About this Article:
Sound practices include corporate-wide information security policies and enforced implementation of those policies for employees at all levels. Information security policies should govern network security, access controls, authentication, encryption, logging, monitoring and alerting, pre-planned coordinated incident response, and forensics. These components allow for information integrity and data retention, while enabling IT audits and business continuity.
Dr. Paul Judge is chief technology officer at CipherTrust, a provider of enterprise e-mail security and anti spam solutions. He is recognized as one of the foremost authorities on messaging security and has spearheaded various research initiatives, including founding the Internet Research Task Force's Anti-Spam Research Group. http:// www.ciphertrust.com/solutions/compliance_HIPAA.php
Keyword Tags: Business, Compliance, Corporate Compliance, Corporate Governance, E-Mail, Messaging, Sarbanes-Oxley