CISO Strategy & Planning
Top Stories
-
Conference Coverage
23 Jul 2026
Black Hat 2026: Key news, takeaways and security trends
This is your guide to the breaking news, trending topics and more at Black Hat USA 2026, from Dark Reading, Cybersecurity Dive and TechTarget Cybersecurity. Continue Reading
-
Conference Coverage
17 Apr 2026
RSAC 2026 Conference: Key news and industry analysis
Check out SearchSecurity's RSAC 2026 guide for reports on notable presentations and breaking news at the world's biggest infosec event. Continue Reading
-
Feature
29 Jan 2026
Cybersecurity and business needs: A CISO's 2026 outlook
Uncover the 2026 cybersecurity predictions, trends, tools and strategies CISOs need to navigate evolving business and threat landscapes. Continue Reading
-
Tip
27 Jan 2026
5 steps to approach BYOD compliance policies
BYOD endpoints are difficult to secure because IT does not own or preconfigure the device. Learn about policies and controls that help organizations stay compliant. Continue Reading
-
Feature
26 Jan 2026
10 cybersecurity trends to watch in 2026
As cyber-risks escalate in 2026, CISOs face AI-powered attacks, OT vulnerabilities and quantum computing threats. Read more on the key trends shaping security. Continue Reading
-
Tip
22 Jan 2026
18 enterprise email security best practices for 2026
Safeguard your organization. Train employees to avoid password reuse, spot phishing attempts and encrypt messages, among other email security best practices. Continue Reading
-
Feature
21 Jan 2026
Top 10 cybersecurity predictions for 2026
AI will further reshape cybersecurity in 2026, predict CISOs. From agentic AI defensive toolchains to MCP server risks, explore the anticipated shifts. Continue Reading
-
Feature
16 Jan 2026
Majority of CISOs now hold executive-level titles, IANS reports
More organizations grant the CISO an executive title, an IANS survey found, as the top security job becomes less of a hands-on position and more of a business leader role. Continue Reading
-
News
09 Jan 2026
News brief: AI threats to shape 2026 cybersecurity
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
08 Jan 2026
CISO reporting structure key to strong cybersecurity outcomes
Find out which CISO reporting structure a cybersecurity expert recommends, based on objective security performance metrics from hundreds of organizations. Continue Reading
-
Tip
07 Jan 2026
CISO's guide to nonhuman identity security
Nonhuman identities are one of the fastest-growing yet least-governed access risks in the enterprise today. Learn how to address them. Continue Reading
-
Feature
22 Dec 2025
Prepare for the 2026 threatscape with thought leaders' insights
Explore the 2026 cybersecurity landscape, featuring AI-first strategies, human-centric defenses, cloud security and resilience-focused operations. Continue Reading
-
News
12 Dec 2025
News brief: Future of security holds bigger budgets, new threats
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
10 Dec 2025
Beyond the SBOM: What CISOs should know about CBOMs and HBOMs
SBOMs, CBOMs and HBOMS -- oh my! Learn how these bills of materials help manage supply chain risk and assess which of the three your organization needs. Continue Reading
-
Tip
08 Dec 2025
Guide to using digital twins for cybersecurity testing
The digital twin market is growing rapidly as more security teams use the technique to run what-if scenarios to determine if their enterprise networks are vulnerable. Continue Reading
-
Opinion
05 Dec 2025
Security highlights from AWS re:Invent 2025
AWS made a handful of announcements about how it is prepping to secure increased productivity with AI. Continue Reading
-
Tip
03 Dec 2025
What CISOs should know about SOC modernization
To achieve security outcomes that align with their organizations' risk appetites and business objectives, CISOs with struggling SOCs must consider upgrades. Learn more. Continue Reading
-
Tip
17 Nov 2025
What agentic AI means for cybersecurity
Agentic AI technology promises a more autonomous and proactive approach to protecting enterprise assets. But deploying tools that require less human intervention also carries risk. Continue Reading
-
News
14 Nov 2025
News brief: Agentic AI disrupts security, for better or worse
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Feature
12 Nov 2025
How BISOs enable CISOs to scale security across the business
Here's an understatement: Being a CISO at a large, complex organization is hard. Could a BISO help? Learn about these liaisons between security and lines of business. Continue Reading
-
Tip
03 Nov 2025
To maximize their influence, CISOs need diverse skills
In many organizations today, when the CISO talks, the CEO and board listen. CISOs who successfully rise to the occasion have broad skillsets. Continue Reading
-
Tip
29 Oct 2025
How to write an information security policy, plus templates
