This article elaborates on the most important risks inherent to the cloud such as information security, regulatory compliance, data location, investigative support, provider lock-in and disaster recovery.
We realized that we needed a more complete way to address these information security and compliance issues in order to better support the enterprise community.
As to security for its mobile website and apps, Kaiser Permanente says that it aims to protect the privacy and security of personal health information and has "implemented effective programs for information security and compliance … supported by multiple layers of security involving technology, policies, physical security, awareness and identity authentication".
"To ensure that Target is well positioned following the data breach we suffered last year, we are undertaking an overhaul of our information security and compliance structure and practices at Target".
The retailer also said it would be overhauling its information security practices and compliance division, and would be looking for external candidates to serve as interim CIO.
Naturally, with both C-level positions increasing in importance, and with concern over risk management growing, overarching security decisions have become divided between the two, information security vs. corporate compliance, both equally serious but straddling a very blurry line.
We found that numerous activities of management, particularly development and execution of information security policy, awareness, compliance training, development of effective enterprise information architecture, IT infrastructure management, business and IT alignment and human resources management, had a significant impact on the quality of management of information security.
Our findings indicate that various dimensions of power and how these relate to information security rules ensure adequate compliance.
This questionnaire provides means for assessing the capabilities and competencies of CPs in terms of different attributes (e.g., compliance, information security, governance).
The company said it is still looking for a chief information security officer and chief compliance officer.
