Close
  • Latest News
  • Cybersecurity
  • Big Data and Analytics
  • Cloud
  • Mobile
  • Networking
  • Storage
  • Applications
  • IT Management
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Menu
Search
  • Latest News
  • Cybersecurity
  • Big Data and Analytics
  • Cloud
  • Mobile
  • Networking
  • Storage
  • Applications
  • IT Management
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Applications
    • Applications
    • Cybersecurity

    Real Research or a Marketing Ploy?

    By
    Cameron Sturdevant
    -
    August 29, 2005
    Share
    Facebook
    Twitter
    Linkedin

      The impact of regulatory compliance on IT security is nearly impossible to measure accurately. However, a research survey launched on Aug. 24 by BindView Corp., The Institute of Internal Auditors and the Computer Security Institute purports to get a baseline assessment of just that.

      I think the survey results will be interesting—especially to auditors and vendors with compliance products to sell—but Im not sure how much the survey respondents will actually get out of the process.

      The survey is active now, and I want to preserve the sample selected by the surveys sponsors, so I wont provide the URL here.

      I will say that the survey is designed for CSOs, is composed of 30 questions—mostly multiple choice—and is comprehensive in covering all the regulatory bodies that are currently picking over corporate IT and finance departments.

      There are two problems with the survey from the point of view of the CSO who is being asked to submit answers. The first is that the survey appears to lack a systematic method for eliciting the actual number of staff hours that are expended to comply with various aspects of complying with regulations. The second problem, as I said above, is that it will likely provide very little real benefit to participants.

      Companies that have stringent regulatory responsibilities assigned to them by law already know what they are supposed to be doing. This means that the respondents providing data to the third-party sponsors of the research survey wont be getting anything more valuable than that an affirmative response that various businesses in the sample indeed must comply with this or that specific rule.

      /zimages/3/28571.gifZotob worm suspects arrested. Click here to read more.

      In areas of the survey where less is known about the actual requirements of an audit—a common complaint about Sarbanes-Oxley—it appears that, for the time being, its probably enough to demonstrate that a system of controls is in place.

      When it comes to making decisions about how to comply with regulatory mandates, having more and better information is always better than getting less and poor-quality data. However, the survey I got in my e-mail appears to be a survey of potential customers, rather than an unbiased research tool that will shed light on the best way for companies to meet their responsibilities under the law.

      eWEEK Labs Technical Director Cameron Sturdevant can be reached at [email protected]

      /zimages/3/28571.gifCheck out eWEEK.coms for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at eWEEK.com Security Center Editor Larry Seltzers Weblog.

      Avatar
      Cameron Sturdevant
      Cameron Sturdevant is the executive editor of Enterprise Networking Planet. Prior to ENP, Cameron was technical analyst at PCWeek Labs, starting in 1997. Cameron finished up as the eWEEK Labs Technical Director in 2012. Before his extensive labs tenure Cameron paid his IT dues working in technical support and sales engineering at a software publishing firm . Cameron also spent two years with a database development firm, integrating applications with mainframe legacy programs. Cameron's areas of expertise include virtual and physical IT infrastructure, cloud computing, enterprise networking and mobility. In addition to reviews, Cameron has covered monolithic enterprise management systems throughout their lifecycles, providing the eWEEK reader with all-important history and context. Cameron takes special care in cultivating his IT manager contacts, to ensure that his analysis is grounded in real-world concern. Follow Cameron on Twitter at csturdevant, or reach him by email at [email protected]

      MOST POPULAR ARTICLES

      Android

      Samsung Galaxy XCover Pro: Durability for Tough...

      Chris Preimesberger - December 5, 2020 0
      Have you ever dropped your phone, winced and felt the pain as it hit the sidewalk? Either the screen splintered like a windshield being...
      Read more
      Cloud

      Why Data Security Will Face Even Harsher...

      Chris Preimesberger - December 1, 2020 0
      Who would know more about details of the hacking process than an actual former career hacker? And who wants to understand all they can...
      Read more
      Cybersecurity

      How Veritas Is Shining a Light Into...

      eWEEK EDITORS - September 25, 2020 0
      Protecting data has always been one of the most important tasks in all of IT, yet as more companies become data companies at the...
      Read more
      Big Data and Analytics

      How NVIDIA A100 Station Brings Data Center...

      Zeus Kerravala - November 18, 2020 0
      There’s little debate that graphics processor unit manufacturer NVIDIA is the de facto standard when it comes to providing silicon to power machine learning...
      Read more
      Apple

      Why iPhone 12 Pro Makes Sense for...

      Wayne Rash - November 26, 2020 0
      If you’ve been watching the Apple commercials for the past three weeks, you already know what the company thinks will happen if you buy...
      Read more
      eWeek


      Contact Us | About | Sitemap

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Property of TechnologyAdvice.
      Terms of Service | Privacy Notice | Advertise | California - Do Not Sell My Information

      © 2021 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×