And so to Reg Whitepapers to fossick this week for security nuggets. We struck a couple of good ones.

Email as Evidence

In 2006 Morgan Stanley agreed to pay a $15m fine to the Securities and Exchange Commission for repeatedly failing to produce emails during the course of investigations. Oh dear. This whitepaper, commissioned by Mimecast, argues that organizations that archive email in a "fractured" environment risk losing control and may struggle to produce evidential-quality email evidence.

This is a good read for anyone concerned with the management of email. The author, Stewart Room, is a lawyer and among other things, the president of the National Association of Data Protection Officers. He has also written a couple of text books. ‘Data Protection and Compliance in Context’ (2006), ‘Email: Law, Practice and Compliance’ (2008).

On-demand security audits and vulnerability management

This is a long-ish whitepaper of two halves.

The first half outlines the value of the various approaches to network security: virus detection, firewalls, intrusion detection systems (IDS) and vulnerability management. There is also a comparison of the various approaches to vulnerability management. The thesis from IT security firm Qualys is that only on-demand security audits and vulnerability management provide a proactive approach, identifying network and device vulnerabilities before networks are compromised. The second half describes Qualys’s security solutions. ®