CISO Strategy & Planning
Top Stories
-
Tip
21 Oct 2026
How to conduct a cyber-resilience assessment
Regularly reviewing cybersecurity plans and procedures helps organizations prepare for cyberattacks. This checklist outlines key steps for assessing cyber resilience. Continue Reading
-
News
21 Oct 2026
CIOs walk AI tightrope as CEOs demand innovation
AI adoption carries risks, but moving too slowly does, too. Business leaders explain where CIOs should accelerate and where they should be cautious. Continue Reading
-
News
15 Oct 2026
CIRCIA reporting deadline puts OT data integrity under the microscope
As CISA's incident reporting rule advances, critical infrastructure operators must prove the data and commands driving operations are authentic -- even when networks seem secure. Continue Reading
-
Tip
13 Oct 2026
Best practices to evaluate LLM-based AI security tools
LLM-based AI is accelerating cyberthreats, but also security capabilities. Discover what CISOs need to know when evaluating AI security tools. Continue Reading
-
Video
13 Oct 2026
AI kill switch: Can we really shut down artificial intelligence?
In this episode of Tech News this Week, Richard Livingston explains the debate around AI kill switches and recent legislation surrounding AI oversight and shutdown capabilities. Continue Reading
-
News
13 Oct 2026
Kiteworks CISO: Why We Shut Down Systems Before Finding Vulnerability
A federal warning prompted the vendor to take systems offline before confirming a breach -- a decision that exposes difficult questions about downtime and risk. Continue Reading
-
Tip
12 Oct 2026
How to build a successful security champions program
Security champions integrate security into daily team decisions. Learn who should be a champion and how to establish an effective program. Continue Reading
-
News
09 Oct 2026
Unclear AI risk ownership could leave CISOs in familiar scapegoat role
With no consensus on who owns AI risk, cybersecurity leaders could be exposed. Experts say CISOs need authority over AI security -- not just accountability when it goes wrong. Continue Reading
-
Tip
07 Oct 2026
How to build an effective cybersecurity awareness program
Effective cybersecurity awareness programs manage human risk through role-based interventions, behavior change, continuous measurement and evolving threat scenarios. Continue Reading
-
News
07 Oct 2026
Risk-based alerting slashes SOC noise -- when done right
A landmark independent study validates risk-based alerting, revealing which scoring strategies cut false positives and which popular vendor rules fail in practice. Continue Reading
-
Tip
06 Oct 2026
Supply chain security: How CISOs can explain costs to the board
When explaining supply chain risk costs to the board, the best tactic is to present funding options and establish satisfactory risk levels. Continue Reading
-
Tip
06 Oct 2026
White-glove security training closes executive vulnerability gap
Executives present a unique security vulnerability. White-glove security training provides personalized strategies against impersonation, deepfake and spear phishing attacks. Continue Reading
-
News
02 Oct 2026
The CISO dilemma: Why AI speed makes security basics essential
Insights from the CyberRisk Alliance Summit reveal that AI hasn't rewritten the threat landscape -- it has simply erased the time defenders have to fix basic operational flaws. Continue Reading
-
Tip
02 Oct 2026
When a critical supplier gets breached: CISO's response guide
Third-party breaches account for a growing number of cyberattacks. Organizations must have strategies and systems in place before a critical vendor breach occurs. Continue Reading
-
News
01 Oct 2026
Use Cybersecurity Awareness Month as a springboard -- not a fire drill
National cybersecurity awareness efforts peak in October, but attacks happen year-round. Experts explain how CISOs can use Cybersecurity Awareness Month to build long-term momentum. Continue Reading
-
Tip
01 Oct 2026
Rethink Cybersecurity Awareness Month: 4 different approaches
Instead of measuring Cybersecurity Awareness Month by training completion, use October to fix problems, eliminate risk, test critical capabilities and drive accountability. Continue Reading
-
Feature
30 Sep 2026
The CISO role isn't universal: 5 industry perspectives
One title, many jobs: CISOs at Fastly, SolarWinds, DeVry and other organizations reveal how industry shapes their responsibilities and priorities. Continue Reading
-
Opinion
29 Sep 2026
Oktane '26 brings clarity to AI agent identity security
Many organizations are prioritizing agentic AI initiatives, but identity security remains a challenge. Okta's recent announcements aim to address the risks posed by AI agents. Continue Reading
-
News
29 Sep 2026
Security vendors turn to multi-model, open AI to bypass guardrails
Commercial AI guardrails are blocking legitimate cyberdefense activities. Security vendors are fighting back with multi-model frameworks and open-weight LLMs. Continue Reading
-
Tip
28 Sep 2026
Shadow AI agents: What CISOs need to know
Shadow AI agents pose unique threats as their autonomous nature can bypass IT controls. CISOs need effective strategies to secure enterprise data and enable AI innovation. Continue Reading
-
News
25 Sep 2026
Pulling the plug: Why the AI kill switch might be a dead end
As lawmakers push to make AI kill switches mandatory, security leaders warn that the "big red button" may be a dangerous illusion. Here’s why policy doesn't match the technical reality. Continue Reading
-
News
24 Sep 2026
South Korea's 10% data breach fines raise global compliance challenges
Tougher penalties aim to drive data breach prevention but add to regulatory fragmentation, pushing firms to build to the strictest global standard. Continue Reading
-
News
23 Sep 2026
Cybersecurity burnout is an operational threat: AI can help
Analyst burnout is more than just a wellness issue; it's a critical security risk. At the Billington Cybersecurity Summit, experts discussed how to fix the crisis. Continue Reading
-
News
22 Sep 2026
Can 'agent canaries' catch rogue AI before it escapes?
