Archive for the 'Security audits' Category
Fraud. Data Loss – the IT – Management Board divide.
The two biggest security issues today for a business both from an operational and regulatory perspective are fraud and data loss. An insider, often colluding with an outsider, can cause large scale damage to the business by manipulating transactions.
Read this excellent post on Israeli Software
Comments are off for this postWhy Excel is a bad choice for a security audit
Excel is easy to use, but you can lose or destroy your data pretty easily. Although risk assessment standards such as ISO 27001 or PCI DSS 1.1 have a one dimensional hierarchical structure of controls – you can get into big trouble once you try and link controls to vulnerabilities, assets and threats. The model starts getting multi-dimensional and that’s where Excel breaks down quickly and you lose data integrity.
Comments are off for this post