on Security Management

Cloud IAM Services-Everyone’s New Punching Bag

Merritt Maxim — Mon, 30 Jan 2012 15:36:00 GMT

Any new product or technology is invariably accompanied by certain levels of skepticism and cynicism. Whether it is the latest smart phone lacking a certain mega-pixel camera or a new version of enterprise software not supporting a given operating system or standard, critics will always appear to question these new products' viability. As we enter 2012, cloud computing, or more...

DLP as a process

Henk van der Heijden — Wed, 18 Jan 2012 12:38:00 GMT

I read with interest recently a paper from Forrester called ‘Rethinking DLP' by John Kindervag. John made two observations about DLP strategies today: 1) strategies treat DLP as a product rather than an embedded function or process 2) most strategies focus on financial data such as cardholder information or personal identifiable information such as social security numbers in the...

What I learned at the 12th International Common Criteria Conference (Part 2)

Joshua Brickman — Tue, 20 Dec 2011 13:35:00 GMT

In October, I wrote about the issue that the "Common" in Common Criteria is at risk of disintegrating, which was the first of two main themes from the International Common Criteria Conference (ICCC), in Kuala Lumpur, Malaysia. As promised, in this post, I cover the second main theme: supply chain integrity. This year I introduced the rather small Common Criteria (CC) community...

CoIT part 2: Security of Mobile Users - Does it Differ from Security for non-Mobile?

Sumner Blount — Tue, 13 Dec 2011 20:35:00 GMT

A few months ago, I posted a blog on Consumerization of IT (here) where I explored some of the causes and impacts of this important trend (wow....has it really been that long since I last blogged? What have you been doing all this time, Sumner?). I mentioned in that blog that there would be a follow-up blog on some of the security implications relating to CoIT. Well, here is...

Need to Manage the Identities for an Entire Country or Small City? There’s an App for That!

Merritt Maxim — Tue, 06 Dec 2011 13:55:00 GMT

Traditionally, identity management solutions were deployed internally to support employees and other third party users like partners. These identity management solutions (from multiple vendors) are currently in use in organizations or all sizes across all vertical markets around the world, generally dealing with user populations in the thousands. But in today's increasingly...