Tuesday, October 28, 2008

16th WCAS

16th WCAS: "16th World Continuous Auditing & Reporting Symposium will be held November 7-8th 2008 at the Rutgers Business School, Room 123, Lecture Hall, Ackerson Hall
180 University Avenue, Newark, NJ"

Monday, October 27, 2008

Desktop Virtualization Drives Security, Not Just Dollar Savings -- Desktop Virtualization

While desktop virtualization (VDI) has been gaining in usage, it is only beginning to attract the attention of security professionals. yet, with all the problems that have been experiencedwith laptops going missing - stolen or lost, that contain sensitive information, it may provide an ideal solution. VDI allows the operating system and core applications to be stored on a central server and accessed from a PC remotely. The process in hardware indepenedent and can enable central storage of data and still allow users to load their favourite applications on the server. The best of all worlds. Desktop Virtualization Drives Security, Not Just Dollar Savings -- Desktop Virtualization

Thursday, October 23, 2008

Technology Review: The Flaw at the Heart of the Internet

A DNS expert has found a vulnerability in the basic structure of the internet that will undermine a lot of the security around the system. The ability to bypass DNS lookups could be a boon to Phishers. IS Auditors will have to give some thought to how they will deal with this new issue in terms of testing. Technology Review: The Flaw at the Heart of the Internet

Saturday, October 18, 2008

Arek: Service-Oriented Architecture

Service Oriented Architecture (SOA) is becoming widely used to restructure systems for higher performance and greater accuracy and reliability. At the following link, Accenture describes how SOA was used to develop a better pension-earnings system for Arek, which runs a centralized pension registry in Finland. Arek: Service-Oriented Architecture

Tuesday, October 14, 2008

Tough economic climate can heighten insider threat

Some of the biggest risks to business systems come from inside the company. This is always true, because of the privileged access that insiders have. However, in tough economic times, this risk is even higher and it calls for additional vigilence by systems security personnel. Tough economic climate can heighten insider threat

Friday, October 10, 2008

Exposure Comments

A summary of all of the comments received to date on COSO's June exposure draft on Guidance on Monitoring Internal Control Systems cna be found at the following link: Exposure Comments

Thursday, October 9, 2008

E-Commerce News: Enterprise IT: IBM Enlarges Sphere of Influence in the Cloud

Social Networking is working its way into IT systems in various ways. Generally, Facebook and Facebook look-alikes are not mainstream vehicles for business systems. IBM has come out with a new tool - Bluehouse - that will likely be mainstream. It is a social networking site that is used in the growing cloud computing space. There will be more tools like this in future. E-Commerce News: Enterprise IT: IBM Enlarges Sphere of Influence in the Cloud