All
NORCONS
direct connect
Events
Transcripts
Poll Results
Not a Member? Learn More

17102 NOREX direct connect Users and Counting

Connecting directly with your peers has never been easier. This dynamic online community of project-oriented IT professionals connects your staff with similarly-tasked members. Initiate or join conversations of your choice as members post and share behind a secured log-in. Gaining actionable project insight and perspectives from multiple sources is your tactical edge.

Create New Topic

Do you need additional assistance? Please contact the NOREX Information Team.

01/17/17

Freedom of Information (FOI) compliance tool

We are a provincial government entity seeking a tool to support freedom of information compliance. Vendor support is being discontinued for the current tool, CSDC … read more ›

1 Comments
Closed Topic
11/17/16

EMC centera / source one

looking for email archiving solutions to replace EMC centerra and sourceone. … read more ›

5 Comments
Closed Topic
09/21/16

Dell DDPE (Dell Data Protection Enterprise)

Hello, Has anyone rolled this encryption software out to an organization over 500+ seats? Can anyone please comment on the following topics: Pilot Solution Deployment … read more ›

2 Comments
Closed Topic
07/11/16

Software Enterprise Life Cycle Management

Has anyone had experience in planning lifecycles for enterprise solutions? We’re currently attempting to define and IT plan for managing the lifecycle of core software … read more ›

3 Comments
Closed Topic
12/14/16

Document Retention

We are looking for a consultant that specializes in helping mid size companies develop a document retention strategy and leading a project to clean up … read more ›

3 Comments
Closed Topic
11/23/16

Pen Test or Security Assessment recommendations?

Hello! We are looking to have an external (network) pen test done and possibly some other security assessments such as a physical pen test, internal … read more ›

4 Comments
Closed Topic
01/07/17

Business Associate Agreement samples for cloud hosts

Our safety & risk folks would like us to develop a business associate agreement (BAA) with any cloud vendor that we do business with that … read more ›

3 Comments
Closed Topic
03/23/17

Digital Asset Management (DAM)

Hello Norex Members, We are currently researching Digital Asset Management and would like to gather information from other organizations. If any Norex members are willing … read more ›

2 Comments
Closed Topic
03/05/17

BYOD security / IT risks

Does anyone have a list of risks associated with supporting BYOD w.r.t. Security, IT, Legal and Governance? Here is what I have so far. IT … read more ›

3 Comments
Closed Topic
05/25/16

Software License Monitoring

Given the complexity of license agreements and the number of vendor software we purchase, I'm looking for an effective means to monitor software license deployment … read more ›

3 Comments
Closed Topic
05/18/16

Active Directory Auditing

Looking for how other organizations are auditing active directory to ensure security. Do you have a checklist of questions? Do you pull logs and analyze? … read more ›

3 Comments
Closed Topic
10/11/17

Onboarding and Offboarding User Provisioning Process Map

In search of any sample documents \ resources for a “user provisioning process map”. Would like to review (possibly adjust) and properly document our current … read more ›

1 Comments
Closed Topic
10/05/17

HIPAA Sanctions Example and HIPAA Breach Notification Policy

A Member is looking for a HIPAA Sanctions example and a HIPAA Breach Notification policy. If anyone can kindly share documents in these areas it … read more ›

1 Comments
Closed Topic
09/28/17

HIPAA Training for non-medical professionals

Can anyone recommend a HIPAA training module for non-medical professionals? We are looking for a HIPAA training course that includes sound, build in testing, SCORM … read more ›

2 Comments
Closed Topic
08/14/17

End User File Retention Policy when Individual Leaves the Company

A member asks what standard practice do other companies follow for end user file retention when an individual leaves their company? The member is looking … read more ›

3 Comments
Closed Topic
09/13/17

Moving Files Without Modifying Them

Does anyone have a tool, or a process (maybe recording checksums,) that can provide documentation that a file that has been ‘moved’ and not ‘copied’ … read more ›

5 Comments
Closed Topic
08/07/17

Public facing website

Do you have publicly facing websites that are accessed outside of the US? If yes, how do you handle website tracker (such as cookies) compliance? … read more ›

1 Comments
Closed Topic
08/03/17

Laws and Regulations Regarding Data in Other Countries

Has any multinational company had experience they are willing to share on laws and regulations of where data must reside for any of the following … read more ›

2 Comments
Closed Topic
07/18/17

Mapping of ISO 27001, HIPAA, SOX & PCI Standards

A member is searching for a document that contains a mapping of the ISO 27001, HIPAA, SOX & PCI standards. Does anyone have something they … read more ›

2 Comments
Closed Topic
07/10/17

Cobit 5

A member would like to hear others experiences with Cobit 5. … read more ›

1 Comments
Closed Topic
06/29/17

SharePoint Compliant with 21 CFR Part 11

A member is asking if anyone has validated SharePoint to be compliant with 21 CFR part 11. Can anyone share feedback on this? … read more ›

2 Comments
Closed Topic
07/05/17

New York Regulation for Cybersecurity Program and Policy

A member is looking for a template that financial companies are developing as a part of the New York regulation for Cybersecurity Program and Cybersecurity … read more ›

1 Comments
Closed Topic
07/05/17

EU GDPR (General Data Protection Regulation)

Looking for information,lessons learned,templates, etc for EU GDPR? I am trying to learn as much as possible about GDPR to ensure we are fully in … read more ›

1 Comments
Closed Topic
05/08/17

ISO 22301 or 27001

As a B2C SaaS company with about 50% of our customers outside the US, we are grappling with how best to implement ISO 22301 or … read more ›

1 Comments
Closed Topic
03/31/17

Seeking guidance for Device & Media Control Policy mandated by HIPAA Regulations

A member is seeking guidance for their Device & Media Control policy with the following HIPAA regulatory references: 164.310(d)(1) - Device and media controls, 164.310(d)(2)(i) … read more ›

1 Comments
Closed Topic