Security operations and management
Cybersecurity operations and management are vital to protect enterprises against cyber threats. Learn how to create and manage infosec programs and SOCs, perform incident response and automate security processes. Also read up on security laws and regulations, best practices for CISOs and more.
Top Stories
-
Feature
15 Apr 2026
Inside the SOC that secured RSAC 2026 Conference
Take a behind-the-scenes look at the technology and teamwork that went into creating the security operations center that protected attendees, vendors and staff at RSAC 2026. Continue Reading
-
Tip
15 Apr 2026
4 strategic approaches to effective shadow AI governance
Shadow AI is a technological risk and a governance challenge. Organizations must combine structured frameworks, continuous visibility and education to control these risks. Continue Reading
-
Tip
15 Apr 2026
4 strategic approaches to effective shadow AI governance
Shadow AI is a technological risk and a governance challenge. Organizations must combine structured frameworks, continuous visibility and education to control these risks. Continue Reading
-
Feature
14 Apr 2026
How to improve the SOC analyst experience -- and why it matters
Burned-out security analysts miss threats, take longer to investigate incidents and are more likely to quit. Here's how CISOs can improve the SOC analyst experience. Continue Reading
-
News
10 Apr 2026
Human vs. AI: Debates shape RSAC 2026 cybersecurity trends
As AI dominated RSAC 2026, CISOs and industry leaders debated its role in security, from agentic applications to the challenges of scaling human involvement in decision-making. Continue Reading
-
Feature
10 Apr 2026
CISO checklist: Cybersecurity platform or marketing ploy?
The cybersecurity market is booming with countless vendors claiming to offer unified platforms. Here's how to separate the real deal from empty marketing. Continue Reading
-
Conference Coverage
10 Apr 2026
RSAC 2026 Conference: Key news and industry analysis
Check out SearchSecurity's RSAC 2026 guide for reports on notable presentations and breaking news at the world's biggest infosec event. Continue Reading
-
News
09 Apr 2026
Focusing on the people in cybersecurity at RSAC 2026 Conference
AI dominated RSAC 2026 Conference, but it's still the humans in cybersecurity who matter most. Continue Reading
-
News
09 Apr 2026
RSAC 2026: How AI Is reshaping cybersecurity faster than ever
Dark Reading's Kelly Jackson Higgins shares insights on the past, present, and future of cybersecurity after attending RSAC 2026 Conference. Continue Reading
-
Tip
09 Apr 2026
Next-generation firewall buyer's guide for CISOs
NGFWs are crucial tools for modern security operations, but CISOs need to understand the often complex deployment, maintenance and budgeting implications. Continue Reading
-
Tip
09 Apr 2026
8 best practices for a bulletproof IAM strategy
IAM systems enable secure access to applications and resources. But to benefit from IAM -- and avoid a security failure -- teams must know which best practices to follow. Continue Reading
-
Feature
08 Apr 2026
RSAC 2026: Cyber insurance and the rise of ransomware
At RSAC 2026, John Kindervag proposed the idea that the rise of the cyber insurance industry has motivated ransomware threat actors to escalate their attacks and ask for more. Continue Reading
-
Opinion
07 Apr 2026
RSAC 2026 recap: AI security and network security trends
RSAC 2026 spotlighted AI security as a key theme. Explore insights on securing AI agents, enterprise browsers, sovereignty and platformization trends. Continue Reading
-
Opinion
07 Apr 2026
Identity security at RSAC 2026: The new enterprise dynamics
Omdia analyst Todd Thiemann made the rounds at RSAC 2026 Conference, speaking with CISOs, practitioners and vendors to identify the latest shifts in identity and data security. Continue Reading
-
Tip
06 Apr 2026
Meaningful metrics demonstrate the value of cyber-resiliency
Cyber-resilience metrics translate raw technical performance into real business outcomes. The right analytics can enhance more than just security operations. Continue Reading
-
Tip
02 Apr 2026
5 top SOC-as-a-service providers and how to evaluate them
SOCaaS simplifies security operations. Compare five providers and key evaluation criteria, including tools, automation, threat intelligence and compliance. Continue Reading
-
Tip
02 Apr 2026
Cloud security architecture: Enterprise cloud blueprint for CISOs
As cloud adoption unlocks innovation, it also introduces new risks. A sound cloud security architecture is the blueprint for secure enterprise cloud deployments. Continue Reading
-
News
01 Apr 2026
'Missed opportunity': U.S. government’s absence from RSAC Conference leaves stark void
The Trump administration’s decision to not attend the world’s biggest cybersecurity conference sent the wrong message to partners, experts said. Continue Reading
-
News
01 Apr 2026
Geopolitics, AI and cybersecurity: Insights from RSAC 2026
