With data security, it is important to address the tactical details (think incident patterns, attack vectors, dynamic testing, etc.). But, it’s also important to look at the broader, more strategic issues and concerns with data security.

In talking to many of our customers, we identified three top strategic issues with data security that CIO’s, architects, and business leaders are most concerned about:

With another database breach in the news it’s a good time to stop and think about our obligations to our users. Companies are striving to build services that adapt quickly to customer needs, market shifts, and technology innovations. That’s great for customers and they’ve come to expect it. Customers also expect their information to be kept secure and private. All too often these days, we’re seeing that this second expectation goes unmet. In a number of cases, companies have

Recently a serious security vulnerability was discovered in the OpenSSL cryptographic software library. MarkLogic application servers can be configured to use SSL, and MarkLogic uses OpenSSL to provide this capability. A patch to OpenSSL has been released to address this vulnerability, and MarkLogic has built patches for all impacted MarkLogic versions with OpenSSL 1.0.1g to incorporate this new fix.

Impacted Versions

The following versions of MarkLogic are impacted by

This week we had the privilege of being a sponsor at the Security Through Innovation Summit in Washington DC, presented by our friends at Intel Corporation. This event brought together Government IT and industry leaders to discuss topics related to Cybersecurity, Big Data, Cloud, and Virtualization, among others.

Jonathan Bakke, our Senior VP of Global Services, participated in a panel discussion on the topic of Maximizing the Value of Big Data Analytics, with government executives from

Working with brainiacs, great discussions spontaneously occur. The following situation arose: A client wanted  all data to be searchable – but not all data readable. The instance they gave was an HR person knowing that specific forms were there — but not allowing them to be read. What were best practices? Our engineering and field teams weighed in:

• Generally speaking, database permissions do not distinguish between letting you know a document exists and letting you read the document.