TEC Products

Information Security Software Evaluation Center http://security.technologyevaluation.com/ Information Security Selection Software Evaluation Reports http://rfp.technologyevaluation.com/rfi.asp?catid=SEC Information Security RFP Templates http://rfp.technologyevaluation.com/store.asp?catid=6

Incident Handling and Response Capability: An IT Security ...

by Catherine M. Woodbury, CISSP ... Companies that choose a security consulting firm to establish this capability should ... For example, if an action is required will the documentation go further ... http:/.../Research/ResearchHighlights/Security/2002/05/research_notes/MI_ST_XCW_05_08_02_1.asp - 13k Summary: As long as human intervention is part of network operations, there will always be vulnerabilities and an Incident Response capability establishes a force to minimize the effect of system security breaches.

Security Risk Assessment and Management in Web Application ...

by Caleb Sima ... In this example, the e-commerce server risk equals 1,000: the highest security risk assessment possible. The company would then ... http:/.../Research/ResearchHighlights/Security/2006/01/research_notes/TU_ST_XCS_01_27_06_1.asp - 14k Summary: Corporations are at risk because Web applications and servers make them susceptible to hackers and cyber crooks. However, companies can perform security risk assessments that mitigate risk by applying security risk management processes that valuate and prioritize IT assets.

HIPAA-Watch for Security Speeds Up Compliance Part Two: Phase III ...

by Laura Taylor ... For example, if your organization is in Omaha, Nebraska (US), you would have a much ... Today HIPAA Watch for Security™ allows you to manually adjust these values ... http:/.../Research/ResearchHighlights/Security/2004/08/research_notes/PN_ST_XLT_08_28_04_1.asp - 18k Summary: Once the user defines compliance case boundaries and establishes the data criteria in Phases I and II, the HIPPA-Watch for Security tool begins Phase III by launching the risk analysis engine, and concludes with Phase IV, which generates the report. Using the HIPPA-Watch for Security tool can help an org

Security Risk Assessment and Management in Web Application ...

by Caleb Sima ... By multiplying the factors, it's easy to arrive at an aggregate security risk assessment for any asset. Let's take an everyday example: we have an e-commerce ... http:/.../ResearchHighlights/softwaredevelopment/2008/06/research_notes/TU_ST_XCS_06_06_08_1.asp - 13k Summary: Corporations are at risk because Web applications and servers make them susceptible to hackers and cyber crooks. However, companies can perform security risk assessments that mitigate risk by applying security risk management policies designed to protect a company’s data.

Managing Global Trade Flows

by P.J. Jakovljevic ... that cannot be imported or exported between specific countries for national security, health, and environmental reasons. All imports, for example, must specify ... http:/.../research/researchHighlights/scm/2005/06/research_notes/EN_SC_PJ_06_16_05_1.asp - 21k Summary: In global trade, the flow of information must support the tracking and management of the goods to enable the secure and compliant entry and exit to and from countries for the correct funds to flow to eligible business and trading partners.

Product Review: GFI's LANguard Network Security Scanner

by Brien Posey ... For example, you can choose to look at only the most serious security vulnerabilities, or to look only at vulnerabilities pertaining to your password policies. ... http:/.../Research/ResearchHighlights/Security/2004/09/research_notes/PN_ST_XBP_09_10_04_1.asp - 16k Summary: Performing patch management is one of the most tedious chores that must be completed by network administrators. While there are many patch management tools available, they can be expensive, have sharp learning curves, or are not deployable across all software platforms. One third party solution, however,

Social Engineering Can Thwart the Best Laid Security Plans

by Brien Posey ... ÿþSocial Engineering Can Thwart the Best Laid Security Plans Featured Author ... For example, a social engineer's conversation might start out something like this ... http:/.../Research/ResearchHighlights/Security/2001/12/research_notes/MN_ST_XBP_12_23_01_1.asp - 16k Summary: There are a lot of different social engineering techniques, but they all have the same basic idea. The trick behind social engineering is to get the user to give up valuable information without them suspecting anything.

Security Breach: Now What?

by L. Taylor ... life support systems (hospitals or air traffic control centers for example), or financial transactions, it is important that the Security Incident Manger be ... http:/.../Research/ResearchHighlights/Security/2000/03/research_notes/TU_ST_LPT_03_00_1.asp - 12k Summary: When people's lives or financial transactions are at risk, proper Security Incident handling is of extreme importance.

Fighting Terrorism with Global Trade Management

by P.J. Jakovljevic ... For example, the new 24-hour Automated Manifest Rule from December 2002 requires ocean carriers to provide the Department of Homeland Security's Bureau of ... http:/.../research/researchHighlights/scm/2005/06/research_notes/EN_SC_PJ_06_15_05_1.asp - 17k Summary: The challenge for government and industry is to secure trade without impeding growth. Therefore, there is a greater need for timely information updated by knowledgeable sources of compliance and regulation issues. Global trade management software appears to be the best solution.

Information Security Firewalls Market Report Part One: Market ...

by Laura Taylor ... selected by Relevant Technologies, you can login to the security evaluation tool ... For example, Cisco offers an embedded firewall that plugs into one of its high ... http:/.../Research/ResearchHighlights/Security/2005/03/research_notes/EN_ST_XLT_03_01_05_1.asp - 23k Summary: The firewall market is a mature and competitive segment of the information security market. With numerous vendors and firewalls in all price ranges choose from, IT decision makers should be especially selective. This report presents a market overview and some criteria for selecting products from the long