Faced with multiplying security threats and complex IT environments, companies need comprehensive policies that detail how they will protect their systems and respond to attacks. Continue Reading
-
Tutorial
14 Oct 2025
How to use Gophish to fortify security awareness training
Stop phishing attacks before they happen. Discover how Gophish simulates real threats to identify training gaps and strengthen employee awareness. Continue Reading
-
News
10 Oct 2025
News brief: AI's cybersecurity risks weigh on business leaders
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
09 Oct 2025
How CISOs can get out of security debt and why it matters
Like technical debt, security debt accumulates quickly, due to unpatched software, rushed security testing and poor visibility. When the bill comes due, it could mean a breach. Continue Reading
-
Tip
08 Oct 2025
What CISOs should know about DeepSeek cybersecurity risks
DeepSeek poses significant risks to U.S. enterprises -- even those that don't greenlight it for internal use. CISOs should take steps to reduce the threat. Continue Reading
-
News
26 Sep 2025
News brief: AI cybersecurity worries mount
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
10 Sep 2025
CISO's guide to security vendor consolidation
Organizations adopt a multitude of disparate security tools over time, which often results in tool overlap and added complexity for protecting systems and data. Continue Reading
-
News
05 Sep 2025
News brief: U.S. Cyber Trust Mark update and how to prepare
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Definition
03 Sep 2025
What is information security (infosec)?
Information security (infosec) is a set of policies, procedures and principles for safeguarding digital data and other kinds of information. Continue Reading
-
Video
18 Aug 2025
An explanation of quantum key distribution
Quantum key distribution uses physics to create secure encryption keys that detect eavesdropping instantly, offering a quantum-safe solution for future cybersecurity challenges. Continue Reading
-
Video
15 Aug 2025
An explanation of post-quantum cryptography
Quantum computers threaten to break today's encryption protocols. Post-quantum cryptography aims to develop new algorithms resistant to quantum attacks before it's too late. Continue Reading
-
Definition
13 Aug 2025
What is governance, risk and compliance (GRC)?
Governance, risk and compliance (GRC) refers to an organization's strategy, or framework, for handling the interdependencies of the following three components: corporate governance policies, enterprise risk management programs, and regulatory and company compliance. Continue Reading
-
Opinion
01 Aug 2025
Black Hat 2025: Navigating AI and supply chain security
Experts at the conference will discuss how AI impacts software supply chain security, highlighting challenges and strategies for developers and security teams. Continue Reading
-
Definition
21 Jul 2025
What is a CISO (chief information security officer)?
The CISO (chief information security officer) is a senior-level executive responsible for developing and implementing an information security program. Continue Reading
-
Feature
18 Jul 2025
CISO role in ASM could add runtime security, tokenization
Runtime security and tokenization stand to play a bigger role in attack surface management, a development that could influence security leaders' responsibilities. Continue Reading
-
Tip
18 Jul 2025
How to build a cybersecurity team to maximize business impact
How CISOs design and build their security teams is as important as the technology they select to safeguard their organizations' digital assets. Continue Reading
-
Tip
17 Jul 2025
How to calculate cybersecurity ROI for CEOs and boards
Calculating and communicating cybersecurity ROI can help persuade top management to invest. Here's how to use meaningful, concrete metrics that resonate with business leaders. Continue Reading
-
Feature
14 Jul 2025
How CISOs can prepare for the quantum cybersecurity threat
CISOs should begin preparing now for quantum computing's impact on cybersecurity. Start with assessments and planning before migrating to post-quantum cryptography standards. Continue Reading
-
Tip
11 Jul 2025
How to build a cybersecurity culture across your business
As a company's cyber-risks evolve, so must its culture. Follow these tips to create a strong cybersecurity culture that helps protect your organization from cyberthreats. Continue Reading
-
Tip
10 Jul 2025
CISO's guide to creating a cybersecurity board report
An effective cybersecurity board report influences executive decision-making at the highest levels. Learn how to write a report that resonates with corporate directors. Continue Reading
-
Tip
10 Jul 2025
What CISOs need to know about AI governance frameworks
AI offers business benefits but poses legal, ethical and reputational risks. Governance programs manage these risks while ensuring responsible use and regulatory compliance. Continue Reading
-
Feature
07 Jul 2025
What is the future of cybersecurity?
