ISC2 Visitors — Endpoint Product Eval Matrix

ISC2 attendees to the webinar “Endpoint Security is Sexy” heard J.J. Thompson speak on harnessing the unique opportunity IT Security professionals are faced with to demonstrate significant, measurable business value in the year ahead.

Over $100K Saved for SAP Controls

A mid-sized high tech manufacturing client needed to bring their SAP implementation into compliance. Rook provided advisory services to assist the client with segregation of duties (SOD) strategy, secure configurations for SAP, and improved BASIS controls. The result, a…

FTC Red Flags Primer (Screen Cast)

As Red Flags goes into effect August 1 (the banking deadline was Nov 1 08), we have had a number of requests to provide a primer to brink folks up to speed as many covered entities are no where close to ready for Red Flags. On August 6th, we will be presenting a live…

Data Protection Architecture

A Fortune 100 high tech manufacturing client required a data protection architecture designed to protect both financial data as well as sensitive ITAR (government military regulation). Rook worked closely with the clients internal team to design a scalable architecture that…

Red Flags Delayed (Again)

The FTC has given creditors an extension to the August 1 deadline for Red Flags compliance. The (latest) updated deadline is November 1st. Here’s what this means for you:
(1) You have more time to determine if your company is a covered entity and
(2) You can now address the required…

3 Mo. 0 Significant Deficiencies

Rook provided a year 1 SOX filer with 11th hour assistance to bring their IT controls into compliance in under 3 months. The result, zero significant deficiencies in year 1 and a very happy Controller and CFO.

40% Saved on Annual Assessments

A utilities client desired to lower annual assessment costs. Rook provided a hybrid posture assessment ( a combination of a vuln scan, architecture review, policy & procedure gap analysis, and a host based config review). This approach eliminated redundant effort for…

Selecting an ITRM Firm

We don’t envy your position. It’s hard to separate the mediocre from the best of the best when each “security” or “compliance” firm you check out says the same things. Here’s what we look for when we identify our true competitors:

Are the 26 Red Flags a Rx for Compliance?

Some have argued against overly focusing on the 26 Red Flags, citing the fact that the Red Flags are not prescriptive nor are they a checklist. I have to agree with this point. Following the 26 Red Flags myopically does not give “special protection” from…

“Green Security”? +Download

[caption id=”” align=”alignright” width=”282" caption=”Click on the image to download”]

[/caption]

Here’s a freebie for you all. Our marketing team has pulled off a stunning graphic that we believe depicts the current opportunity…

Cornerstones of Trust

Thank you for joining us for the Cornerstones of Trust conference as Rook team members and top industry thought leaders such as Niall Browne, J.J. Thompson, Brandon Dunlap, Jim Anderson, Irfan Saif, Kim Getgen, Gene Schultz and others presented on the latest and greats in IT Risk Management, Compliance, and Security.