Its audit time and you’re responsible for recertifying approximately 75 Active Directory Groups and each group has a membership of about 10 to 30 people. An email needs to be sent to every manager for them to confirm the person still needs to be a member of the group. You have to provide information to the Auditors to confirm that each person in each of these groups has been verified. Before you can send out the verification requests to the managers you have to confirm each Active Directory Account has the correct person contact information and manager information. All this has to be done in the next 30 days.
https://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.png00Mark Adamsonhttps://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.pngMark Adamson2012-01-10 09:23:392012-01-10 09:23:39Using IBM Tivoli Identity Manager to recertify Active Directory Groups
Digital forensics and electronic discovery involve the collection and analysis of electronically-stored data. Together, these two fields of electronic security cover the entire digital information spectrum. To find out more about what each one is and when or why you may want to hire an investigative team to perform digital forensics and electronic discovery procedures for your company, continue reading this article.
What is digital forensics?
Digital forensics entails the thorough examination of electronic storage devices. In the process, electronic systems investigators identify, collect, maintain, and analyze the data stored on an electronic device. After doing so, they produce results based on their analyses that are defensible enough to be upheld in a court of law. Deleted, damaged, and encrypted files are all included in the analysis and the data explained in the results.
What is electronic discovery?
Electronic discovery, or e-discovery, is the process of gathering electronic data so that it is readily available and can be stored on a variety of electronic storage devices. This data is gathered and stored via:
Information and identity management.
Collection and preservation of all data.
When good e-discovery practices are employed at a company, e-discovery records can be sent to a team of digital forensics investigators for:
Processing, analysis, review, and presentation of results.
When are these processes necessary?
Electronic discovery should be practiced by any company that stores sensitive data and records that are crucial to future business. Digital forensics should be employed when a company needs to draw on its performance history to justify a decision made in the present, as well as whenever a company is facing legal action. A forensics team can ensure the files and digital history stored on your computer that support your case will provide you with valid courtroom evidence.
Are you a Dallas-based business owner who is looking for services in the field of electronic security and identity? If so, call PathMaker Group at (817) 704-3644 and ask about our electronic discovery, digital forensics, and identity management services today!
https://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.png00PathMaker Grouphttps://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.pngPathMaker Group2011-12-07 11:27:512011-12-07 11:27:51An Overview of Digital Forensics and Electronic Discovery
Congratulations!!! Your IT organization, and more importantly your company, now enjoys the benefits of Service Oriented Architecture (SOA). These benefits include return on investment, code mobility and maintenance, agility, improved scalability and high availability. But along with these rewards come some disadvantages. These include degradation of application server performance and increased security concerns and risks. The XML-based Web Services in use in your enterprise easily expose back-end systems to customers and partners. Your Web Services pass through your enterprise network firewall and are based upon SOAP, XML and HTTP. These all combine to introduce new threats and security exposures within your enterprise infrastructure. These new type of threats can consist of some of the following below:
XML Denial of Service
Slowing down or disabling a Web Service so that service requests are hampered or denied
Unauthorized Access
Gaining unauthorized access to a Web Service or its data
Data Integrity and Confidentiality
Data integrity attacks of Web Service requests, responses or underlying databases
System Compromise
Corrupting the Web Service itself or the servers that host its Read more
https://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.png00Rick Tutthttps://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.pngRick Tutt2011-11-28 13:51:132011-11-28 13:51:13Using IBM DataPower XI50 Appliance to Secure XML-based Web Services
Do you work in the medical or healthcare industry? Is your company in need of security or identity management solutions? If so, here are some of the key ways in which PathMaker Group can provide value in this field.
Enterprise Single Sign-on Doctors and nurses have a lot of passwords to manage as well as using shared workstations creating potential issues around people sharing a user ID to an account and people leaving an application or patient information open on a shared workstation. With ESSO, PathMaker Group can give the users a secure way to store all their passwords and automating the login and logoff process.
ESSO can be paired with an RFID badge – a quick tap of the badge can log a user on or off from the workstation, saving the time of entering the user ID and password over and over again as they switch between machines all day. A proximity sensor can be added to workstations to automatically lock them when a user forgets to tap out as they walk away from the machine.
Shared Workstation Management – Shared machines can be configured to be locked when an ESSO user leaves the workstation. When the next user comes in, any apps left open by the prior user can be gracefully closed to prevent the new user from having patient access under the prior user’s account.
Context Management ESSO can further streamline the process of accessing patient records across multiple applications. Tools, such as CareFX Fusion Context Management, provide the ability to script the sharing of patient identification across applications, removing the need for constant searches and patient lookups. Read more
https://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.png00PathMaker Grouphttps://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.pngPathMaker Group2011-11-04 10:57:462011-11-04 10:57:46Security and Identity Management Solutions for the Healthcare Industry
The National Institute of Standards and Technology (NIST) created a series of publications that provide guidance for federal agencies on the implementation, certification and accreditation of federal information system security. The same guidelines hold true for all commercial agencies/companies as well.
