Disclaimer: The opinions of the columnists are their own and not necessarily those of their employer.

Tag Archives: SB 1386

Data Classification: Begin With Your Personally Identifiable Information

June 3, 2008 – 6:00 am – Let’s face it: Data classification—despite being an information security “best practice”— is an expensive, time-consuming, labor-intensive task. For those organizations supporting thousands (or even hundreds) of applications and databases, the job of identifying all data elements and…
By | Posted in Compliance and Laws | Also tagged , , , , , , , , , | Comments (0)

Proposed SEC Rules Broaden Scope of InfoSec Compliance Responsibilities

May 5, 2008 – 6:00 am – On March 11, 2008, the United States Securities and Exchange Commission (SEC) published proposed rules intended to “set forth more specific requirements for safeguarding information and responding to information security breaches, and broaden the scope of the information covered by Regulation…
By | Posted in Compliance and Laws, CSO/CISO Perspectives | Also tagged , , , , , , , , | Comments (0)