<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>CionSystems Blog</title>
	<atom:link href="http://blog.cionsystems.com/?feed=rss2" rel="self" type="application/rss+xml" />
	<link>http://blog.cionsystems.com</link>
	<description>Active Directory &#124; Windows Systems Management Solutions</description>
	<lastBuildDate>Thu, 14 Feb 2013 08:27:25 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.3</generator>
		<item>
		<title>Active Directory Manager Pro version 4.0.0.2</title>
		<link>http://blog.cionsystems.com/?p=391</link>
		<comments>http://blog.cionsystems.com/?p=391#comments</comments>
		<pubDate>Thu, 14 Feb 2013 07:41:12 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=391</guid>
		<description><![CDATA[With the release of CionSystems AD Manager Pro 4.0.0.2 you know have Web based access to PowerShell cmdlets without the need to install Powershell!  This lets users and  workflows invoke cmdlets to manage: ·         Active Directory ·         Exchange ·         Office 365 ·         File Shares ·         Managed Service Accounts ·         Local computer accounts CionSystems AD Manager Pro makes it easy to delegate access to cmdlets, while providing an audit trail and reporting that tracks all changes We’ve also added full  lifecycle support for Managed Service Accounts.  Create, control, provision, de-provision, and delete Managed Service Accounts.  Full workflow, audit, notification, and delegation support.]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=391</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Active Directory Manager Pro version 4.0.0.0</title>
		<link>http://blog.cionsystems.com/?p=387</link>
		<comments>http://blog.cionsystems.com/?p=387#comments</comments>
		<pubDate>Thu, 14 Feb 2013 07:30:45 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=387</guid>
		<description><![CDATA[With the release of CionSystems AD Manager Pro 4.0.0.0 you know have enhancements to many of the popular features such as Workflow Support Robo Request Secure provisioning and deprovisioning Role Based Access, Delegation Exchange mailbox management Bulk object management Customizable templates increase functionality Change Approval process Office 365 Management Exchange (2007/2010/2013) Management Through Powershell AD Management Through Powershell Manage Local Computer User accounts Managed Based Service Accounts Audit trail &#8211; who, when, what, where Easy permission determination Bulk Modifications management Temporary User and Temporary Group and Group membership management Schedule object addition and removal- automated cleanup Delete Object Archival and Restore Granular password, ACL management Group Policy Object (GPO) management OU Delegation OU based management Computer, Group, Contact, Site, Schema, Replication, Password management]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=387</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Active Directory Self-Service version 3.0.0.1</title>
		<link>http://blog.cionsystems.com/?p=385</link>
		<comments>http://blog.cionsystems.com/?p=385#comments</comments>
		<pubDate>Thu, 14 Feb 2013 07:29:13 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=385</guid>
		<description><![CDATA[CionSystems Active Directory Self-service, 3.0.0.1,  extends  Self Service and delegated management to group membership.  The solution is fully integrates email based notification and requests and  supports both Outlook and non-Outlook clients.  With this solution, you can manage all your groups –both security groups and Distribution Lists – including adding and removing members, and applying workflow to group lifecycle management. Simplify access control for SharePoint and Windows File Shares.  Local admins do not need AD Expertise to manage access to their resources and to provision and de-propvision users.  Automate requests for access.  All grants and denials of access rights are tracked via a full audit history. Reports clearly show status and historical information regarding all access requests.  Both Reporting and Workflow are customizable.  The simple, web based, interface supports Safari, Chrome, Firefox, and mobile browsers. Password changes are synchronized with Office 365, including changes made by help desk and administrative staff via ADMC or other tools.]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=385</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Two factor authentication and self-service for any Web application</title>
		<link>http://blog.cionsystems.com/?p=379</link>
		<comments>http://blog.cionsystems.com/?p=379#comments</comments>
		<pubDate>Thu, 14 Feb 2013 06:58:51 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=379</guid>
		<description><![CDATA[CionSystems’  Self-Service provides a two factor authentication systems that can be easily integrated with any web or non-web application. Instead of application managing the authentication, offload that functionality to CionSystems self-service authenticator and self-service module. In addition the application provides end users self passwords reset and unlocking of accounts. It also allows them to securely make account changes reducing the need for HR staff or your web-application  to maintain current user information. Benefits Features “Eliminate the single most common support issue” Empower your end users to securely reset their own passwords and unlock accounts Track all password activity to support full auditing and reporting Maintain stronger password policies Lower your Help Desk workload and reduce operating expenses Two factor authentication system. Self signup of users Supports Microsoft AD, Red Hat Open LDAP, and Centos Open LDAP Easy integration to web application CionSystems’ Self-Service is a state-of-the-art solution for identity administration and access control.  Self Service provides an intuitive, easy-to-use web-based user interface that supports: Policy creation and enforcement User self-signup, self-registration and self-service Self-management of user Profile Self-service for Password and account unlock Password expiry notification Two factor authentication for logins Webservice interfaces for any web-based application integration Audit and [...]]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=379</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Password Synchronization from on-premise domain to Office 365</title>
