Author: Bill Rudolfsky, CISSP
Contributed by: Blue Lance, Inc.

This paper discusses the importance of including security monitoring within a company�s best security practices and explains the difference between �state� and �event� monitoring.  Guidance is offered to deal with process and organizational issues that could impact the ability to get a security practice operational.  Finally, the capabilities within LT Auditor+, Blue Lance�s security monitoring solution, is reviewed to promote awareness of the role technology plays in contributing to the effectiveness of a security monitoring practice.

Author: Bill Rudolfsky, CISSP
Contributed by: Blue Lance, Inc.

In today�s business environments, computers and information systems have become critical tools in conducting business. The trustworthiness of these systems that a business depends on is vital and will increasingly be of interest to regulators. Relevant regulatory pressures depend on a number of factors, including industry type, size of the business, the degree of non-public information that the business processes, and the criticality of the business to the economic well being of the United States. This paper explores the regulatory landscape that influences the demand for information security and specifically focuses on the role of security event monitoring within an information security practice.