IT Governance, Risk, and Compliance (IT GRC): An Organizational Imperative - What It Is, and Why You Should Know
White Papers Regulatory mandates, emergence of new forms of risk, and a growing stakeholder focus on managing them are the principal drivers pressuring organizations to adopt IT Governance, Risk, and Compliance (IT GRC) strategies.
[August 5, 2009, 1:21]
Comprehensive Compliance Controls for BusinessObjects Environments: Combining Intelligent Business Policy Controls With BusinessObjects XI and Database Auditing to Ensure Effective GRC Process
White Papers While organizations have made significant investments in firewalls and intrusion detection systems to protect their network perimeters, these systems have proven they cannot prevent authorized system users from accessing data inappropriately.
[September 2, 2009, 1:22]
Align Your Risk and Compliance Activity With Symantec
White Papers Today's enterprise requires a unified approach to IT Governance Risk and Compliance (IT GRC) solution and align risk and compliance activities. This webcast will discuss the evolution of IT GRC and best practices as well as Symantec's proven...
[May 1, 2008, 1:02]
Governance, Risk, and Compliance
White Papers Governance, Risk, and Compliance (GRC) directly impact business processes, IT processes, and the associated IT infrastructure. Companies that once focused solely on regulatory compliance requirements, such as Sarbanes-Oxley (SOX), they need to...
[October 7, 2008, 1:01]
Symantec Control Compliance Suite (CCS) 9.0 Sneak Peek
White Papers The attendee will get an overview of Symantec's IT GRC strategy and CCS 9.0, Symantec's new IT Governance, Risk and Compliance (IT GRC) Platform. The presenter of this webcast provides a sneak peak of CCS 9.0 before the announcement at the Vision...
[June 19, 2008, 1:01]
Turning the Compliance Challenge Into a Business Advantage
White Papers Financial institutions often view Governance, Risk, and Compliance (GRC) as an unwelcomed cost burden that gets in the way of achieving results. A flexible and adaptable GRC framework is needed to integrate heterogeneous systems and to weave end-to...
[December 22, 2006, 0:00]
CFO At the Center: An OCEG Whitepaper
White Papers In this second installment of the Critical Conversations whitepaper series, OCEG describes the conversations a Chief Financial Officer must have with enterprise executives to successfully participate in the development and implementation of an...
[September 15, 2009, 1:21]
No remedy in sight for denial of service attacks
News In a long posting on GRC.com, Gibson described a month of attacks on his site by an allegedly 13-year-old "script kiddie," a term used by security experts for young online vandals. Check GRC.com every day or two and maybe we will come back.
[June 4, 2001, 9:13]
EMA's 2008 Survey of IT Governance, Risk and Compliance Management in the Real World
White Papers Over and over again, the recurring theme of all these aspects of IT GRC management is constant: the strategic value of process - not just empty processes conceived to fulfill some vague best practices ideal, but the processes enterprises actually...
[August 5, 2009, 1:21]
SP2's firewall is not good enough
Talkback Windows "Firewall" failed several leak tests which I imposed; even the age-old grc.com test. The only thing Window's firewall does do is make you appear invisable on the Internet [stealth mode]. It doesn't, however, block all outgoing traffic, only...
[April 6, 2005, 15:50]
Per usual, Gates was pathetic
Talkback See Apple circa late 1970s and the Apple II.http://www.grc.com/ctwho.htm Cleartype. But company officials did say ClearType is a software-only technology that works by "splitting pixels". This is strictly a Microsoft-only innovation that builds on...
[August 20, 2007, 18:07]
An Access Control Solution for the Inter-Organizational Use of ITIL Federated Configuration Management Databases
White Papers Governance, Risk, and Compliance (GRC) Management is on the edge of becoming one of the most important business activities for enterprises. Consequently, IT departments and IT service providers must sharpen their alignment to business processes and...
[February 10, 2009, 0:20]
Hijacked PCs blamed for a third of spam
Talkback I hang out on dslreports, grc.com and a number of other places when I'm off duty. Try dslreports.com - they have forums where much of this is explained. Another good site is spywareinfo.com -they all exist to assist folks in uncovering the latest...
[December 5, 2003, 11:57]
Companies escape Sasser infection
Talkback If you want to test how good your firewall is, go to www.grc.com and use their ShieldsUp test. DO Roberts: A firewall will help, yes. It's not completely infallible, but someone would really have to want to hack into your system to get round it.
[May 7, 2004, 11:28]
Windows XP SP2 more secure? Not so fast
Talkback Until you "EXPERTS" do a sensible reply, readers go and have aread at www.grc.com about firewalls and you can also check it is working there, Also go to www.sygate.com as you can also do a scan there to see if your firewall is working.
[August 25, 2004, 13:22]
Cisco pushes forward with partnerships
News Cisco also announced on Wednesday that it has entered a joint marketing agreement in the US and Canada with SAP to specifically address governance, risk and compliance (GRC) business processes and information-technology control issues.
[September 7, 2006, 9:15]



