::PepperTech:: Security Management News Blog
Monday, February 28, 2005
NIST releases final security guidelines | CNET News.com
A final version of security guidelines designed to protect federal computer systems and the information they hold was released Monday by the National Institute of Standards and Technology.Extending Identity Management's Realm
With the security benefits and administrative efficiencies of user identity management coming into focus for IT leaders, some experts say those same benefits can be extended to routers, switches, applications, Web services and devices by creating a common interoperable identity model for other nodes on a network.BearingPoint Launches New Customer Identity Management Practice to Help Companies to 'Know Your Customer' While Tightening Security and Privacy
BearingPoint, Inc. (NYSE: BE - News), one of the world's largest business consulting and systems integration firms, today announced that it will begin offering Customer Identity Management (CIM) services, a new convergence of Customer Relationship Management (CRM), Identity Management and Risk Management, to help companies gain more information about their customers and at the same time keep their information private and secure.Hackers are real-time. Are you?
To meet the SOX general IT security requirements, organizations need to deploy multiple security point solutions such as firewalls, intrusion detection systems, anti-virus systems and others. See here for an article discussing Security Information Management Solutions.Five Things Every CSO Needs to Know About the Chief Privacy Officer
1. The CPO's history parallels the CSO's own emergence.2. The CPO role is as much about business as privacy.
3. In the data world, security and privacy go hand in hand.
4. Outside of the data world, security and privacy are tough to reconcile.
5. Security and privacy executives will depend upon each other for success.
Covery story on CSOOnline.
New Hyperion Dashboard First to Deliver Data Visibility for Sustainable Compliance
Hyperion (Nasdaq:HYSL), the global leader in Business Performance Management software, today announced the launch of Hyperion Compliance Management Dashboard, the first solution to marry internal controls data, such as those defined by COSO, with financial data. As a result, finance officers are now able to gain visibility into their companies' Sarbanes-Oxley compliance status and potential risk exposures, improving reporting accuracy and confidence in financial statements and disclosures moving forward.Korea emerges as e-government leader
At the end of 2004, the Korean government heard the good news from the United Nations that its status as an electronic government had jumped to fifth place from 13th in 2003."The Korean central services portal (http://www.egov.go.kr)... is definitely one of the world leaders in tightly integrating online government services," the U.N. report said.
Saturday, February 26, 2005
US bank 'loses' customer details
The Bank of America has revealed it has lost computer tapes containing account details of more than one million customers who are US federal employees.Friday, February 25, 2005
Archer Wins SC Magazine's Award for Best Security Solution for Financial Services
Archer Technologies (Archer), a recognized leader in delivering enterprise security solutions, announced today that it has been awarded the US Excellence Award for Best Security Solution for Financial Services in SC Magazine's prestigious Global Awards.Information Security Forum Announces New Standard Of Good Practice
The ISF 2005 Standard of Good Practice pays particular attention to current hot issues such as secure instant messaging, web server security, patch management and virus protection as well as important and changing areas of information security including information risk management, outsourcing, privacy and the disappearance of the network boundary. See here for details.Microsoft Promises To Ease Security Concerns
"There's only really one thing that could stand in the way of realizing the full potential of digital infrastructure, and that's security threats: We have to make sure they are kept to a minimum," Microsoft's Bill Gates told delegates at the RSA Conference.Wednesday, February 23, 2005
Sourcefire Recognized for Best Intrusion Solution By SC Magazine
SC Global Awards 2005 Adds to the Growing Accolades for Open Source Snort(R), the Most Widely Adopted Intrusion Detection and Prevention Technology in the Industry. See Sourcefire site.New free Data Security and Encryption guide from Intelligent Output Solutions
Intelligent Output Solutions explain how to make your data secure, reduce the costs associated with traditional PKI encryption and calculate your security budget with an easy-to-digest and free 14-page guide. The new guide to Data Security is available directly from Intelligent Output Solutions by visiting http://www.ioutput.com/data_security.htm or by emailing e-mail protected from spam bots.Tuesday, February 22, 2005
MarkMonitor Unveils Identity Tracker(TM) to Help Corporations Investigate and Stop Online Fraud
MarkMonitor, the leader in online Corporate Identity Management, today announced its new Identity Tracker system to help companies protect their reputation and brand investment from online fraud, while safeguarding their customers from gray market goods and financial loss.Three Security Imperatives For 2005