AI agent canaries could become valuable security tripwires if enterprises treat them as sensors rather than safeguards. Continue Reading
-
Tip
22 Sep 2026
How to tackle a ransomware readiness self-assessment, with template
Ransomware readiness self-assessments are key to spotting vulnerabilities and preparing for third-party assessments. Use this template to evaluate your organization's preparedness. Continue Reading
-
News
21 Sep 2026
What the AI safety fallout means for enterprise CISOs Â
High-profile resignations and calls for a development slowdown have accelerated the AI safety debate. Here's how security leaders are filtering noise from immediate operational risk. Continue Reading
-
News
17 Sep 2026
Revolut breach exposes authentication-authorization gap
The Revolut data breach showed what can happen when organizations over-trust and under-verify. Experts warn that countless companies are currently at risk. Continue Reading
-
Tip
17 Sep 2026
How to explain AI risk to the board: What directors need to hear
CISOs must build a narrative on security, reputation and financial impact when discussing AI risks with board members -- and drop the jargon and fearmongering. Continue Reading
-
News
17 Sep 2026
Gartner warns traditional IT controls won't keep up with AI
Autonomous AI agents have outpaced traditional IT controls. CIOs must strengthen access and accountability and build controls to stop agents before they cause damage. Continue Reading
-
News
16 Sep 2026
Cyber budgets flatline as CISOs shift new spending to AI
AI is absorbing new security spending even as budgets stall, forcing CISOs to rethink how they deploy people, automation and risk dollars. Continue Reading
-
News
16 Sep 2026
EU cyber rule exposes gaps in product security operations
Europe's new reporting rule could establish a global product security standard, but smaller manufacturers and legacy products face the steepest challenge. Continue Reading
-
News
14 Sep 2026
CISOs more confident -- and more stressed -- than ever
Security leaders are growing more confident in their abilities to withstand cyberattacks, yet the pressure on them continues to build. Proofpoint's latest survey of CISOs explains why. Continue Reading
-
News
11 Sep 2026
CISA Cyber Storm exercise offers blueprint for enterprise CISOs
The launch of CISA's Cyber Storm X puts national incident response to the test. For enterprise CISOs, the exercise serves as a practical model for evaluating supply-chain resilience and incident response playbooks under fire. Continue Reading
-
Feature
10 Sep 2026
The growing case for deputy CISOs in the enterprise
Cybersecurity teams need a leader -- or do they need two? As the pressures on security professionals grow, the deputy CISO role has become a bigger topic of conversation. Continue Reading
-
Feature
09 Sep 2026
EU Cyber Resilience Act reporting: What CISOs need to know
The EU Cyber Resilience Act doesn't take full effect until 2027, but the mandatory vulnerability reporting deadline hits on September 11, 2026. Is your organization prepared? Continue Reading
-
News
08 Sep 2026
Billington Summit highlights blurring public-private cybersecurity lines
At the Billington Cybersecurity Summit, public sector security experts address a threat landscape that no longer distinguishes between government and private targets. Continue Reading
-
News
04 Sep 2026
The human in the loop is falling asleep
AI agents can overwhelm human reviewers, creating new security risks. CIOs must rethink how they oversee AI agents and decide when humans should step in. Continue Reading
-
Opinion
03 Sep 2026
Making sense of cybersecurity's converging categories
AI is eliminating the dividing lines that once delineated technologies such as vulnerability management and network security. Enterprises have to find a new way to evaluate vendors. Continue Reading
-
News
28 Aug 2026
CISA red team reveals why some SOCs fail and others succeed
CISA tested two critical infrastructure SOCs with similar red team tactics. The results expose dangerous gaps in detection, response and credential security. Continue Reading
-
News
28 Aug 2026
Where should CIOs invest next? IT leaders weigh in
Six CIOs share where they would invest if their IT budgets increased. AI leads, with data, infrastructure and security investments helping to scale it. Continue Reading
-
Feature
28 Aug 2026
Cybersecurity and the end of AI's Wild West era
The days of unproven promises and marketing hype around AI security are coming to a close. The next phase of AI requires scrutiny and measurable results. Continue Reading
-
Feature
27 Aug 2026
Avoid these 5 pitfalls in your cybersecurity technology PoC
A cybersecurity technology proof of concept can validate a good purchasing decision -- or waste months of your team's time. Look out for these five common PoC missteps. Continue Reading
-
Conference Coverage
26 Aug 2026
Black Hat 2026: Key news, takeaways and security trends
This is your guide to the breaking news, trending topics and more at Black Hat USA 2026, from Dark Reading, Cybersecurity Dive and TechTarget Cybersecurity. Continue Reading
-
News
21 Aug 2026