AI-driven threats, global leadership shifts and the future of cybersecurity in a rapidly evolving landscape were among the discussions at RSAC 2026 Conference. Continue Reading
-
News
01 Apr 2026
RSAC 2026: AI dominates, but community remains key to security
As AI took center stage at this year's conference, experts debated automation, oversight and the evolving role of human intelligence in cybersecurity -- despite the U.S. government's notable absence. Continue Reading
-
Feature
31 Mar 2026
CIOs must now model war as an enterprise risk
In the wake of the Iran-backed hacktivist attacks on Stryker, CIOs rethink enterprise risk models to account for different attacker intents and methods. Continue Reading
-
Feature
30 Mar 2026
How AI caught a malicious North Korean insider at Exabeam
A North Korean posing as an American tech worker used GenAI to infiltrate Exabeam's network. But agentic AI found the signals among UEBA noise and exposed him in a matter of seconds. Continue Reading
-
Feature
27 Mar 2026
Watch your words: Tim Brown's advice for CISOs
During RSAC 2026, Tim Brown discussed the SolarWinds breach, his SEC indictment and the critical need for communication policies. Continue Reading
-
News
27 Mar 2026
How organizations can use mistakes to level up their security programs
Organizations repeatedly expose ports, reuse passwords, and skip patches, creating security gaps that attackers exploit for breaches. An industry veteran outlines ways to fix these common mistakes. Continue Reading
-
News
26 Mar 2026
Companies face difficult choices in blaming hackers for an attack
Publicly naming a hacking group can affect everything from retaliation to insurance coverage. Continue Reading
-
News
26 Mar 2026
Congress wants details from White House on cyber strategy, Iran resilience measures
Lawmakers’ aides from both parties say they want to be kept in the loop on implementation. Continue Reading
-
News
26 Mar 2026
Blame game: Why public cyber attribution carries risks
Publicly accusing an entity of a cyberattack could have negative consequences that organizations should consider before taking the plunge. Continue Reading
-
News
26 Mar 2026
At RSAC, the EU leads while US officials are sidelined
While US government sits out this year, EU officials are on the ground in San Francisco leading the conversations on today's top cybersecurity challenges. Continue Reading
-
Tip
24 Mar 2026
10 enterprise secure remote access best practices
Remote access is a critical necessity in today's work-from-anywhere environment. It's also incredibly risky. But there are ways to protect assets and combat potential attacks. Continue Reading
-
News
24 Mar 2026
AI in the SOC: What could go wrong?
Two cybersecurity leaders tested out AI in their respective SOCs for six months -- and here's what they learned. Continue Reading
-
News
24 Mar 2026
CISOs debate human role in AI-powered security
The idea of a "human in the loop" in AI deployment was challenged during a security executive panel at the RSAC 2026 Conference this week. Continue Reading
-
News
22 Mar 2026
Clear communication: The missing link in cybersecurity success
When technical expertise meets clear communication, cybersecurity teams thrive. Learn how to foster trust and collaboration across diverse working groups. Continue Reading
-
Tip
17 Mar 2026
Top UEBA use cases in enterprise cybersecurity
User and entity behavior analytics tools find patterns hidden in an ocean of data, making them critically important in cybersecurity. Explore key UEBA use cases in the enterprise. Continue Reading
-
Tip
17 Mar 2026
Boost SOC efficiency with Python security automation
Resource-strapped SOCs need better incident response, threat hunting and report generation. Explore how automating tasks with Python makes life easier for security teams. Continue Reading
-
Video
16 Mar 2026
Lessons in incident response from the Olympics, World Cup
Cybersecurity lessons from global sports events show that preparation, defense and quick recovery are essential to besting adversaries. Continue Reading
-
Tip
16 Mar 2026
Calculating the ROI of AI in cybersecurity
Investing in AI tools can benefit an organization's security posture. Understanding and quantifying those improvements, however, poses a real challenge. Continue Reading
-
Tip
13 Mar 2026
Streamline SecOps with SOAR workflows and playbooks
Through their automated workflows and playbooks, SOAR platforms help SOC teams overcome limited resources, skills gaps and alert fatigue. Continue Reading
-
Feature
11 Mar 2026
SIEM isn't dead, its place in the SOC is just evolving
Despite the predictions that SIEM is going away, its role is actually evolving. Learn why SIEM tools remain essential to enterprise security operations. Continue Reading
-
News
09 Mar 2026
Top cyber industry defenses spike CO2 emissions
Organizations can improve their climate footprints by optimizing two specific cybersecurity protections, without incurring added risks. Continue Reading
