|
|
 |
| Posted: |
16 Apr 2008 |
| Published: |
16 Apr 2008 |
| Format: |
PDF
|
| Length: |
16
Page(s) |
| Type: |
White Paper |
| Language: |
English |
 |
 |
|
ABSTRACT:
While the industry deals with the most egregious aspects of data theft, many computer systems still remain vulnerable to attack at some level. An important tier of computer data that remains practically untouched and unprotected by today's new data security procedures - non-production systems used for in-house development, testing and training purposes are generally "open" systems, and leave a large hole in the security practices at companies of all sizes. These environments leverage "real data" to test applications, housing some of the most classified information in an organization, such as social security numbers, bank records and financial documents.
This paper discusses best practices for creating data security procedures in development and test environments. These procedures include creating a comprehensive set of policies to classify data types that need to be protected; integrating these policies into the day-to-day business processes; providing ongoing compliance reviews; utilizing a proven commercial solution for obfuscation of sensitive data in all development and QA environments; and integrating these security processes and technology across the enterprise.
|
 |
AUTHORS:
Louis J. Carpenito
Leader of Information Security Business Strategy and Information Risk Strategy, Symantec Corporation
Louis J. Carpenito brings more than 35 years of experience in information risk management, information security and business protection, and information technology. Mr. Carpenito has held numerous data security positions, most recently as leader of Information Security Business Strategy and Information Risk Strategy at Symantec Corporation. He was also the Deputy Chairman of the Information Security Forum Limited the leading global information security forum. He previously held Chief Information Security Officer (CISO) positions with Fidelity Investments, the Johnson & Johnson’s Worldwide Family of Companies and at Digital Equipment Corporation.
Suzanne Swanson
Executive Vice President, Gamma Enterprise Technologies
Suzanne Swanson brings over 18 years of experience with enterprise application data management and is most recently Executive Vice President at Gamma Enterprise Technologies, a leading developer of data management software solutions for SAP environments. Prior to Gamma, she was Senior Vice President of Business Development at Patchlink and Senior Director of global OEM sales at Symantec. Ms. Swanson has also held executive positions in business development and sales at SecurityFocus and Computer Associates.
|
|
|
|
BROWSE RELATED RESOURCES:
Best Practices | Data Protection | Data Theft | Databases | Information Security | Quality Assurance |
|
View All Resources
sponsored by Applimation, Inc. |
 |
|
|
|
Cramsession Research Library Copyright © 1998-2008 Bitpipe, Inc. All Rights Reserved. Designated trademarks and brands are the property of their respective owners. TechTarget · 117 Kendrick St · Needham, MA · 02494
Use of this web site constitutes acceptance of the Bitpipe Terms and Conditions and Privacy Policy. cramsession@bitpipe.com
|
