-
Security Configuration Management: Getting Back to IT Security Basics
In IT security, obvious weaknesses like weak configurations often get overlooked. Yet for hackers, they are an open door into networks and systems. Learn how security configuration management (SCM), a critical security control, hardens configurations to prevent breaches, and immediately detects and corrects any subsequent changes that weaken them.
Download Now -
Meeting the True Intent of File Integrity Monitoring
As organizations struggle to pass compliance audits, they often overlook the true intent of the requirements spelled out in those regulations or standards. Lately, this has been the case for the requirement for file integrity monitoring, or FIM. Most organizations use FIM simply to check the checkbox, particularly for PCI...
Read More -
Become PCI Compliant and Secure with Enhanced File Integrity Monitoring
Many organizations pass a PCI DSS audit, but still find themselves in the news after suffering a security breach. Part of the issue may be that the configuration settings were compliant with the settings specified in the PCI DSS, but only for a point in time. But what happens as...
Find Out More -
Own Your Network with Continuous Monitoring
This white paper produced by the SANS Analyst Program distills continuous monitoring down to its four basic components. It also gives those who want to implement continuous monitoring, but are suffering information overload, a clear path to follow. After reading this paper, you'll understand: Why continuous monitoring has...
Learn More -
SCM: The "Blocking and Tackling" of IT Security
In IT security, obvious weaknesses like weak configurations often get overlooked. Yet for hackers, they're an open door into networks and systems. Learn how security configuration management (SCM), a critical security control, hardens configurations to prevent breaches, and immediately detects and corrects any subsequent changes that weaken them.
Read More -
Security-In-Depth Using Integrated Risk-Conscious Controls
Most organizations take a perimeter-centric approach to security, assuming most attacks come from outside the organization. Yet there's no longer a clear boundary between what's inside or outside the organization, and attackers range from unhappy employees to well-funded, state-sponsored hackers. Organizations need a new approach to IT security.
Read More -
Security Configuration Management: Foundational Security with Tripwire Enterprise
SCM provides the most security "bang for the buck" against today's threats, which is why the SANS Institute places so much importance on using it. With Tripwire Enterprise as your SCM solution, that foundational control extends across the enterprise infrastructure.
Read More -
Why Configuration Assessment And Change Auditing Is Key to Operational Stability
Network administrators and IT managers know that the ramifications of one small change to a company's critical servers or network devices-such as routers, switches, and firewalls-depend on whether the change is desired or not. Without a way to know when change occurs and whether it's desired, not desired, accidental,...
View This Now -
Reducing Federal Systems Risk with the SANS 20 Critical Controls
As attacks on U.S. Federal information systems intensify, it's never been more critical to protect their information. In this white paper, learn why both U.S. and Canadian government agencies are leaning toward the 20CSC rather than FISMA to protect their information systems and valuable data. Specifically, you'll learn: ...
Learn More -
SOX, GLBA and HIPAA: Multiple Regulations, One Compliance Solution
SOX, GLBA and HIPAA regulations all require technical safeguards to protect or guarantee the veracity of critical information. With SOX, it's for public companies to guarantee accurate financial accounting. GLBA protects personal financial information of an organization's customers. And HIPAA protects and guarantees the privacy of an individual's Personal Health...
Watch Now