ISACA PCI Compliance Symposium

Analysis and Commentary, Newsflashes

ISACA PCI Compliance Symposium

1 Comment 24 January 2011

Please join Brightfly’s Managing Director of Research, Brandon Dunlap, as he hosts and moderates “Taking a New Look at PCI Compliance at the Start of a New Year”, a half-day virtual symposium from ISACA. This highly interactive event is being held on January 25th, 2011 and starts at 8:00am PST / 11:00pm EST.

Tim Wright, Senior Manager at Kingston Smith Consulting, kicks off the day with “Plastic Security: An Overview of PCI DSS v2.0“ where he will cover the evolution of PCI DSS from v1.2 to v2.0, highlighting all the changes included in the new version.

Following the Q&A with Tim, we’ll have Blake Dournaee, Product Manager from Intel, this event’s sponsor. He’ll be leading a talk titled “Address PCI Compliance with Tokenization”. In this presentation, Blake will explore the benefits of leveraging tokenization as a means of reducing PCI scope.

Up after Blake,  we’ll have Jeffery Sanchez, a Managing Director from Protiviti. Jeffery will be presenting on the myriad of rule interpretations and the way they have changed over time in his session, “Beyond 2.0, What Else is New”.

Closing out the day’s event is an interactive roundtable discussion on “Data Encryption and Trusted Execution Technology”.We’ll bring Tim Wright and Jeffery Sanchez back on the line, along with Jaff Casazza, the Director of Security Technology from Intel’s Data Center Group.

To register your attendance to this enlightening and informative event, just click the button below.

Register Here

Analysis and Commentary, Prosecutions

e-Discovery and Social Media Privacy

No Comments 19 January 2011

Gibson Dunn have released their analysis of the state of e-discovery for 2010. It’s a lengthy read, but well worth the time invested if you are worried about e-discovery, social media, or working on a big document management project.

You can download a copy of the report from Gibson Dunn’s website here.

One of the more interesting pieces that I gleaned from this report was the various state bar associations issuing ethics opinions on the use of social media “trickery” to gain additional information. The example cited in the report, from the New York State Bar Association, states that attorneys may view public profile pages, etc., but may not “friend” the person, nor direct a 3rd party to do so.

Chiling perhaps, but nothing sends as clear of a message about your online life as this quote from the report (emphasis mine):

“Another trend last year saw courts holding that there is no expectation of privacy or confidentiality for social networking communications. In Romano, for example, the court held that the production of information from social networking sites did not violate the plaintiff’s right to privacy, regardless of her chosen privacy settings, because the social networks’ terms of use and their inherent nature provide no expectation of privacy.”

Based on a review of 323 decisions (all of which are listed in the report for your reference), this is perhaps the most comprehensive anylsis of the current state of e-discovery available.

State of Cybersecurity from the Federal CISOs

Broadcast, Newsflashes

State of Cybersecurity from the Federal CISOs

1 Comment 05 May 2010

This time last year, President Barack Obama, delivered the first-ever presidential speech dedicated entirely to cybersecurity. In this speech, he proclaimed that the nation’s digital infrastructure should be considered a “strategic national asset.” The fact that those words were uttered by the President of the United States have cast a new light on the ongoing and pervasive risks that government, business, academic and personal users face in the digital world.

Please join Brightfly’s Managing Director of Research, Brandon Dunlap, as he moderates the latest in (ISC)2‘s ThinkT@nk series: “State of Cybersecurity from the Federal CISOs-A New Perspective.” This one hour online roundtable, based on the findings of (ISC)2‘s latest survey of the Government CISO community promises to be an enlightening event.

The live webcast is being held Thursday, May 6th, 2010 at 12:00pm EST/9:00am PST, and includes the following security luminaries on the panel:

  • Greg Garcia, President of Garcia Strategies, LLC
  • W. Hord Tipton, Executive Director & member of the Board of Directors (ISC)²
  • John N. Stewart, Vice President and Chief Security Officer, Cisco
  • Michael Castagna, Vice President of Corporate Information Security, Sallie Mae

To learn more about this event and to register your attendance, just click the button below.

Register Here
Greg Garcia
President
Garcia Strategies
LLC		 W. Hord Tipton
Executive Director
and member of the
Board of Directors
(ISC)²		 John N. Stewart
Vice President
and
Chief Security
Officer
Cisco		 Micahel Castagna
Vice President
of Corporate
Information
Security
Sallie Mae
Is IFRS All About Greed?

Analysis and Commentary, Audits and Auditors, Frameworks

Is IFRS All About Greed?

No Comments 25 January 2010

Once again, our hat goes off to Tracy Coenen for her coverage over at The Fraud Files Blog. Way back in November of 2008, Brightfly Researcher Mark Adams wrote a short piece on IFRS as the new Cash Cow for the Big 4. This was a follow-on piece to his insights into the Grant Thornton survey which indicated broad disapproval among CFO’s with IFRS and a reluctance to change. You see, even back then we were debating internally as to why the big push for IFRS seemed to get so much press, despite widespread community support. Mark indicated how the push to this new standard would prop up revenues that were were slipping for SOX work as those efforts matured in Big 4 clients. We all nodded and thought it was plausible and a highly likely Astroturf campaign, then moved on.

Thankfully, via The Fraud Files Blog, Tracy has pointed us to a recent piece by Professor David Albrecht on how the push to IFRS is being driven by the Big 4 (and the lesser firms as well). His hypothesis is that since the only organizations embracing the move seem to be the large audit firms, and that they stand in  the best position to profit from the move, that it their greed that propels this change. He goes on to quote Arthur R. Wyatt’s analysis of Arthur Andersen’s implosion as one fueled by greed, and as a canary in the coal mine perhaps, for the future for this industry. A great read, and one that lays many of pieces out in the open for deeper inspection.

Thanks Tracy! Keep up the good work.

« Newer Entries
Older Entries »

Twitterstream

© 2011 Brightfly, Inc.

Powered by You, the Community.