		<link>http://blog.cionsystems.com/?p=375</link>
		<comments>http://blog.cionsystems.com/?p=375#comments</comments>
		<pubDate>Thu, 14 Feb 2013 06:46:47 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=375</guid>
		<description><![CDATA[Now users’  Domain Account Passwords and  Office 365 passwords can be synchronized regardless of where or how the password change was initiated .   Change requests are intercepted, validated against  Office365 password complexity requirements and  then applied.  This is done securely, over an encrypted connection, protected from man in the middle attacks, spoofing, network capture,  or other attacks.  This process enforces  password complexity requirements and policy on shared accounts, even if the domain does not have  a password policy and effect. Benefits Same password complexity policy for on-premise domain without making any change to domain Password is synchronized from domain, so regardless of how password is changed it is synchronized with Office 365 Audit trail of password changes]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=375</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Sony’s security challenges are a warning to all industries</title>
		<link>http://blog.cionsystems.com/?p=359</link>
		<comments>http://blog.cionsystems.com/?p=359#comments</comments>
		<pubDate>Mon, 09 May 2011 21:04:58 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=359</guid>
		<description><![CDATA[Being proactive and forward thinking with your technical infrastructure can give administrator and technical leadership the agility to get in front of malicious technical events before they cannibalize the total integrity of your product offerings and services. All it takes is a moment of oversight to lose total reliability. If you haven’t already sat down to update your technical infrastructure then now is the time.]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=359</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Critical Services Outage</title>
		<link>http://blog.cionsystems.com/?p=346</link>
		<comments>http://blog.cionsystems.com/?p=346#comments</comments>
		<pubDate>Wed, 04 May 2011 21:54:42 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=346</guid>
		<description><![CDATA[Sites that depend on cloud services should not be blaming the provider of the service but rather themselves for not doing a diligent job planning ahead for this type of event. No matter how many guarantees you receive about the resilience of a cloud service you should always have a backup plan independent of the one making the guarantees. ]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=346</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Enhancing Enterprise Value</title>
		<link>http://blog.cionsystems.com/?p=326</link>
		<comments>http://blog.cionsystems.com/?p=326#comments</comments>
		<pubDate>Tue, 12 Apr 2011 22:29:02 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=326</guid>
		<description><![CDATA[The evolution of the cloud and on premise technology is providing enterprises with dynamic opportunities to lower their IT cost while gaining redundancy, availability and disaster recovery at a fraction of the price. ]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=326</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Single Sign-On, Password Self-Service and Deprovisioning Solutions</title>
		<link>http://blog.cionsystems.com/?p=321</link>
		<comments>http://blog.cionsystems.com/?p=321#comments</comments>
		<pubDate>Mon, 21 Mar 2011 19:08:12 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=321</guid>
		<description><![CDATA[Identity Management is a hidden, but significant, cost for most businesses. Whether companies use business intelligence and reporting to track the cost of identity management in their IT infrastructure or not, industry experts like Gartner, ARC, Forrester, IDC,  and many of their competitors know that Identity Management is a multi-billion dollar industry. When companies fail to manage identity or manage it poorly, those companies lose significant profit from their revenue stream.]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=321</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Notifier &amp; Reporter v2.5</title>
		<link>http://blog.cionsystems.com/?p=316</link>
		<comments>http://blog.cionsystems.com/?p=316#comments</comments>
		<pubDate>Fri, 10 Dec 2010 21:47:48 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=316</guid>
		<description><![CDATA[Active Directory Notifier and Reporter v2.5 solutions can help you meet compliance challenges and eliminate unauthorized access to critical enterprise information.  ]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=316</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>CionSystems &#8211; SelfService</title>
		<link>http://blog.cionsystems.com/?p=304</link>
		<comments>http://blog.cionsystems.com/?p=304#comments</comments>
		<pubDate>Wed, 29 Sep 2010 21:26:19 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=304</guid>
		<description><![CDATA[About 1 in 4 calls to IT help desks result in assisting users with password resets and account unlock requests. These types of requests often are avoidable and eat up precious organizational resources over time. CionSystems SelfService is something organizations can implement to eliminate requests for account unlocks, password resets, changes to user profiles, and group membership changes.]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=304</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Active Directory Manager Pro</title>
		<link>http://blog.cionsystems.com/?p=278</link>
		<comments>http://blog.cionsystems.com/?p=278#comments</comments>
		<pubDate>Thu, 16 Sep 2010 00:06:50 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=278</guid>
		<description><![CDATA[CionSystems offers a unique web based interface rather than the traditional native interface. What this means to your Active Directory and Identity administrator is that they can access and know the state of Active Directory securely from anywhere.

