Expert Advice
Practical guidance from industry experts on Cybersecurity
-
Getty Images
Cyber insurance explained, from selection to post-purchase
Before you sign on the dotted line, make sure you understand what cyber insurance can and can't do -- and what type of policy will do the most for your organization.
Sherri Davidoff • Oct. 23, 2026 -
Brand Experience Team/TechTarget
Just-in-time access: A CISO’s guide to reducing standing privilege
Adopting just-in-time access helps companies better control who is accessing corporate resources, dovetailing with other key strategies such as PAM and zero trust.
Damon Garn • Oct. 22, 2026 -
Brand Experience Team/TechTarget
How to conduct a cyber-resilience assessment
Regularly reviewing cybersecurity plans and procedures helps organizations prepare for cyberattacks. This checklist outlines key steps for assessing cyber resilience.
Paul Kirvan • Oct. 21, 2026 -
Brand Experience Team/TechTarget
AI in the SOC: 5 high-value use cases for enterprise SOCs
AI helps enterprise SOCs prioritize alerts, speed up investigations, improve threat hunting, streamline incident response and reporting, and manage risks with human oversight.
Damon Garn • Oct. 19, 2026 -
Brand Experience Team/TechTarget
Best practices to evaluate LLM-based AI security tools
LLM-based AI is accelerating cyberthreats, but also security capabilities. Discover what CISOs need to know when evaluating AI security tools.
John Burke • Oct. 13, 2026 -
Brand Experience Team/TechTarget
How to build a successful security champions program
Security champions integrate security into daily team decisions. Learn who should be a champion and how to establish an effective program.
Nihad Hassan • Oct. 12, 2026 -
Brand Experience Team/TechTarget
How to build an effective cybersecurity awareness program
Effective cybersecurity awareness programs manage human risk through role-based interventions, behavior change, continuous measurement and evolving threat scenarios.
Damon Garn • Oct. 7, 2026 -
Brand Experience Team/TechTarget
Supply chain security: How CISOs can explain costs to the board
When explaining supply chain risk costs to the board, the best tactic is to present funding options and establish satisfactory risk levels.
Damon Garn • Oct. 6, 2026 -
Getty Images
White-glove security training closes executive vulnerability gap
Executives present a unique security vulnerability. White-glove security training provides personalized strategies against impersonation, deepfake and spear phishing attacks.
Sean Kerner • Oct. 6, 2026 -
Brand Experience Team/TechTarget
When a critical supplier gets breached: CISO’s response guide
Third-party breaches account for a growing number of cyberattacks. Organizations must have strategies and systems in place before a critical vendor breach occurs.
Karen Kent and Sharon Shea • Oct. 2, 2026 -
Brand Experience Team/TechTarget
Rethink Cybersecurity Awareness Month: 4 different approaches
Instead of measuring Cybersecurity Awareness Month by training completion, use October to fix problems, eliminate risk, test critical capabilities and drive accountability.
Damon Garn • Oct. 1, 2026 -
Brand Experience Team/TechTarget
CISO’s guide to privileged access management
PAM helps organizations govern privileged accounts, but deployment can bring cost, complexity, workflow friction and new risks that require careful planning and ongoing oversight.
Amy DeCarlo • Sept. 29, 2026 -
Brand Experience Team/TechTarget
Shadow AI agents: What CISOs need to know
Shadow AI agents pose unique threats as their autonomous nature can bypass IT controls. CISOs need effective strategies to secure enterprise data and enable AI innovation.
Amy DeCarlo • Sept. 28, 2026 -
Brand Experience Team/TechTarget
How to tackle a ransomware readiness self-assessment, with template
Ransomware readiness self-assessments are key to spotting vulnerabilities and preparing for third-party assessments. Use this template to evaluate your organization's preparedness.
Karen Kent • Sept. 22, 2026 -
Brand Experience Team/TechTarget
What CISOs need to know about AIOps security
AI offers compelling benefits for IT, but organizations have to weigh operational advantages against risks that can spread unchecked through the network.
Ed Moyle • Sept. 21, 2026 -
Brand Experience Team/TechTarget
How to explain AI risk to the board: What directors need to hear
CISOs must build a narrative on security, reputation and financial impact when discussing AI risks with board members -- and drop the jargon and fearmongering.
Ed Moyle • Sept. 17, 2026 -
Brand Experience Team/TechTarget
Guide to AI data pipeline security and resilience
AI pipelines are critical enterprise infrastructure. Leaders must manage business risks, strengthen security and resilience and establish governance to scale AI safely.
Damon Garn • Sept. 16, 2026 -
Getty Images
Why cyber resilience fails: 5 obstacles holding orgs back
Technical debt, cybersecurity skills shortages and identity risks are among the challenges that can make it difficult for an organization to achieve cyber resilience.
Sean Kerner • Sept. 2, 2026 -
Brand Experience Team/TechTarget
CISO’s guide to vector database security
Vector databases provide users with semantic search capabilities, but they can also expose enterprises to significant risks if not properly protected.
Damon Garn • Aug. 31, 2026 -
Brand Experience Team/TechTarget
How CISOs can defend against ClickFix attacks
ClickFix attacks have become a top malware delivery method, exploiting unwitting users' trust and weaponizing their access. Stopping them requires a defense-in-depth approach.
Matthew Smith • Aug. 27, 2026 -
Getty Images
CISO’s guide to RAG data security risks and protection strategies
Retrieval-augmented generation enhances AI security, but expands the attack surface. Organizations need to aggressively manage RAG security to protect their networks and data.
Damon Garn • Aug. 24, 2026 -
Brand Experience Team/TechTarget
Unifying FinOps and SecOps: The case for FinSecOps
The financial and operational aspects of security don't need to be separate disciplines. Is it time to consider a FinSecOps approach to defending your organization?
Damon Garn • Aug. 20, 2026 -
Brand Experience Team/TechTarget
CISO’s guide to decentralized identity: What works and what doesn’t
Decentralized identity isn't for every organization, but where it's deployed correctly, the methodology yields improved trust, privacy and agility.
Damon Garn • Aug. 18, 2026 -
Brand Experience Team/TechTarget
Governance and best practices for automating vulnerability scans
Scanning the network for vulnerabilities is not just a routine operation. It should be part of a comprehensive security initiative that aligns with risk tolerance.
Damon Garn • Aug. 14, 2026 -
Brand Experience Team/TechTarget
AI budgeting: Estimating tokens for enterprise cybersecurity
AI tools are transforming cybersecurity, but token-based pricing can be a budgeting nightmare. Learn how CISOs can estimate costs, optimize usage and build realistic AI budgets.
Andrew Froehlich • Aug. 12, 2026
