ISC2 Visitors — Endpoint Product Eval Matrix

ISC2 attendees to the webinar “Endpoint Security is Sexy” heard J.J. Thompson speak on harnessing the unique opportunity IT Security professionals are faced with to demonstrate significant, measurable business value in the year ahead.

Over $100K Saved for SAP Controls

A mid-sized high tech manufacturing client needed to bring their SAP implementation into compliance. Rook provided advisory services to assist the client with segregation of duties (SOD) strategy, secure configurations for SAP, and improved BASIS controls. The result, a…

“Green Security”? +Download

[caption id=”” align=”alignright” width=”282" caption=”Click on the image to download”]

[/caption]

Here’s a freebie for you all. Our marketing team has pulled off a stunning graphic that we believe depicts the current opportunity…

Red Flags Delayed (Again)

The FTC has given creditors an extension to the August 1 deadline for Red Flags compliance. The (latest) updated deadline is November 1st. Here’s what this means for you:
(1) You have more time to determine if your company is a covered entity and
(2) You can now address the required…

FTC Red Flags Primer (Screen Cast)

As Red Flags goes into effect August 1 (the banking deadline was Nov 1 08), we have had a number of requests to provide a primer to brink folks up to speed as many covered entities are no where close to ready for Red Flags. On August 6th, we will be presenting a live…

Selecting an ITRM Firm

We don’t envy your position. It’s hard to separate the mediocre from the best of the best when each “security” or “compliance” firm you check out says the same things. Here’s what we look for when we identify our true competitors:

40% Saved on Annual Assessments

A utilities client desired to lower annual assessment costs. Rook provided a hybrid posture assessment ( a combination of a vuln scan, architecture review, policy & procedure gap analysis, and a host based config review). This approach eliminated redundant effort for…

Data Protection Architecture

A Fortune 100 high tech manufacturing client required a data protection architecture designed to protect both financial data as well as sensitive ITAR (government military regulation). Rook worked closely with the clients internal team to design a scalable architecture that…

3 Mo. 0 Significant Deficiencies

Rook provided a year 1 SOX filer with 11th hour assistance to bring their IT controls into compliance in under 3 months. The result, zero significant deficiencies in year 1 and a very happy Controller and CFO.