Roger A Grimes

Web Application Configuration Analyzer can now suppress any rule an adminstrator feels is not appropriate for a scan of servers and hosted apps

From Sarbanes-Oxley to HIPAA to PCI/DSS, chances are your company is subject to myriad compliance requirements. And although the goals of such regulations are noble, the chunk taken out of your security budget to uphold them is considerable.

2006 may have been a wash in terms of overall computer security, but if you're banking on status quo in 2007, chances are your budget won't have the right mix. And if there's one area you're sure to come up short in this year, it's information protection. Consolidation is one big-picture solution for which companies may not be budgeting enough this year.

I love Internet Explorer 7, and not for the tabbed browsing. I don't get the excitement over that feature. I'm not even in love with the new interface. What I love is its increased security.

Should Microsoft profit from closing the very security holes it could be blamed for creating? Critics worry that key vulnerabilities could be left in Windows longer to boost the company's revenue streams.