AI attacks lack stealth -- nation-state actors are changing that
Today's AI attacks are still hard to miss and easy to stop, but nation-state threat actors are quietly pioneering low-and-slow adversarial AI. Learn what the shift means for defenders. Continue Reading
-
Tip
20 Aug 2026
Unifying FinOps and SecOps: The case for FinSecOps
The financial and operational aspects of security don't need to be separate disciplines. Is it time to consider a FinSecOps approach to defending your organization? Continue Reading
-
Tip
18 Aug 2026
CISO's guide to decentralized identity: What works and what doesn't
Decentralized identity isn't for every organization, but where it's deployed correctly, the methodology yields improved trust, privacy and agility. Continue Reading
-
News
13 Aug 2026
Fintech execs unblock AI with shadow AI detection, org shifts
C-level executives in a regulated industry strike a balance between the benefits AI can offer their businesses and the need to guard against its risks. Continue Reading
-
Tip
12 Aug 2026
AI budgeting: Estimating tokens for enterprise cybersecurity
AI tools are transforming cybersecurity, but token-based pricing can be a budgeting nightmare. Learn how CISOs can estimate costs, optimize usage and build realistic AI budgets. Continue Reading
-
News
06 Aug 2026
From Bobmojis to bobbleheads: How the Democratic party built a security-first culture
Two former chief security officers of the Democratic National Committee explain that a strong security-first mindset requires executive support -- and a dose of absurdity. Continue Reading
-
News
05 Aug 2026
Western government leaders call for a focus on infrastructure resilience, not AI hype
U.S. and allied officials said companies should start preparing now for a cyberattack that changes how they provide essential services. Continue Reading
-
News
05 Aug 2026
CISA is prioritizing work with critical infrastructure as it begins to recover from cuts
The agency has been focused on helping secure systems at drinking and wastewater utilities in recent weeks. Continue Reading
-
News
05 Aug 2026
White House walks tightrope on securing AI without stifling tech innovation
National Cyber Director Sean Cairncross said the administration wants to work collaboratively with the private sector. Continue Reading
-
Tip
05 Aug 2026
How the AEGIS framework mitigates agentic AI risks
Learn how Forrester's AEGIS framework can help organizations securely deploy agentic AI, shifting from static controls to dynamic risk assessment that balances innovation with safety. Continue Reading
-
Opinion
04 Aug 2026
Microsoft Perception: Adding agents and retooling AI's costs
With Project Perception, Microsoft offers a multi-agent path for finding and fixing vulnerabilities. And the company has ideas on containing AI security costs. Continue Reading
-
News
30 Jul 2026
What CISOs should take from the Hugging Face-OpenAI incident
Security experts say the lesson isn't to abandon sandboxing, but to strengthen the security controls around surrounding systems as AI tests their limits. Continue Reading
-
Conference Coverage
17 Apr 2026
RSAC 2026 Conference: Key news and industry analysis
Check out SearchSecurity's RSAC 2026 guide for reports on notable presentations and breaking news at the world's biggest infosec event. Continue Reading
-
Tip
17 Feb 2026
CISO's guide to demonstrating cyber resilience
Elevating cybersecurity to a state of resilience requires a security team to adapt and strengthen defenses. The result should be that a future attack is less likely to succeed. Continue Reading
-
Feature
12 Feb 2026
ASU's CISO: AI craze is a strategic opportunity for security
All eyes in the C-suite are on AI, and Arizona State University's CISO is seizing the moment. Learn how AI is solving problems that cybersecurity has been flagging for years. Continue Reading
-
Feature
12 Feb 2026
How CISOs can balance AI innovation and security risk
AI represents a powerful new tool for cybersecurity professionals, but the technology is not without risk. Discover what CISOs need to know when deciding how to use AI. Continue Reading
-
Feature
02 Feb 2026
10 must-have security technologies in 2026
Discover the top security technologies for 2026, from AI-enabled tools to quantum-safe protocols, as CISOs brace for evolving cyberthreats and attack surfaces. Continue Reading
-
Feature
29 Jan 2026
Cybersecurity and business needs: A CISO's 2026 outlook
Uncover the 2026 cybersecurity predictions, trends, tools and strategies CISOs need to navigate evolving business and threat landscapes. Continue Reading
-
Tip
27 Jan 2026
5 steps to approach BYOD compliance policies
BYOD endpoints are difficult to secure because IT does not own or preconfigure the device. Learn about policies and controls that help organizations stay compliant. Continue Reading
-
Feature
26 Jan 2026
10 cybersecurity trends to watch in 2026
As cyber-risks escalate in 2026, CISOs face AI-powered attacks, OT vulnerabilities and quantum computing threats. Read more on the key trends shaping security. Continue Reading
-
Tip
22 Jan 2026
18 enterprise email security best practices for 2026