As cyberthreats grow more sophisticated, enterprises face mounting challenges. What does the future of cybersecurity hold, and how can organizations stay ahead? Continue Reading
-
Tip
02 Jul 2025
How to build a cybersecurity strategy and plan in 4 steps
A cybersecurity strategy isn't meant to be perfect, but this high-level plan must be proactive, effective, actively supported and evolving. Here are four key steps to get there. Continue Reading
-
Tip
01 Jul 2025
Cybersecurity career path: A strategic guide for professionals
There's no single path for everyone, but knowing what employers look for and following these best practices can help you move up the cybersecurity career ladder. Continue Reading
-
Feature
30 Jun 2025
What is cybersecurity transformation? Best practices for success
Under increasing regulatory pressure and rising cyber threats, executives must prioritize cybersecurity transformation to safeguard assets, enable growth and ensure resilience. Continue Reading
-
Feature
30 Jun 2025
CISO playbook for securing AI in the enterprise
CISOs must partner with executive leadership to adopt a business-aligned AI security strategy that protects the organization while enabling responsible AI adoption. Continue Reading
-
News
30 Jun 2025
News brief: AI security threats surge as governance lags
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
30 Jun 2025
How CISOs can manage and reduce compliance fatigue
Compliance fatigue can undermine security when poorly managed. CISOs can combat it by starting conversations, automating processes and using compliance to drive security initiatives. Continue Reading
-
Tip
30 Jun 2025
10 cybersecurity best practices for organizations in 2025
To improve your organization's cybersecurity program, follow these best practices to safeguard your infrastructure and ensure a quick recovery after a breach. Continue Reading
-
Feature
30 Jun 2025
Enterprise cybersecurity: A strategic guide for CISOs
CISOs and others responsible for safeguarding an organization's systems, networks and data need to manage day-to-day threats while also planning strategically for what's ahead. Continue Reading
-
Feature
30 Jun 2025
Why effective cybersecurity is important for businesses
Cyberattacks can have serious financial and business consequences for companies, which makes implementing strong cybersecurity protections a critical step. Continue Reading
-
Tip
27 Jun 2025
Cybersecurity in M&A due diligence: Best practices for executives
Companies wouldn't think of merging with another organization without performing financial or business due diligence. The same is true of cybersecurity. Continue Reading
-
Tip
27 Jun 2025
The CISO evolution: From security gatekeeper to strategic leader
Amid accelerating digital transformation and growing regulatory pressure, leading CISOs have emerged from behind the scenes and taken the stage as influential business leaders. Continue Reading
-
Tip
27 Jun 2025
Cybersecurity budget justification: A guide for CISOs
The best way to get a security budget request denied? Present it like a jargon-filled shopping list. Instead, make the case by tying security spending to business outcomes. Continue Reading
-
Tip
27 Jun 2025
Cybersecurity skills gap: Why it exists and how to address it
The cybersecurity skills shortage is putting enterprises at risk. Worse, it shows no sign of abating. Here is why it's happening and what employers can do to mitigate the problem. Continue Reading
-
Tip
26 Jun 2025
Cyber insurance trends 2025: What executives need to know
Cyber insurance is essential for protecting an organization from the financial impact of a cyberattack and is a critical part of a risk management strategy. Continue Reading
-
Tip
26 Jun 2025
10 key cybersecurity metrics and KPIs your board wants tracked
Security leaders need cybersecurity metrics to track their programs and inform decision-makers. These 10 metrics and KPIs provide a good foundation for tracking essential activity. Continue Reading
-
Feature
24 Jun 2025
CISO burnout: How to balance leadership, pressure and sanity
With CISO burnout comes increasing cyber incidents and costly leadership turnover. Organizations must invest in support to prevent this growing security risk. Continue Reading
-
Tip
24 Jun 2025
Cybersecurity governance: A guide for businesses to follow
Cybersecurity governance is now critical, with NIST CSF 2.0 recently adding it as a dedicated function. Learn why governance is core to an effective cyber strategy. Continue Reading
-
Tip
23 Jun 2025
How to choose a cybersecurity vendor: 12 key criteria
Choosing a cybersecurity vendor entails a two-phase approach: shortlisting vendors using clear requirements, then conducting thorough evaluations based on key criteria. Here's how. Continue Reading
-
Feature
20 Jun 2025
What executives must know about nation-state threat actors
Nation-state threat actors like Russia, China, Iran and North Korea are targeting critical infrastructure and sensitive data, so executives must prepare to defend against them. Continue Reading
-
Tip
18 Jun 2025
CISO's guide to implementing a cybersecurity maturity model
CISOs must both meet today's challenges and anticipate tomorrow's -- no easy feat. Cybersecurity maturity models help strategically navigate evolving threats, regulations and tech. Continue Reading
-
Tip
17 Jun 2025
Shadow AI: How CISOs can regain control in 2025 and beyond
Shadow AI threatens enterprises as employees increasingly use unauthorized AI tools. Discover the risks, governance strategies, and outlook for managing AI in today's workplace. Continue Reading
-
Tip
13 Jun 2025
CISO's guide to building a strong cyber-resilience strategy
Cyber-resilience strategies that integrate BCDR, incident response and cybersecurity enable CISOs to build frameworks that help their organizations effectively handle cyberattacks. Continue Reading
-
Tip
12 Jun 2025
How to craft an effective AI security policy for enterprises
Enterprises unable to manage AI risks face data breaches, algorithmic bias and adversarial attacks, among other risks. Learn how to implement a comprehensive AI security policy. Continue Reading
-
Tip
11 Jun 2025
Should cybersecurity be part of your digital transformation strategy?