-
News
09 Mar 2026
Enigma cipher device still holds secrets for cyber pros
The Nazi relic's history is riddled with resilience errors, and those lessons still apply to defending against modern cyberthreats. Continue Reading
-
News
09 Mar 2026
The case for why better breach transparency matters
It's become a standard practice for organizations to disclose the bare minimum about a data breach, or worse -- not disclose the incident at all. Continue Reading
-
Tip
03 Mar 2026
How to reduce false positive alerts and increase cybersecurity
False positives in cybersecurity detection tools drain resources and distract from real threats. Once CISOs understand the root causes of false positives, they can implement strategies to reduce them. Continue Reading
-
Tip
02 Mar 2026
How to perform a data risk assessment, step by step
Data risk assessments review how an organization protects its sensitive data and identify necessary improvements by revealing potential vulnerabilities, threats and other risks. Continue Reading
-
Tip
26 Feb 2026
CISO decisions: Weighing costs, benefits of dark web monitoring
Forewarned is forearmed, and dark web monitoring can alert organizations when they're in attacker crosshairs. But for many, the risk and expense make it more trouble than it's worth. Continue Reading
-
Tip
26 Feb 2026
Counter third-party risk with continuous vendor monitoring
Assessing a vendor's security posture is not a box that gets checked. The risk of a third-party attack requires the kind of diligence provided by continuous vendor monitoring. Continue Reading
-
Feature
26 Feb 2026
From security to trust: How AI is transforming the CISO's job
Modern security officers must manage AI risks, safeguard enterprise data and ensure AI systems operate securely, expanding their role beyond traditional cybersecurity. Continue Reading
-
Tip
24 Feb 2026
Top threat modeling tools, plus features to look for
Automated threat modeling tools make identifying threats simpler, but the tools themselves can be fairly complex. Understanding where risks exist is only one part of the process. Continue Reading
-
Tip
23 Feb 2026
Enhance security audits with Nmap and NSE scripts
The Nmap Scripting Engine feature enables security admins to automate scans, detect vulnerabilities and validate network security settings. Continue Reading
-
Feature
20 Feb 2026
How to build an incident response plan, with examples, template
Threats from cyberattacks continue to grow in frequency and severity. Considering the potential disruptions from such events, an organization needs an incident response plan.. Continue Reading
-
Tip
19 Feb 2026
MLSecOps: Bridging security and AI development processes
MLSecOps ensures AI security by automating controls, fostering collaboration and addressing vulnerabilities early in the development lifecycle. Continue Reading
-
Tip
18 Feb 2026
How to evaluate NGFW products to strengthen cybersecurity
Next-generation firewalls are critical tools in today's evolving threat landscape. Learn how to evaluate and select an NGFW that will bolster your company's cybersecurity posture. Continue Reading
-
Tip
17 Feb 2026
CISO's guide to demonstrating cyber resilience
Elevating cybersecurity to a state of resilience requires a security team to adapt and strengthen defenses. The result should be that a future attack is less likely to succeed. Continue Reading
-
Tip
13 Feb 2026
CISO's guide: How to prevent business email compromise
Business email compromise feeds on professional email norms -- and exploits emotions such as fear or urgency. Learn what BEC is, how it works and how to prevent it. Continue Reading
-
News
13 Feb 2026
News brief: 6 Microsoft zero days and a warning from CISA
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Feature
12 Feb 2026
ASU's CISO: AI craze is a strategic opportunity for security
All eyes in the C-suite are on AI, and Arizona State University's CISO is seizing the moment. Learn how AI is solving problems that cybersecurity has been flagging for years. Continue Reading
-
Tip
12 Feb 2026
How to build an incident response framework
Frameworks provide the structure for an effective incident response program. Here's where to turn for guidance on what to include. Continue Reading
-
Feature
12 Feb 2026
How CISOs can balance AI innovation and security risk
AI represents a powerful new tool for cybersecurity professionals, but the technology is not without risk. Discover what CISOs need to know when deciding how to use AI. Continue Reading
-
Feature
10 Feb 2026
What the 2026 Global Risks Report means for CIOs
Rising AI, cyber, and geopolitical risks are no longer abstract—CIOs must lead in building resilient, adaptable enterprise technology. Continue Reading
-
Tip
09 Feb 2026
A leader's guide to integrating EDR, SIEM and SOAR
Understand the architecture, implementation, and maintenance of EDR, SIEM, and SOAR tools to optimize security workflows and ensure resilience. Continue Reading