Safeguard your organization. Train employees to avoid password reuse, spot phishing attempts and encrypt messages, among other email security best practices. Continue Reading
-
Feature
21 Jan 2026
Top 10 cybersecurity predictions for 2026
AI will further reshape cybersecurity in 2026, predict CISOs. From agentic AI defensive toolchains to MCP server risks, explore the anticipated shifts. Continue Reading
-
Feature
16 Jan 2026
Majority of CISOs now hold executive-level titles, IANS reports
More organizations grant the CISO an executive title, an IANS survey found, as the top security job becomes less of a hands-on position and more of a business leader role. Continue Reading
-
News
09 Jan 2026
News brief: AI threats to shape 2026 cybersecurity
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
08 Jan 2026
CISO reporting structure key to strong cybersecurity outcomes
Find out which CISO reporting structure a cybersecurity expert recommends, based on objective security performance metrics from hundreds of organizations. Continue Reading
-
Tip
07 Jan 2026
CISO's guide to nonhuman identity security
Nonhuman identities are one of the fastest-growing yet least-governed access risks in the enterprise today. Learn how to address them. Continue Reading
-
Feature
22 Dec 2025
Prepare for the 2026 threatscape with thought leaders' insights
Explore the 2026 cybersecurity landscape, featuring AI-first strategies, human-centric defenses, cloud security and resilience-focused operations. Continue Reading
-
News
12 Dec 2025
News brief: Future of security holds bigger budgets, new threats
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
10 Dec 2025
Beyond the SBOM: What CISOs should know about CBOMs and HBOMs
SBOMs, CBOMs and HBOMS -- oh my! Learn how these bills of materials help manage supply chain risk and assess which of the three your organization needs. Continue Reading
-
Tip
08 Dec 2025
Guide to using digital twins for cybersecurity testing
The digital twin market is growing rapidly as more security teams use the technique to run what-if scenarios to determine if their enterprise networks are vulnerable. Continue Reading
-
Opinion
05 Dec 2025
Security highlights from AWS re:Invent 2025
AWS made a handful of announcements about how it is prepping to secure increased productivity with AI. Continue Reading
-
Tip
03 Dec 2025
What CISOs should know about SOC modernization
To achieve security outcomes that align with their organizations' risk appetites and business objectives, CISOs with struggling SOCs must consider upgrades. Learn more. Continue Reading
-
Tip
17 Nov 2025
What agentic AI means for cybersecurity
Agentic AI technology promises a more autonomous and proactive approach to protecting enterprise assets. But deploying tools that require less human intervention also carries risk. Continue Reading
-
News
14 Nov 2025
News brief: Agentic AI disrupts security, for better or worse
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Feature
12 Nov 2025
How BISOs enable CISOs to scale security across the business
Here's an understatement: Being a CISO at a large, complex organization is hard. Could a BISO help? Learn about these liaisons between security and lines of business. Continue Reading
-
Tip
03 Nov 2025
To maximize their influence, CISOs need diverse skills
In many organizations today, when the CISO talks, the CEO and board listen. CISOs who successfully rise to the occasion have broad skillsets. Continue Reading
-
Tip
29 Oct 2025
How to write an information security policy, plus templates
Faced with multiplying security threats and complex IT environments, companies need comprehensive policies that detail how they will protect their systems and respond to attacks. Continue Reading
-
Tutorial
14 Oct 2025
How to use Gophish to fortify security awareness training
Stop phishing attacks before they happen. Discover how Gophish simulates real threats to identify training gaps and strengthen employee awareness. Continue Reading
-
News
10 Oct 2025
News brief: AI's cybersecurity risks weigh on business leaders
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
09 Oct 2025
How CISOs can get out of security debt and why it matters
Like technical debt, security debt accumulates quickly, due to unpatched software, rushed security testing and poor visibility. When the bill comes due, it could mean a breach. Continue Reading
-
Tip
08 Oct 2025
What CISOs should know about DeepSeek cybersecurity risks
DeepSeek poses significant risks to U.S. enterprises -- even those that don't greenlight it for internal use. CISOs should take steps to reduce the threat. Continue Reading
-
News
26 Sep 2025
News brief: AI cybersecurity worries mount
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
10 Sep 2025
CISO's guide to security vendor consolidation
Organizations adopt a multitude of disparate security tools over time, which often results in tool overlap and added complexity for protecting systems and data. Continue Reading
-
News
05 Sep 2025
News brief: U.S. Cyber Trust Mark update and how to prepare
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Definition
03 Sep 2025
What is information security (infosec)?