Digital transformation offers companies some tantalizing possibilities. But new technologies usher in new vulnerabilities. Cybersecurity needs to play a key role. Continue Reading
-
Feature
10 Jun 2025
AI-powered attacks: What CISOs need to know now
AI-powered attacks are transforming cybersecurity, using AI to automate and personalize threats at an unprecedented scale since 2022. Continue Reading
-
News
06 Jun 2025
News brief: CISA and partners face budget overhauls, cuts
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
02 Jun 2025
The DOGE effect on cybersecurity: Efficiency vs. risk
The DOGE effect on security is a complex issue. Pursuit of efficiency might be a legitimate goal, but experts caution it can conflict with cybersecurity defenses. Continue Reading
-
Tip
20 May 2025
Best practices for board-level cybersecurity oversight
Corporate boards must play an increasingly active role in overseeing cybersecurity strategies. Here's what they need to know, from SEC disclosure requirements to best practices. Continue Reading
-
Tip
19 May 2025
AI model theft: Risk and mitigation in the digital era
Enterprises are spending big bucks on developing and training proprietary AI models. But cybercriminals are also eyeing this valuable intellectual property. Continue Reading
-
News
09 May 2025
News brief: AI security risks highlighted at RSAC 2025
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Feature
01 May 2025
RSAC 2025: The time for crypto-agility adoption is now
An RSAC 2025 speaker explained why companies should begin their quantum-safe journey now and how crypto-agility adoption helps prepare for post-quantum cryptography. Continue Reading
-
Feature
30 Apr 2025
RSAC Conference 2025 video reports
We chatted on camera with attendees and presenters at RSAC 2025. Check out this video collection to get highlights from one of the world's major cybersecurity conferences. Continue Reading
-
Opinion
25 Apr 2025
RSAC 2025 to center on agentic AI, GenAI in security
If AI continues to become more accurate and secure, automation and self-healing systems that strengthen security programs could be the future. Continue Reading
-
Definition
14 Apr 2025
What is corporate governance?
Corporate governance is the combination of rules, processes and laws by which businesses are operated, regulated and controlled. Continue Reading
-
Feature
09 Apr 2025
How to create a data breach response plan, with free template
A data breach response plan outlines how a business reacts to a breach. Follow these six steps, and use our free template to develop your organization's plan. Continue Reading
-
Opinion
27 Mar 2025
What the $32B Google-Wiz deal says about cloud-native security
Google's acquisition of Wiz for $32 billion highlights the importance of cloud-native security as organizations transition to microservices and containerization. Continue Reading
-
Tip
18 Mar 2025
How to calculate the cost of a data breach
An effective risk management policy can help companies determine the best ways to offset the costs associated with a data breach and avoid reputational damage. Continue Reading
-
Tip
07 Mar 2025
SEC cybersecurity disclosure rules, with checklist
Public companies must regularly share information about their cybersecurity practices and disclose details of material cyberincidents. Learn how to comply. Continue Reading
-
Opinion
13 Feb 2025
Entrust sells certificate business: Implications and actions
Entrust selling its certificate business to Sectigo isn't the only change that enterprises will face when it comes to the future of digital certificates. Continue Reading
-
Definition
07 Feb 2025
What is cyber insurance, and why is it important?
Cyber insurance, also called cyber liability insurance or cybersecurity insurance, is a contract a business or other organization can purchase to reduce the financial risks associated with doing business online. Continue Reading
-
Podcast
21 Jan 2025
Risk & Repeat: What is the future of CISA?
