The tag has no wiki summary.

learn more… | top users | synonyms

-3
votes
1answer
59 views

For sys. admins, are you legally required to surrender your passwords if you leave your job? [closed]

Just a quick question for you guys, and I have been wondering about it ever since. I know that I am legally required to reset them to whatever the company wants them to, but what if my boss asks me ...
1
vote
2answers
456 views

AD Read-Only Account (for Authentication)

I have experience with Linux server administration, however when it comes to Windows I'm pretty much a newbie. I have a lot third-parties applications that use an AD admin account to perform its ...
0
votes
1answer
116 views

What are the benefits of having a data center located geographically far away from your customer's office? [closed]

Was just reading through an article on data centers as linked: http://www.theage.com.au/it-pro/business-it/what-to-look-for-in-a-data-centre-20131122-hv3qj.html Appropriate quote from article below: ...
-4
votes
1answer
194 views

A complete tool for auditing and archiving emails would be helpful for the community? [closed]

Please, don't treat this like a discussion question, I'm looking for direct answers: Yes / No, because... I work on a financial company and I'm needing a tool for email archiving and auditing. The ...
1
vote
2answers
95 views

How can I store logs and meet compliance requirements for free? [closed]

I am trying to keep long-term logs of an app in such a way, that it could plausibly demonstrated to third parties/court that the application has processed certain data at a given time. The data can ...
2
votes
1answer
876 views

Configuration Compliance auditing for many CentOS 5.x boxes

Current Situation I have a client with many (200x) CentOS 5.x servers deployed in various web, mail, database and file server roles, and these boxes have been variously administrated to a lessor or ...
0
votes
1answer
60 views

Network Change Control & Compliance

I'm looking for a network change management & compliance audit tool, I know that SolarWinds and tufin are very know. Do you have any experience that you can share regarding these two or other?
7
votes
1answer
831 views

Has anyone achieved Level 1 PCI compliance on AWS?

All the FAQs, documents and statements published by AWS aside, did any Level 1 merchant actually achieve PCI compliance on AWS yet? We're evaluating moving some of our services to EC2/VPC, but our ...
4
votes
4answers
478 views

Compliance/e-discovery - message and SMS text archiving

I work in the financial trading industry and have a forthcoming regulatory requirement to begin archiving electronic communications. This includes social media, instant messaging (e.g. AIM and Yahoo ...
1
vote
2answers
220 views

Email Archive Solution

I need recommendation for Email archive solution. We have setup hosting and email server on one of government enterprise where they need to store all incoming/outgoing emails for compliance and ...
1
vote
2answers
695 views

Email Approval Process On Exchange Server

Are there any tools out there that allow you to check a box (or something like that) and say that you want to subject a given email for approval. Then, once the email is approved, it goes to the ...
14
votes
7answers
586 views

Long-term storage of Business Critical data

This is a really tricky one, and to some extent it's not a technical problem, and might not belong here, but Server Fault is for system administrators ... who manage or maintain computers in ...
0
votes
1answer
388 views

Is there a tool to check GPOs like MBSA?

I'd like to provide some background before I pose my question so please, bear with me. I have come across Microsoft's Security Compliance Manager. It's rather new to me and as I understand so far, ...
1
vote
2answers
217 views

What are the internet standards for the CNAME record?

I'd like to know what internet standard defines the CNAME
2
votes
1answer
316 views

What are HIPAA rules concering RPO and RTO for a doctors office?

I am planning system upgrades at several Group Practice doctor offices. I am asking them questions concerning what their RTO (Recovery Time Objective) and RPO (Recovery Point Objective) may be so ...
2
votes
6answers
1k views

what's the difference between PCI and SAS 70 compliance when I am shopping for a hosting company to stick my servers in?

I am looking for hosting, ec2 is SAS 70 compliant (almost) and I would have gone straight for PCI compliant and tier 4 only but I'm considering SAS 70. What are the differences or similarities?
2
votes
4answers
81 views

Media / Printed material needed for Upgrade Compliance? [duplicate]

Possible Duplicate: Can you help me with my software licensing question? If we are buying new or used Windows FPP (Retail), we make sure we keep the Media, EULA, Manual, and License. ...
6
votes
4answers
600 views

Backup is not Archiving - But what requirements does archiving have?

There's related thread on how to handle archiving. I'm asking on how to find the requirements in a company on the way archiving should be done, and also the requirements that need to be fullfilled so ...
5
votes
4answers
4k views

Are there any FIPS-140-2 certified solutions for Linux?

I'm not even 100% certain what this involves, but my current understanding is this: use of only approved cryptographic algorithms for network traffic (easy, we use SSL and lock down the algorithms ...