IT Analysis has an article on the three most important security challenges that the industry should address in 2005.Monday, February 21, 2005
Actuate launches compliance product
Actuate Corporation has launched its Actuate Financial Performance Management (FPM) solution to help firms comply with financial regulations such as Sarbanes-Oxley. Sun and PricewaterhouseCoopers also made similar announcements.Thursday, February 17, 2005
Single Sign-On Off The Drawing Board
Single sign-on is finally moving from theory to practice in the commercial world, thanks to the growing adoption of the Security Assertion Markup Language (SAML 2.0) specification, a key protocol for secure digital identity management within Web-based transactions. Details.Vendors emphasize simplicity in e-mail security
Regulatory requirements for both the private sector and government mandate that sensitive information be protected and communications documented, creating a market for new e-mail encryption products and services. See here for details.Tuesday, February 15, 2005
VeriSign Introduces New Strong Authentication Capabilities and Competitive Token Upgrade Program
VeriSign, Inc. ( Nasdaq: VRSN ), the leading provider of intelligent infrastructure services for the Internet and telecommunications networks, today announced a series of next-generation tokens as well as new services and programs designed to further drive industry-wide adoption of strong authentication.Adobe Showcases Advancements in Document Security at RSA Conference 2005
Document Security from the experts in Document Mangement.Monday, February 14, 2005
Gemplus Launches Smart Identity Management Systems for North American Businesses
Gemplus International S.A., the world's leading provider of smart card solutions, today announces the launches of SafesITe Enterprise and SafesITe Corporate, two new smart identity management systems tailored to meet the needs of large enterprises and growing corporations based in North America.CA Extends Leadership in Identity and Access Management With eTrust IAM Suite r8
Computer Associates International, Inc. (NYSE: CA - News) is extending its leadership of the worldwide identity and access management (IAM) market with the delivery of eTrust Identity and Access Management r8 Suite, a complete set of integrated, modular IAM solutions.GeoTrust Launches GeoRoot
GeoTrust, Inc., a leader in identity verification solutions for e-business and the world's second largest issuer of SSL (secure sockets layer) certificates for web security, today announced the availability of GeoRoot(TM), an enterprise solution that allows organizations to chain their internally issued digital certificates to GeoTrust's publicly recognized roots.Friday, February 11, 2005
Liberty Alliance beefs up web service security
The Liberty Alliance today unveiled the public draft release of its second-generation framework for identity-based web services, dubbed ID-WSF 2.0.Thursday, February 10, 2005
PharmaLive: Identrus and SAFE-BioPharma, LLC Announce Agreement to Collaborate on Interoperability and Marketing
Identrus(TM), a global provider of trusted identity solutions, and SAFE-BioPharma, LLC, an organization dedicated to managing an electronic signature standard for worldwide use by the biopharmaceutical industry, today announced that the companies have reached an agreement under which SAFE (Secure Access for Everyone) and Identrus will collaborate to assure interoperability of digital credentials issued by SAFE Members and by Identrus Participants accredited by SAFE, and Identrus will exclusively market implementations of the SAFE Standard outside the biopharmaceutical industry.HSPD-12, ePassports Headline Smart Card Alliance 4th Annual Smart Cards in eGovernment Conference
Homeland Security Presidential Directive 12 (HSPD-12) and chip-enabled U.S. passports headline the agenda at the Smart Card Alliance 4th Annual Smart Cards in eGovernment Conference and Exhibition on March 9th through 11th, 2005 at the Renaissance Hotel in Washington, D.C.Wednesday, February 09, 2005
nCipher tailors HSM to suit BACS
IT cryptographic vendor nCipher has put out a version of its payShield hardware security module molded to suit the specific requirements of automated payment services run by BACS Payment Schemes.Tuesday, February 08, 2005
Ingersoll-Rand Deploys Oblix COREid to Secure and Simplify Access to Integrated Dealer Portal
Oblix, a leading developer of identity-based security solutions, today announced that Ingersoll-Rand (IR), a leading diversified industrial firm, has deployed Oblix COREid to secure its dealer portal that enables thousands of its dealers to access hundreds of IR products across multiple product lines from a central location, giving them a single sign-on across their applications leveraging different technologies.Monday, February 07, 2005
Electronic Authentication Partnership Elects First Board
The Electronic Authentication Partnership (EAP) has announced the election of its first board of directors. The EAP promotes interoperability among public and private online authentication systems. See Scott's blog for details.Glad to see Khaja Ahmed from Microsoft. He hired me into the areas of Security and Identity Management when he was the CTO of Identrus. Also, Jane Hennessy was on board of Identrus where I worked before I started consulting.
