Careers Information Security Podcast

Internal auditing has always been a key function within financial systems, and it becomes even more so when it comes to IT and information security.

In this exclusive interview, David Richards, President of the Institute of Internal Auditors (IIA), discusses:

Application security is a key focus of regulatory agencies - ensuring that financial institutions pay as much attention to third-party applications as they do to those they develop and manage in-house. In a recent survey conducted by Information Security Media Group, respondents say they are more confident in their own applications vs. those developed by third-party service providers ... yet, they really don't demonstrate vulnerability assessment or remediation processes to justify any level of confidence.

In this exclusive interview, Roger Thornton, founder and CTO of Fortify Software, discusses the survey results and his own market perspective, discussing:

Governance is a term increasingly used in financial institutions, as banking/security leaders try to introduce new processes and disciplines to their organizations.

In this exclusive interview, Jennifer Bayuk, an information security specialist and former CISO at Bear Stearns & Co., discusses:

In this exclusive interview, Spafford discusses:

"Whitelisting" is a new twist on information security. Instead of trying to find a software solution that keeps all of the potential bad guys out of your systems, whitelisting allows you to establish a protection layer that grants access to only your finite list of good guys - individuals or applications.

In this exclusive interview sponsored by Lumension Security, Brent Rickles, SVP of First National Bank of Bosque County, Texas, discusses:

Security leaders are quickly evolving in their roles to focus more on the business of banking, less on the technology of information security.

This is the main message delivered by the results of ISACA's recent Information Security Career Progression Survey of 1400 Certified Information Security Managers (CISMs) in 83 countries.

To learn more about the survey results and the trends they identify, listen to this interview with John Pironti, Chief Information Risk Manager with Getronics, and a member of ISACA's Education Board. Pironti touches on:

Mergers and acquisitions are a way of life for financial institutions, and so many pertinent business issues bubble up whenever an M&A is discussed.

But when does information security enter the discussion?

Not early enough, says Nalneesh Gaur of Diamond Management & Technology Consultants. In this interview, Gaur discusses the importance of information security in an M&A, sharing his insight on:

Workplace violence - it's one of the most common but least understood risks to all businesses.

From robberies gone awry to bullies in the workplace to domestic anger spilling over from home, the workplace is rife for violent situations. In this interview, Kim Matlon, COO of R&A Crisis Management Services, an Ill.-based business continuity, crisis management and project management consulting firm, offers insight on:

The annual RSA Conference is a showplace for the who's who of security solutions vendors. The event showroom is lined with scores of the industry's leading vendors - no one individual could hope to see them all.

So, the Information Security Media Group team did the job for you, visiting with more than 60 vendors of particular interest to banking and security leaders.

Click on the following links to listen to our exclusive interviews with these vendors.

Learn:

Also be sure to check out our articles and podcasts from the event's keynote speeches and conference sessions.

Information Security Media Group recently attended the RSA Conference 2008, the premier information security conference showcasing over 300 of the top vendors in the information security technology space. The following audio is a selection of recordings taken on the expo floor where industry-leading vendors addressing all aspects of information security presented their products and services to attendees. Vendor solutions ranged from application security, encryption, multi-factor authentication, biometrics, ID and access management, compliance management, database security, email and messaging security, and many, many other solution categories.

We hope you take the time to investigate all the vendors listed as they all have solutions, products, and services designed to help financial institutions deal with information security issues and regulatory compliance. Vendor interviews and recordings are presented in alphabetical order and please note, we are not endorsing any particular vendor or product, we are just reporting on their take on the finance industry.