]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=278</wfw:commentRss>
		<slash:comments>0</slash:comments>
<enclosure url="http://www.cionsystems.com/blog/wp-content/uploads/2010/09/AD-Manager-Pro2.wmv" length="11961531" type="video/asf" />
		</item>
		<item>
		<title>CionSystems &#8211; Reporter</title>
		<link>http://blog.cionsystems.com/?p=261</link>
		<comments>http://blog.cionsystems.com/?p=261#comments</comments>
		<pubDate>Mon, 30 Aug 2010 20:44:22 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=261</guid>
		<description><![CDATA[Channeling comprehensive information to auditors, administrators and senior management in meaningful reports helps companies comply with standards of their own as well as federal requirements. CionSystems Active Directory Reporter tool shines light on the inner activities of your Active Directory infrastructure.]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=261</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>CionSystems &#8211; Recovery</title>
		<link>http://blog.cionsystems.com/?p=237</link>
		<comments>http://blog.cionsystems.com/?p=237#comments</comments>
		<pubDate>Tue, 24 Aug 2010 22:11:40 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=237</guid>
		<description><![CDATA[Anything from human error, malicious events or unforeseen environmental catastrophes can wipe out your critical system infrastructure. Having your critical systems crash is unacceptable when your customers deserve the best from you. Having systems go down for 24 hours or even days is unnecessary when you can back your systems up with CionSystems Active Directory Recovery. ]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=237</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>CionSystems &#8211; Change Notifier</title>
		<link>http://blog.cionsystems.com/?p=159</link>
		<comments>http://blog.cionsystems.com/?p=159#comments</comments>
		<pubDate>Fri, 06 Aug 2010 23:21:58 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=159</guid>
		<description><![CDATA[IT professionals who work with Active Directory know this can be a very beastly experience. However what’s troubling is change management for manage and unmanaged changes. It is imperative for IT professionals to know the changes that are happening to active directory, for example administrator group membership, accounts creation and deletion and so on not just from Audit/Compliance point of view but from Security point of view. Active Directory is the central repository that controls the access.]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=159</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Road Map for an Application/Software Security Architect (Part 6)</title>
		<link>http://blog.cionsystems.com/?p=113</link>
		<comments>http://blog.cionsystems.com/?p=113#comments</comments>
		<pubDate>Fri, 09 Apr 2010 19:03:29 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=113</guid>
		<description><![CDATA[So, the application designer has disclosed that the solution for the web services being designed will involve the (1) need to authenticate; (2) need to determine levels of authorization; and (3) [by the way] need to have some personalized data be carried forward to the application. If you, as a the security architect involved in the security assessment process, are smart, you would have a security framework to meet these requirements. And if you are &#8220;lucky&#8221; the application designer will have aligned the requirements to the security framework. But, the reality is that even with an architecture supported by standards and guideline, convincing the application developers to follow it is another story. Rather than take on the &#8220;creative conflict&#8221;, a discussion should be a convincing proposal that the information is in place to make it easier for the application developer to obtain the information through the use of the &#8220;architecture&#8221; than creating yet-another database. The proper manner is to bring value to the organization and enable the development process to be easier with the architecture. The key to bringing value is to have the information in the &#8220;best&#8221; place (here!), at the &#8220;best&#8221; time (now!) and with the &#8220;best&#8221; information [...]]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=113</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Road Map for an Application/Software Security Architect (Part 5)</title>
		<link>http://blog.cionsystems.com/?p=111</link>
		<comments>http://blog.cionsystems.com/?p=111#comments</comments>
		<pubDate>Fri, 09 Apr 2010 19:02:24 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=111</guid>
		<description><![CDATA[Without a Digital Identity, how would you expect to do any authentication? And with an incomplete Digital Identity, how would you expect to get the authorization done correctly? Without the proper data model and the expectation that it would have the correct data (besides being in the right place at the right time), securing a system is impossible, although having the information, it is the easiest question to answer. In my last post, I examined the purpose of a Digital Identity and why it is not appropriate when thinking through the architecture of a solution to make this another after-thought of the system architecture. Worse than not having the information (a security risk), is that the information is inaccurate, both in reliability and conflicting (a business risk). So let me lay out some rules and guidelines, and a couple of general questions you might ask as part of the logical design. But before getting started, a good data model of the infrastructure that is used for authentication and authorization is required. This is part of the overall security framework, which has an “as is” as well as a “to be” component. In this case (and the subject of a framework [...]]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=111</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Road Map for an Application/Software Security Architect (Part 4)</title>
