Thwarting the insider threat entails more than knowing an individual with access to a computer, but to recognize the synergy between the individual, organization, technology and environment, I3P Research Director Shari Lawrence Pfleeger says.

2011 will be the year of more -- more sophisticated malware, more WikiLeaks-style breaches and more regulatory compliance headaches.

A panel of regulators and industry experts weighs in on the top 4 regulatory issues of 2011, and card skimming attacks get more sophisticated the world-over.

"What's interesting is that the criminals are now using cryptographic technology to protect the card information they steal, and that's posing challenges for detection and law enforcement," says Jeremy King of the PCI Security Standards Council.

NIST's Ron Ross Tackles the Risk Management Framework

If Marcus Ranum were your CISO, this would be his 2011 resolution: To launch a "War Games" style exercise.

"As more channels connect to ACH, it will become the preferred route for banks to process transactions," says Steve Kenneally of the American Bankers Association.

This week's top news and views: Wire fraud costs a Missouri escrow company $440K, internal auditors add risk-management value.