Expert Advice: Page
Practical guidance from industry experts on Cybersecurity
-
How to build AI security guardrails without blocking innovation
To take advantage of opportunities AI might present -- without opening the door to a breach -- an organization needs to put the right guardrails in the right places.
Matthew Smith • June 11, 2026 -
Top identity and access management risks
Identity is long past the days of logging into systems. Security teams must now manage SaaS apps, AI agents and machine-to-machine interactions across distributed environments.
Dave Shackleford • June 9, 2026 -
CISO’s guide to data minimization
Excessive data retention expands attack surfaces and breach impact. Learn why data minimization has become a foundational cybersecurity and compliance strategy.
Dave Shackleford • June 8, 2026 -
How to find cyber-risk data sources for a FAIR analysis
Cyber-risk quantification with FAIR can change the game for CISOs -- but sourcing enough accurate data for analysis can feel impossible. Learn how and where to find it.
Alissa Irei and Paul Kirvan • June 4, 2026 -
Taking care of business: The CISO’s role in a cyber crisis
CISOs have a broad range of responsibilities. But when a crisis occurs, they become the de facto leader, entrusted with both technical and business outcomes.
Paul Kirvan and Sharon Shea • May 20, 2026 -
What CISOs need to know about AI audit logs
AI audit logs are rapidly becoming essential tools for enterprise CISOs. Here's what cybersecurity leaders need to track to mitigate risks.
Amy DeCarlo • May 20, 2026 -
SOC vs. MDR: What CISOs need to consider
Security operations centers and managed detection and response providers differ in how they manage threats. What's the best way to choose between a SOC and MDR service?
Karen Kent • May 18, 2026 -
Transform SIEM rules with behavior-based threat detection
Outdated SIEM rules can hamstring enterprises as they try to safeguard their operations. Use a proactive, strategic approach that's grounded in actual attack behavior instead.
Damon Garn • May 13, 2026 -
CISO’s guide: How to test an incident response plan
Creating an incident response plan is only the beginning. Regular testing will help ensure it doesn't fall apart during a real cybersecurity event.
Paul Kirvan • May 13, 2026 -
How to implement zero trust for AI
As organizations embed AI into business systems, they also expand the attack surface. Applying zero trust to AI can help mitigate the risk.
Damon Garn • May 12, 2026 -
The breakup: Why CISOs are decoupling data from their SIEMs
Breaking up is hard to do -- but some CISOs find that decoupling SIEMs from security log data feeds is worth it. Learn about the benefits and challenges.
John Burke • May 10, 2026 -
How to construct an effective security controls evaluation
Some CISOs believe their security controls are sufficient, but reach that conclusion without any method for measuring their effectiveness. There's a much better way.
Ed Moyle • May 7, 2026 -
5 leading enterprise password managers to consider
Admins need their password managers to provide a wide range of features and capabilities. Learn what every password manager must have, along with available options.
Karen Kent • May 7, 2026 -
Buyer’s guide for CISOs: Cloud security posture management
Cloud security posture management is a critical component of cloud defense strategy. Need help choosing a CSPM platform? This guide lists key features and platforms to consider.
Dave Shackleford • May 6, 2026 -
6 things to check in your cyber insurance policy fine print
Cyber insurance premiums are stabilizing, but coverage is narrowing. From AI risks to nation-state attacks, here's what your policy might no longer cover.
John Burke • May 5, 2026 -
What every CISO should consider before a SIEM migration
Before starting a SIEM migration, the security team must identify the data, rules, workflows and policies they need to transition to the new tool or service. Here's how to get started.
John Burke • April 30, 2026 -
CISO’s guide to centralized vs. federated security models
CISOs must juggle flexibility, consistency and risk when considering the enterprise's security structure. Discover the benefits and drawbacks of different security models.
Damon Garn • April 30, 2026 -
What are the most common authentication methods?
To authenticate users, security teams have a range of options available. Note, however, that a combination of methods is the best and safest approach.
Karen Kent • April 29, 2026 -
Shadow code: The hidden threat for enterprise IT
The shadow code running in your web apps could be a ticking time bomb. Learn more about the cybersecurity risks of shadow code and how to protect your enterprise.
Karen Kent • April 28, 2026 -
How to fix cybersecurity’s agentic AI identity crisis
AI agents are transforming enterprise operations, but their autonomy poses critical security challenges. Learn how to secure these powerful digital actors.
Matthew Smith • April 28, 2026 -
5 top SIEM use cases in the enterprise
In the age of AI everything, SIEM isn't exactly flashy -- but it still matters. Explore top SIEM use cases that span the enterprise, from cybersecurity to IT ops.
John Burke • April 25, 2026 -
How to roll out an enterprise passkey deployment
Passkey security sidesteps many of the end-user and cybersecurity issues that plague traditional passwords. Learn how to successfully deploy passkeys in your organization.
Amy DeCarlo • April 15, 2026 -
Next-generation firewall buyer’s guide for CISOs
NGFWs are crucial tools for modern security operations, but CISOs need to understand the often complex deployment, maintenance and budgeting implications.
Karen Kent • April 9, 2026 -
8 best practices for a bulletproof IAM strategy
IAM systems enable secure access to applications and resources. But to benefit from IAM -- and avoid a security failure -- teams must know which best practices to follow.
Sean Kerner • April 9, 2026 -
Meaningful metrics demonstrate the value of cyber-resiliency
Cyber-resilience metrics translate raw technical performance into real business outcomes. The right analytics can enhance more than just security operations.
Paul Kirvan • April 6, 2026