In this thought provoking article Phil Kernick (Director of Technical Assurance for CQR Consulting) invites us to turn everything that we think we know about IT Security on its head. He reminds us that security threats are evolving together with technology and that clinging to the old fashioned notion of 'keeping the baddies out' could be very dangerous in the midst of the current trend towards distributed technology and information. 

The Payment Card Industry Data Security Standard (PCI DSS), which was first released in September 2006, outlines areas of security best practice when handling cardholder data. Many companies find compliance with this standard quite difficult. This very helpful article outlines different areas of compliance and also stresses the value of regular maintenance as a way of taking the sting out of compliance audits.

Many companies find the task of protecting information completely bewildering, especially due to the proliferation of different sources and destinations of information. In this very helpful article Scott Crawford (Managing Research Director, Security & Risk Management of Enterprise Management Associates) proposes a systematic analysis of data flows as one of the best ways to get rid of information overload bewilderment and the resultant risk. 

...but Asia-Pacific network security market remains resilient, says Frost & Sullivan

Singapore, June 12, 2009 -- The Asia-Pacific network security market is expected to grow by 6.5 percent in 2009, dropping nearly two-thirds from the robust growth in 2008. Last year was perhaps too soon for the Asia-Pac region to feel the full brunt of the financial meltdown, the final quarter however - typically the strongest quarter - was a tell-tale of what to expect in 2009, growing a dismal 1.5 percent over the third quarter of 2008.