Roger's Information Security

SEPTEMBER 1, 2016

FTC Chief Technologist Lorrie Cranor wrote in March it is time to reconsider mandatory password changes. Unless there is reason to believe a password has been compromised or shared, requiring regular password changes may actually do more harm than good in some cases. (And even if a password has been compromised, changing the password may be ineffective, especially if other steps aren’t taken to correct security problems.).

Passwords 56

Passwords Education Authentication Information Security 56

Robert's Db2

AUGUST 29, 2016

I have recently received a number of questions pertaining to DB2 for z/OS database access threads, or DBATs. DBATs are threads used in the execution of SQL statements that are sent to DB2 from network-attached applications (i.e., from DRDA requesters that access DB2 for z/OS by way of DB2's distributed data facility, also known as DDF). Thinking that these questions (and associated answers) might be of interest to a good many people in the DB2 for z/OS community, I'm packaging them in this blog

Access 48

Access IT 48

Privacy and Cybersecurity Law

SEPTEMBER 2, 2016

Another company that is well-known to consumers has agreed to enter into a compliance undertaking with the CRTC for alleged […].

Compliance 52

Compliance Marketing 52

Hunton Privacy

SEPTEMBER 1, 2016

On August 29, 2016, the Federal Trade Commission announced that it is seeking public comment on the Gramm-Leach-Bliley Act (“GLB”) Safeguards Rule. The GLB Safeguards Rule, which became effective in 2003, requires financial institutions to develop, implement and maintain a comprehensive information security program to safeguard customer information.

Information Security 45

Information Security Cybersecurity Security IT 45

Speaker: Aarushi Kansal, AI Leader & Author and Tony Karrer, Founder & CTO at Aggregage

Software leaders who are building applications based on Large Language Models (LLMs) often find it a challenge to achieve reliability. It’s no surprise given the non-deterministic nature of LLMs. To effectively create reliable LLM-based (often with RAG) applications, extensive testing and evaluation processes are crucial. This often ends up involving meticulous adjustments to prompts.

IT

Getting Information Done

AUGUST 31, 2016

Not if, But When You Get Hacked: Measuring and Proactively Managing Information Risk If this is true, then what are organizations to do? These increased cyber security threats corporations face today is a big concern for Board members and CEOs. The Chief Information Security Officer (CISO) along with help from the Chief Privacy Officer, General Counsel (GC), and CIO are tasked with keeping the company safe and addressing this risk.

Paper 40

Paper Information governance Risk Privacy 40

Privacy and Cybersecurity Law

AUGUST 28, 2016

On August 23, 2016, the Office of the Privacy Commissioner of Canada (OPC) released its joint report with the Office […].

Privacy 52

Privacy IT Data breaches 52