South Dakota Gov. Kristi Noem, who is President Donald Trump's nominee for DHS secretary, said during a recent confirmation hearing that CISA should be 'smaller.' Continue Reading
-
News
16 Jan 2025
Tech industry experts digest cybersecurity executive order
IT pros assess a last-minute cybersecurity executive order with new directives on a broad swath of topics, from cybercriminal sanctions to AI and identity management. Continue Reading
-
Tip
07 Jan 2025
Enterprise cybersecurity hygiene checklist for 2025
Enterprise cybersecurity hygiene must be a shared responsibility between employees and employers. Learn how both can get the job done with this checklist. Continue Reading
-
News
06 Jan 2025
Amit Yoran, Tenable CEO and cybersecurity advocate, dies at 54
Amit Yoran was a decades-long practitioner of cybersecurity and previously held key roles at the U.S. Department of Homeland Security, RSA Security and NetWitness. Continue Reading
-
Tip
02 Jan 2025
Top 7 enterprise cybersecurity challenges in 2025
Security teams faced unprecedented challenges in 2024. The year ahead appears no less daunting. Here are the cybersecurity trends and safeguards to consider in 2025. Continue Reading
-
News
23 Dec 2024
10 of the biggest cybersecurity stories of 2024
Some of the biggest stories of the year include a massive IT outage, a record-setting ransom payment and devastating breaches at several U.S. telecommunications companies. Continue Reading
-
News
16 Dec 2024
Blackberry sells Cylance to Arctic Wolf for $160M
After exiting the mobile device market, Blackberry acquired Cylance for $1.4 billion in 2018 to expand its presence in enterprise security. Continue Reading
-
Opinion
11 Dec 2024
3 cybersecurity predictions for 2025
Will service as software, agentic cybersecurity and automated remediation reach their potential in 2025? Read up on what analyst Tyler Shields has to say. Continue Reading
-
News
26 Nov 2024
AWS CISO details automated cybersecurity tools for customers
Chris Betz, CISO at AWS, discusses how three internal tools are designed to automatically identify and mitigate threats for the cloud giant's customers. Continue Reading
-
Tip
18 Nov 2024
What CISOs need to know to build an OT cybersecurity program
More companies are tasking CISOs with operational technology security. But this oversight means a new strategy for those unfamiliar with building an effective OT security program. Continue Reading
-
Tip
07 Nov 2024
How to create an enterprise cloud security budget
As companies migrate more sensitive data and resources into the cloud, it's important to deploy relevant security tools and processes, while staying within budget. Continue Reading
-
Podcast
29 Oct 2024
Risk & Repeat: SEC cracks down on cybersecurity disclosures
The SEC's charges against Unisys, Avaya, Check Point Software Technologies and Mimecast have raised questions about expectations for transparency in cybersecurity. Continue Reading
-
News
28 Oct 2024
Delta sues CrowdStrike over IT outage fallout
Delta said it suffered $500 million in damages. CrowdStrike said the airline company's claims 'demonstrate a lack of understanding of how modern cybersecurity works.' Continue Reading
-
Tip
28 Oct 2024
How to achieve crypto-agility and future-proof security
Quantum computing will render current asymmetric encryption algorithms obsolete. Organizations need to deploy crypto-agile systems to remain protected. Continue Reading
-
News
22 Oct 2024
SEC charges 4 companies for downplaying SolarWinds attacks
The U.S. Securities and Exchange Commission fined the companies for misleading investors about intrusions stemming from the SolarWinds supply chain attack. Continue Reading
-
News
22 Oct 2024
Thoma Bravo-owned Sophos to acquire Secureworks for $859M
Sophos said it plans to integrate Secureworks' products into a broader portfolio that serves both large enterprises and small and medium-sized businesses. Continue Reading
-
News
17 Oct 2024
Joe Sullivan: CEOs must be held accountable for security too
The former CSO at Uber was found guilty in 2022 of obstruction of justice relating to a breach. Now he's calling for clearer regulatory frameworks for security. Continue Reading
-
Podcast
24 Sep 2024
Risk & Repeat: What's next for Telegram and Pavel Durov?
Telegram made updates to its FAQ and privacy policy following Pavel Durov's arrest. But will the changes influence cybercriminals' abuse of the platform? Continue Reading
-
Tip
23 Sep 2024
How to prepare a system security plan, with template
To help keep your systems and applications secure, a system security plan is essential. Learn how to create a plan and keep it up to date. Continue Reading