Information security (infosec) is a set of policies, procedures and principles for safeguarding digital data and other kinds of information. Continue Reading
-
Video
18 Aug 2025
An explanation of quantum key distribution
Quantum key distribution uses physics to create secure encryption keys that detect eavesdropping instantly, offering a quantum-safe solution for future cybersecurity challenges. Continue Reading
-
Video
15 Aug 2025
An explanation of post-quantum cryptography
Quantum computers threaten to break today's encryption protocols. Post-quantum cryptography aims to develop new algorithms resistant to quantum attacks before it's too late. Continue Reading
-
Definition
13 Aug 2025
What is governance, risk and compliance (GRC)?
Governance, risk and compliance (GRC) refers to an organization's strategy, or framework, for handling the interdependencies of the following three components: corporate governance policies, enterprise risk management programs, and regulatory and company compliance. Continue Reading
-
Opinion
01 Aug 2025
Black Hat 2025: Navigating AI and supply chain security
Experts at the conference will discuss how AI impacts software supply chain security, highlighting challenges and strategies for developers and security teams. Continue Reading
-
Definition
21 Jul 2025
What is a CISO (chief information security officer)?
The CISO (chief information security officer) is a senior-level executive responsible for developing and implementing an information security program. Continue Reading
-
Feature
18 Jul 2025
CISO role in ASM could add runtime security, tokenization
Runtime security and tokenization stand to play a bigger role in attack surface management, a development that could influence security leaders' responsibilities. Continue Reading
-
Tip
18 Jul 2025
How to build a cybersecurity team to maximize business impact
How CISOs design and build their security teams is as important as the technology they select to safeguard their organizations' digital assets. Continue Reading
-
Tip
17 Jul 2025
How to calculate cybersecurity ROI for CEOs and boards
Calculating and communicating cybersecurity ROI can help persuade top management to invest. Here's how to use meaningful, concrete metrics that resonate with business leaders. Continue Reading
-
Feature
14 Jul 2025
How CISOs can prepare for the quantum cybersecurity threat
CISOs should begin preparing now for quantum computing's impact on cybersecurity. Start with assessments and planning before migrating to post-quantum cryptography standards. Continue Reading
-
Tip
11 Jul 2025
How to build a cybersecurity culture across your business
As a company's cyber-risks evolve, so must its culture. Follow these tips to create a strong cybersecurity culture that helps protect your organization from cyberthreats. Continue Reading
-
Tip
10 Jul 2025
CISO's guide to creating a cybersecurity board report
An effective cybersecurity board report influences executive decision-making at the highest levels. Learn how to write a report that resonates with corporate directors. Continue Reading
-
Tip
10 Jul 2025
What CISOs need to know about AI governance frameworks
AI offers business benefits but poses legal, ethical and reputational risks. Governance programs manage these risks while ensuring responsible use and regulatory compliance. Continue Reading
-
Feature
07 Jul 2025
What is the future of cybersecurity?
As cyberthreats grow more sophisticated, enterprises face mounting challenges. What does the future of cybersecurity hold, and how can organizations stay ahead? Continue Reading
-
Tip
02 Jul 2025
How to build a cybersecurity strategy and plan in 4 steps
A cybersecurity strategy isn't meant to be perfect, but this high-level plan must be proactive, effective, actively supported and evolving. Here are four key steps to get there. Continue Reading