		<link>http://blog.cionsystems.com/?p=109</link>
		<comments>http://blog.cionsystems.com/?p=109#comments</comments>
		<pubDate>Fri, 09 Apr 2010 19:01:11 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=109</guid>
		<description><![CDATA[Planning your application&#8217;s use of the digital identity is not an after-thought of system architecture. At the least, it might offer the occasional lack of reliable and conflicting information. At the worst, it provides little, if no protection, at all. And like the proverbial little dutch boy, you will be putting fingers in the holes of the dike, attempting to shore up an weak infrastructure with fixes and excuses. In my previous post, four classifications of possible vulnerabilities were given. The top one, in my view, is the use of Digital Identity. Application developers are prone to view this as as just another operational infrastructure component that will, by some miracle, provide the reliable credentials for authentication. Authorization is something that either is part of authentication or just a couple of conditions in the lines of code. The problem is more than just the lack of governance of how an application does authentication and (required) authorization; the issue is that the data is not properly planned to support proper authentication and authorization for an application to leverage properly. Digital Identity: At a recent security event I attended, a colleague was lamenting how his “LDAP” servers were not being synchronized correctly. [...]]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=109</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Road Map for an Application/Software Security Architect (Part 3)</title>
		<link>http://blog.cionsystems.com/?p=106</link>
		<comments>http://blog.cionsystems.com/?p=106#comments</comments>
		<pubDate>Fri, 09 Apr 2010 18:58:17 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=106</guid>
		<description><![CDATA[Risk assessments for application software is not a matter of a quick penetration test nor a matter of code reviews at a single point in time. It is a process of moving through the application/solution&#8217;s Software Development Life Cycle (SDLC) and evaluating the results of the controls that are put in place at each phase. Whether it is waterfall, or agile method, waiting for the end of the final delivery of the software makes no sense. No matter how much you put into the end phase (usually the acceptance testing), if you have not tested and sampled the effectiveness and examined the results of the controls along the way, it will be a flawed product. So having a security risk gate review and assessment at each point in the process must be mandatory. The needs and the controls will be different at each point in the SDLC for a security evaluation. The previous posting spoke of the necessary elements of scope, purpose, objectives, responsibilities, and processes for a risk assessment. will be different. While an application security is evaluated on many different levels, from code to architecture, the intent is to define “risk assessment” on the latter since that is [...]]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=106</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Road Map for an Application/Software Security Architect (Part 2)</title>
		<link>http://blog.cionsystems.com/?p=104</link>
		<comments>http://blog.cionsystems.com/?p=104#comments</comments>
		<pubDate>Fri, 09 Apr 2010 18:55:14 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[CionSystems]]></category>

		<guid isPermaLink="false">http://blog.cionsystems.com/?p=104</guid>
		<description><![CDATA[Vulnerability testing at the acceptance stage of an application&#8217;s Software Development Life Cycle (SDLC) will not compensate for the lack of an understanding of what is being done during the software development even though you may not have control over the development efforts. You need a plan that puts those controls in place and allows that governance. Ignoring vulnerabilities will not prevent breaches. Remembering back to building a risk assessment plan, we can build a similar plan for application security, but with the intention of engagement at predefined points in the SDLC for _every_ software solution (or application) that might also raise concern for a risk assessment. The application security plan needs to cover the same set of tasks that a risk assessment might cover and would have a similar set of assignments of a RACI (Responsible, Accountable, Consulted, Informed) matrix. The first step is to establish the purpose and objective of the program. The program&#8217;s main purpose is to reduce the number and level of “bad” design and application programming habits. The intention is to determine the effectiveness of the plan by measuring how effective it is in avoiding mitigation efforts. This assumes that there are appropriate policies as [...]]]></description>
		<wfw:commentRss>http://blog.cionsystems.com/?feed=rss2&amp;p=104</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