So the question that comes to our mind What is NIST’s New Risk Management Framework? NIST describes the RMF model as a series of six repeating steps designed to identify the security mechanisms necessary for an IT system, implement those protections, and validate their proper operation over the systems lifecycle.
The question of whether compliance makes your networks secure often comes up when performing Payment Card Industry (PCI) Data Security Standard (DSS) remediation and audit work. Many believe that compliance with the PCI-DSS means their networks are secure from exploitation. Unfortunately this is not the case. Passing an independent PCI audit usually indicates reduced vulnerability for those PCI related areas tested, however the PCI segments are usually a small portion of the overall networks.
The payment card industry has one goal in mind and it is not to protect or provide security for your network. Their goal is to protect credit card and card holder data. They do this to limit their potential liability and transfer responsibility for that liability to the entities that provide, accept, use, store or transfer credit card and card user information. That is almost all businesses and many institutions here and around the world. Read more
https://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.png00PathMaker Grouphttps://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.pngPathMaker Group2011-10-24 11:57:462011-10-24 11:57:46Security and PCI-DSS Compliance
With the stiff penalties associated with failure to meet standards set by the PCI Security Council, ensuring that your company remains compliant and avoids security breaches requires regular PCI compliance audits. Hiring qualified security assessors can help you avoid a number of potential pitfalls associated with audits. Opting to hire the most experienced candidates offers a number of benefits, including:
Getting it Done Right In 2004, CardSystems Solutions was hacked, resulting in 263,000 stolen credit cards and roughly 40 million compromised. This breach occurred despite their security auditor giving them a clean audit just three months prior. Hiring experienced PCI compliance auditors to perform your audits lessens the likelihood of potentially costly mistakes.
Continued Security Experienced PCI compliance auditors not only understand current standards, but they understand the areas in which the current standards fall short. This allows you to proactively anticipate security risks and protect your customers’ data. Understanding the current problems, as well as the next generation of threats, allows you to remain in compliance and prevent costly security breaches. Read more
https://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.png00PathMaker Grouphttps://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.pngPathMaker Group2011-10-18 11:19:162011-10-18 11:19:16The Importance of Hiring an Experienced, Qualified Security Assessor for Your PCI-Compliance Audit
Network security is an important consideration for any business that is connected to the internet, but especially for businesses entrusted with sensitive customer information. Penetration testing and PCI compliance are important safeguards for protecting customer data, but what are the ways in which customer data might become compromised?
Malware Malware is one of the most pervasive network security threats these days. Malware is a comprehensive term to describe viruses, worms, Trojan horses, tracking cookies, and many other types of threats that include malicious code or software that aims to breach your confidentiality. They can be detected and removed with most software security suites.
Cybercrime While malware attempts to breach your security from inside your computer, cyber criminals attempt to breach your security from afar. Hacking and cyber crime causes tens of millions of dollars in losses every year. One way to prevent cybercrime is to have an IT security professional perform penetration testing on your system to find loopholes and close them. Read more
https://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.png00PathMaker Grouphttps://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.pngPathMaker Group2011-10-12 11:34:332011-10-12 11:34:33Different Types of Incidents that Can Result in Compromised Network Security and Information
A sticky note on your monitor is a good way to remember to bring home a gallon of milk to stay out of the doghouse with your spouse. A sticky note hidden around your desk with all your passwords is a good way to end up in the doghouse with your company’s IT security group!
Let’s face it; it’s hard to remember the passwords for every application we have to use at work. It’s even more challenging when the interval to change passwords is different for every application. Hmmm is my email password myusualpassword12, myusualpassword13 or myusualpassword14?
It’s natural to want an easy way to keep track of them. This leads to insecure things such as using your dog’s name, much easier than remembering X1nP4!e. It’s also easy for someone that knows you to socially engineer that password. Writing the complex password down is easy too. Again simple for someone to flip the keyboard to that sticky note and gain access to your accounts. Read more
https://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.png00PathMaker Grouphttps://www.pathmaker-group.com/wp-content/uploads/2023/02/SimeioPMG_square.pngPathMaker Group2011-10-11 11:56:252011-10-11 11:56:25Using IBM Tivoli Access Manager for Enterprise Single Sign On to Secure your Passwords
Great solutions require strong products, thorough planning and aggressive deployment.
Why close the barn door after the horses escape? or An ounce of precaution is worth a pound of cure. Another one, Why solve a problem that we do not have?
These expressions come to mind when addressing security issues for the premises where we work, our homes, bank accounts, credit cards and anything else of value to us. In this environment where everything is faster and better, comes the need for us to understand the complexity of it. This world is where we live and we need to protect our assets. The expression Nip it in the bud before it becomes a problem is best suited for security. Just by observation, we see exposures and are grateful we saw them first. Read more