-
Tip
06 Feb 2026
Secure MCP servers to safeguard AI and corporate data
Model Context Protocol servers act as bridges between AI models and enterprise resources. But they can also give threat actors the keys to the castle if not secured. Continue Reading
-
Tip
06 Feb 2026
Why organizations need cloud attack surface management
Cloud environments constantly change, expanding attack surfaces beyond traditional tools. Cloud ASM delivers continuous visibility to identify exposures, misconfigurations and risk. Continue Reading
-
News
06 Feb 2026
News brief: Ransomware trends show new twists to old game
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Feature
05 Feb 2026
Top 7 reasons incident response plans fail
Incident response plans can fall apart when faced with real-world security events. Learn about the gaps that can lead to failure and how to avoid them. Continue Reading
-
Feature
05 Feb 2026
10 types of information security threats for IT teams
Know thine enemy -- and the common security threats that can bring an unprepared organization to its knees. Learn what these threats are and how to prevent them. Continue Reading
-
News
04 Feb 2026
AI security worries stall enterprise production deployments
From Big Tech executives at Cisco's AI Summit this week to market research, the industry is waking up to a major hindrance in enterprise AI adoption. Continue Reading
-
Tip
04 Feb 2026
Top open source and commercial threat intelligence feeds
Cybersecurity threat intelligence feeds provide critical data on attacks, including IPs, domains and malware hashes, helping teams detect and respond to threats effectively. Continue Reading
-
Feature
02 Feb 2026
10 must-have security technologies in 2026
Discover the top security technologies for 2026, from AI-enabled tools to quantum-safe protocols, as CISOs brace for evolving cyberthreats and attack surfaces. Continue Reading
-
Feature
30 Jan 2026
Quantifying cyber-risk at Netflix, Highmark Health: Case studies
Show me the money: In these case studies, learn how the FAIR model helped a nonprofit healthcare company and a streaming giant quantify cyber-risk in financial terms. Continue Reading
-
Feature
29 Jan 2026
Cybersecurity and business needs: A CISO's 2026 outlook
Uncover the 2026 cybersecurity predictions, trends, tools and strategies CISOs need to navigate evolving business and threat landscapes. Continue Reading
-
Tip
29 Jan 2026
CERT vs. CSIRT vs. SOC: What's the difference?
What's in a name? In incident response parlance, there are subtle -- and sometimes confusing -- distinctions among a CERT, a CSIRT, a CIRT and a SOC. Continue Reading
-
Feature
26 Jan 2026
10 cybersecurity trends to watch in 2026
As cyber-risks escalate in 2026, CISOs face AI-powered attacks, OT vulnerabilities and quantum computing threats. Read more on the key trends shaping security. Continue Reading
-
Feature
21 Jan 2026
Top 10 cybersecurity predictions for 2026
AI will further reshape cybersecurity in 2026, predict CISOs. From agentic AI defensive toolchains to MCP server risks, explore the anticipated shifts. Continue Reading
-
Feature
16 Jan 2026
Majority of CISOs now hold executive-level titles, IANS reports
More organizations grant the CISO an executive title, an IANS survey found, as the top security job becomes less of a hands-on position and more of a business leader role. Continue Reading
-
Feature
16 Jan 2026
How enterprise access decisions are starting to show up earlier
As work consolidates in browsers and quick-entry paths, access decisions are shifting to the front door of enterprise systems, often without clear ownership or centralized control. Continue Reading
-
Tip
15 Jan 2026
10 important incident response metrics and how to use them
In incident response, security teams can improve their work by knowing how long it takes to respond to and remediate threats. These are the key metrics to track. Continue Reading
-
Tip
14 Jan 2026
Vibe coding security risks and how to mitigate them
Vibe coding with generative AI is transforming software development, accelerating innovation and introducing new security risks to manage. Continue Reading
-
Feature
12 Jan 2026
Cybersecurity conferences to attend in 2026
Discover the top cybersecurity conferences of 2026 to sharpen skills, network with peers, learn the latest industry trends and stay ahead of emerging threats. Continue Reading
-
Tip
08 Jan 2026
CISO reporting structure key to strong cybersecurity outcomes
Find out which CISO reporting structure a cybersecurity expert recommends, based on objective security performance metrics from hundreds of organizations. Continue Reading
-
Feature
22 Dec 2025
Prepare for the 2026 threatscape with thought leaders' insights
Explore the 2026 cybersecurity landscape, featuring AI-first strategies, human-centric defenses, cloud security and resilience-focused operations. Continue Reading
-
Tip
18 Dec 2025
DevSecOps vs. SecDevOps: Which is better for your organization?
