Expert Advice: Page
Practical guidance from industry experts on Cybersecurity
-
AI budgeting: Estimating tokens for enterprise cybersecurity
AI tools are transforming cybersecurity, but token-based pricing can be a budgeting nightmare. Learn how CISOs can estimate costs, optimize usage and build realistic AI budgets.
Andrew Froehlich • Aug. 12, 2026 -
How to adopt microsegmentation: From visibility to control
Perimeter-based security can't meet modern threats. With microsegmentation, defenders improve their awareness, data protection, containment and compliance.
Damon Garn • Aug. 11, 2026 -
How the AEGIS framework mitigates agentic AI risks
Learn how Forrester's AEGIS framework can help organizations securely deploy agentic AI, shifting from static controls to dynamic risk assessment that balances innovation with safety.
Mary Pratt • Aug. 5, 2026 -
What to know about deepfake phishing simulation software
Deepfake phishing simulation software uses AI to probe organizational resistance to state-of-the-art social engineering attacks. Learn why they should be on CISOs' radar.
John Burke • July 29, 2026 -
CISO’s guide to data obfuscation
With so many services requiring access to sensitive data, encryption alone is not enough. Data obfuscation has evolved into a core element of modern cybersecurity architecture.
Dave Shackleford • July 28, 2026 -
A CISO’s guide to security data lakes
A security data lake gives organizations a centralized repository of security information, but it can pose governance and operational risks.
Damon Garn • July 27, 2026 -
CISO’s guide to privileged identity management
IAM is more crucial than ever in the AI era. To better control who -- and what -- is accessing systems and data, security teams need to move beyond standing access privileges.
Amy DeCarlo • July 24, 2026 -
OpenClaw security best practices for CISOs
OpenClaw introduces huge risks to enterprises, but employee adoption might be inevitable -- whether CISOs sanction it or not. Here's how to enable safer deployments.
Matthew Smith • July 22, 2026 -
Behavioral biometrics: How to detect nonhuman threat actors
How do security teams distinguish between people and AI? It's getting harder, but behavioral biometrics might help discern human users from machine impersonators.
Johna Johnson • July 21, 2026 -
Why CISOs should automate SBOM management with AI
AI tools can drive continuous, accurate SBOM management that turns compliance documentation into real-time supply chain security. Here's what CISOs should know.
Matthew Smith • July 16, 2026 -
How mapping security controls can ease the compliance burden
Being able to map cybersecurity controls to applicable standards and regulations can make compliance work less complicated – especially when automation and AI come into play.
Paul Kirvan • July 16, 2026 -
Why CISOs should use zero-trust security for IoT
IoT devices have significant business benefits but also open enterprises to escalating security risks. Discover why zero trust is the most practical way to secure IoT.
Andrew Froehlich • July 15, 2026 -
Building cyber-resilient AI in the enterprise
AI attacks and breaches hit differently than traditional attacks, and therefore require more than traditional controls. The best defense requires planning for cyber-resilience.
Amy DeCarlo • July 14, 2026 -
Common MFA mistakes -- and how to fix them
Attackers have adapted their techniques to circumvent an organization's MFA controls. When they succeed, it's usually because MFA wasn't properly set up or managed.
Dave Shackleford • July 9, 2026 -
How to operationalize threat modeling with AI
AI tools streamline threat modeling by automating repetitive tasks and helping security teams prioritize risks more effectively. But human oversight is still critical.
William Dupre • July 9, 2026 -
CISO’s guide to hiring for the right cybersecurity skills
The cybersecurity talent gap won't be solved by head count alone. CISOs need to fundamentally rethink how they recruit, how they retain talent and what skills they really need.
Mary Pratt • July 8, 2026 -
Evaluating secure enterprise browsers vs. security plugins
Malicious actors have long targeted and exploited browser vulnerabilities. The widespread adoption of AI increases the risk, forcing CISOs to reevaluate browser security options.
John Burke • July 7, 2026 -
Perimeter to posture: A roadmap to zero trust maturity
Transforming an organization to take on a zero-trust posture is no small affair. A phased, thoughtful approach can bolster security while supporting business outcomes.
Damon Garn • July 2, 2026 -
The agentic AI ‘lethal trifecta’: What CISOs should know
The very capabilities that make an AI agent useful also make it dangerous. Here's what CISOs should know about the agentic AI lethal trifecta, and what they should do about it.
John Burke • July 1, 2026 -
Beyond the perimeter: The shift to data-centric protection
Traditional network boundaries have all but disappeared. Enterprises must find new ways to protect their digital assets in a world where SaaS and multi-cloud deployments dominate.
Damon Garn • June 29, 2026 -
What CISOs should know about AI runtime security
With AI, security at runtime means protecting access, vetting inputs, checking outputs and detecting anomalous behaviors. It is challenging to get right.
John Burke • June 25, 2026 -
A CISO’s guide to infostealers: Prevention and detection
Infostealers aren't new. But what is new is that almost anyone -- regardless of skill -- can now deploy the malware. Update incident response plans to safeguard your operations.
Karen Kent • June 22, 2026 -
The OpenClaw security risks every CISO needs to know
The business case for OpenClaw is clear, but so are the security risks. Learn why a cybersecurity expert says deployments are putting enterprises in real danger.
Matthew Smith • June 17, 2026 -
Cloud security metrics and KPIs: A CISO’s guide
Today's distributed computing environments require a cloud strategy that goes well beyond choosing the best security tools. Instead, CISOs need a far more integrated approach.
Dave Shackleford • June 16, 2026 -
How to build AI security guardrails without blocking innovation
To take advantage of opportunities AI might present -- without opening the door to a breach -- an organization needs to put the right guardrails in the right places.
Matthew Smith • June 11, 2026