SafeNet Luna Cryptographic Platform Enters Common Criteria and SigG Evaluation Process
SafeNet is First to Join Common Criteria and SigG for Identity Management HSMs; Serves Critical Markets with High Assurance Capabilities.NIST moves to stronger hashing
Federal agencies have been put on notice that National Institute of Standards and Technology officials plan to phase out a widely used cryptographic hash function known as SHA-1 in favor of larger and stronger hash functions such as SHA-256 and SHA-512.US Department of Defense PKI Program Management Office Selects Tumbleweed Validation Authority for Worldwide Deployment
Tumbleweed Valicert Validation Authority One of Two Highest Ranked Digital Certificate Validation Solutions by Independent Evaluation and Selected by DoD PKI PMO for 1.3 Million User Global Deployment.Wednesday, February 02, 2005
Entrust Integrates With New BlackBerry Enterprise Server(TM) v4.0
Entrust, Inc. (Nasdaq: ENTU), a world-leading provider of Identity and Access Management solutions congratulates Research In Motion (Nasdaq: RIMM; Toronto: RIM) (RIM) on the release of BlackBerry Enterprise Server(TM) v4.0 with its easy-to-use security capabilities and newly enhanced integration with Entrust's Secure Messaging Solution.Nintendo Selects RSA Security to Protect Gaming Assets on Its New Nintendo DS Game Console
RSA Security Inc. (Nasdaq: RSAS) announced today that Nintendo Co., Ltd. has licensed micro andfull editions of its RSA BSAFE(R) encryption solutions for use in the newly-released Nintendo DS(TM) portable game console.
Tuesday, February 01, 2005
Teros Delivers First Integrated Identity Management-Application Security Solution
Teros, Inc. today announced the immediate availability of the Teros Gateway containing integration with eTrust SiteMinder Web access management software from Computer Associates International, Inc.Enterprise Security News. Email at: peppertech *at* pepperthought dot com
recent entries
- Do not hack the hackers
- Data Privacy Watchdog for India
- BBC/Yahoo Hackday
- Scalability in Compliance
- Basic rules while on the net...
- Gift card float fraud scheme
- Security at offshore vendors
- Should you stop at complying? Or go on to make mon...
- Email Retention - lessons from Intel
- Real ID Controversy
archives
- 06/01/2004 - 07/01/2004
- 07/01/2004 - 08/01/2004
- 08/01/2004 - 09/01/2004
- 09/01/2004 - 10/01/2004
- 11/01/2004 - 12/01/2004
- 12/01/2004 - 01/01/2005
- 01/01/2005 - 02/01/2005
- 02/01/2005 - 03/01/2005
- 03/01/2005 - 04/01/2005
- 04/01/2005 - 05/01/2005
- 05/01/2005 - 06/01/2005
- 06/01/2005 - 07/01/2005
- 07/01/2005 - 08/01/2005
- 08/01/2005 - 09/01/2005
- 09/01/2005 - 10/01/2005
- 10/01/2005 - 11/01/2005
- 11/01/2005 - 12/01/2005
- 12/01/2005 - 01/01/2006
- 01/01/2006 - 02/01/2006
- 02/01/2006 - 03/01/2006
- 03/01/2006 - 04/01/2006
- 04/01/2006 - 05/01/2006
- 05/01/2006 - 06/01/2006
- 06/01/2006 - 07/01/2006
- 07/01/2006 - 08/01/2006
- 08/01/2006 - 09/01/2006
- 09/01/2006 - 10/01/2006
- 02/01/2007 - 03/01/2007
- 03/01/2007 - 04/01/2007
- 04/01/2007 - 05/01/2007
- 06/01/2007 - 07/01/2007
- 08/01/2007 - 09/01/2007
- Current Posts
other blogs
- scott lofteness
- lawrence lessig
- don park
- phil libin
- jonathan schwartz
- pat paterson
- nw fusion
- kim cameron
- id corner
- archie reed
- bruce schneier
- craig burton
- scott c lemon
- p.t. ong
identity management and pki
- computer associates
- sun microsystems
- oblix
- novell
- courion
- ibm
- identrus
- microsoft
- entrust
- verisign
- window security
- security documents
- tricipher
- thor technologies
- m-tech
- fischer int'l corp
- booleansoft
standards bodies
- oasis
- liberty alliance
- electronic authentication partnership
- www
- open authentication
- trusted computing group
