September 2006 - Posts

Trustworthiness of Information in Audit Records
20 September 06 10:57 AM | Eric Fitzgerald | 1 Comments   

I get asked quite often "why is the Workstation name missing from some events?" I've explained that elsewhere . But this raises another issue that many of you might not have considered, and I want to take a few minutes to explain. The Windows Security Read More...

Filed under: Tips

Auditing and the Payment Card Industry (PCI) Data Security Standard
12 September 06 11:01 AM | Eric Fitzgerald | 1 Comments   

Here is a link to an interesting blog article interpreting the audit requirement of the PCI standard. For reference, here is a link ( pdf ) to the PCI 1.1 Data Security Standard itself. The high-level PCI requirements are listed below. Requirement 10 Read More...

Filed under: Laws