While moving through all of the compliance data within the glossary, one of the things we've tried to provide is a current listing of all of the major organizations that we've referenced as an integral part of researching the...

When learning about compliance, we read a lot about principles. The word principles shows up in quite a few of the regulatory documents as well as most of the standards and guideless. So what is a principle, and how...

What follows is a listing of all of the control types that we've found referenced so far within the Unified Compliance Framework. Access control Measures that limit access to information or information processing resources to those authorized persons or...

When we say that we are "complying," we are saying that we are complying with authoritative rules that are not of our own creation. (OK, so some of you reading this are, in fact, responsible for creating these rules -...

We have to stop improperly referring to information assurance as information security.Yes, I know that many of us who grew up in the world of ISO 17799 have based our language on the language found there, where the ISO...