How far left should security shift? DevSecOps and SecDevOps both integrate security into DevOps but differ conceptually and practically. Learn which model suits your needs. Continue Reading
-
Tip
17 Dec 2025
How to detect a deepfake with visual clues and AI tools
Forewarned is forearmed, but too many employees don't realize how sophisticated deepfakes have become. Integrate these deepfake detection tips into security awareness training. Continue Reading
-
Tip
16 Dec 2025
Incident response: How to implement a communication plan
Communication is critical to an effective incident response plan. Here are best practices for communication planning and an editable template to help you get started. Continue Reading
-
News
12 Dec 2025
News brief: Future of security holds bigger budgets, new threats
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
10 Dec 2025
Beyond the SBOM: What CISOs should know about CBOMs and HBOMs
SBOMs, CBOMs and HBOMS -- oh my! Learn how these bills of materials help manage supply chain risk and assess which of the three your organization needs. Continue Reading
-
Tip
08 Dec 2025
Guide to using digital twins for cybersecurity testing
The digital twin market is growing rapidly as more security teams use the technique to run what-if scenarios to determine if their enterprise networks are vulnerable. Continue Reading
-
Tip
03 Dec 2025
What CISOs should know about SOC modernization
To achieve security outcomes that align with their organizations' risk appetites and business objectives, CISOs with struggling SOCs must consider upgrades. Learn more. Continue Reading
-
Tip
24 Nov 2025
5 steps for a smooth SIEM implementation
SIEM migration doesn't have to be chaotic. Smart planning and phased deployment can prevent a rocky rollout and pave the way for a smooth transition. Here's your roadmap. Continue Reading
-
Tutorial
21 Nov 2025
How to use Netcat: Commands and use cases
The versatile utility is small, powerful and gives security and network engineers a variety of ways to incorporate it as part of an overall security strategy. Continue Reading
-
Tip
19 Nov 2025
When to consider Kubernetes security posture management
Securely using Kubernetes to build, manage and automate application and infrastructure deployments is a growing challenge for security teams. Continue Reading
-
Tutorial
18 Nov 2025
How to use Hashcat to recover passwords
This tutorial and accompanying video on using Hashcat for ethical password recovery covers installation, hash types, dictionary attacks and rule variations for security testing. Continue Reading
-
Tip
17 Nov 2025
What agentic AI means for cybersecurity
Agentic AI technology promises a more autonomous and proactive approach to protecting enterprise assets. But deploying tools that require less human intervention also carries risk. Continue Reading
-
News
14 Nov 2025
News brief: Agentic AI disrupts security, for better or worse
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Feature
12 Nov 2025
How BISOs enable CISOs to scale security across the business
Here's an understatement: Being a CISO at a large, complex organization is hard. Could a BISO help? Learn about these liaisons between security and lines of business. Continue Reading
-
Tip
10 Nov 2025
CNAPP vs. CSPM: Comparing cloud security tools
CNAPP or CSPM? Understand the key differences between these cloud security tools to make an informed choice that aligns with your organization's maturity level. Continue Reading
-
Tip
29 Oct 2025
How to write an information security policy, plus templates
Faced with multiplying security threats and complex IT environments, companies need comprehensive policies that detail how they will protect their systems and respond to attacks. Continue Reading
-
News
24 Oct 2025
Cybersecurity awareness news brief: What works, what doesn't
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Opinion
24 Oct 2025
Cybersecurity Awareness Month: The endpoint security issue
Device diversity and hybrid work models challenge IT teams. New research reveals the gap between managed endpoints and actual security coverage. Continue Reading
-
Tip
23 Oct 2025
SIEM benefits and features in the modern SOC
Security information and event management has evolved significantly since it was first introduced 20 years ago. Today's SIEMs offer a wide range of capabilities. Continue Reading
-
Tip
22 Oct 2025
Top 7 password hygiene tips and best practices
Passwords enable users to access important accounts and data, making them attractive targets to attackers, too. Follow these password hygiene tips to keep your organization safe. Continue Reading
-
Tutorial
14 Oct 2025
How to use Gophish to fortify security awareness training
Stop phishing attacks before they happen. Discover how Gophish simulates real threats to identify training gaps and strengthen employee awareness. Continue Reading
-
News
10 Oct 2025
News brief: AI's cybersecurity risks weigh on business leaders
Check out the latest security news from the Informa TechTarget team. Continue Reading
-
Tip
09 Oct 2025
How CISOs can get out of security debt and why it matters
Like technical debt, security debt accumulates quickly, due to unpatched software, rushed security testing and poor visibility. When the bill comes due, it could mean a breach. Continue Reading