Computer Safety & News

An excellent article outlining SOX 404 compliancy testing and controls Sarbanes-Oxley – How to assess Company Level Controls www.journalofaccountancy.com/Issues/2005/Jun/AssessingCompanyLevelControls QUOTE:  What are company-level controls? How do CPAs go about evaluating their effectiveness? As the compliance deadline for section 404 of the Sarbanes-Oxley Act approaches for some companies, many have yet to face a critical hurdle: […]

Below are a great list of best practices to help corporations mitigate outside hacking attacks. Federal Hacking Incident – Some Lessons Learned http://isc.sans.edu/diary/HBGary+hack+lessons+learned/10438 QUOTE: Unless you’ve been living under a stone for last couple of weeks, you will have heard about the HBGary Federal hack. Seeing everything published about this probably makes every security professional think […]

Malware continues to use highly polymorphic attacks, so that each new wave becomes a unique variant within the malware family. AV pattern recognition techniques alone may not detect early waves (usually a 30% coverage ratio of day one),   However, signature based AV may be more useful for cleanup and restoration actions.  Heuristic or behavioral based AV products can help improve […]