Security threats Toolkit
Story: Integration needed to shore up security holes
Posted by: Fulton Wilcox (Friday 8 July 2005, 2:54 PM)
The premise that there is a need to consolidate "security" offerings is well-founded. However, mixing in "compliance" is a different matter. Compared to security, compliance is different and greatly complicated because compliance violations typically involve authorized insiders accessing permitted functionality and databases, but using those resources to fulfill prohibited ends. Compliance also involves a high percentage of inadvertent violations.
Full Talkback thread
