CISO Strategy: Page

Closing the book on RSA Conference 2023

AI, cloud security, SOC modernization and security hygiene and posture management were all hot topics at RSAC in San Francisco this year.

By Jon Oltsik • May 16, 2023

CISOs face mounting pressures, expectations post-pandemic

Proofpoint's 2023 Voice of the CISO report shows deep concern among executives about impending data loss and exposure from negligent -- and malicious -- employees.

By Alexis Zacharakos • May 10, 2023

2023 RSA Conference insights: Generative AI and more

Generative AI was the talk of RSA Conference 2023, along with zero trust, identity security and more. Enterprise Strategy Group analyst Jack Poller offers his takeaways.

By Jack Poller • May 10, 2023

7 ways to mitigate CISO liability and risk

Recent civil and criminal cases have brought CISO liability questions to the fore. Learn how to understand and manage personal risk exposure as a security executive.

By Alissa Irei • May 8, 2023

Cybersecurity execs ponder software liability implementation

Reactions to the Biden Administration's push for legislation enforcing software liability were mostly positive, but questions remain regarding implementation.

By Alexander Culafi • May 4, 2023

Where climate change and cyber attacks intersect

One session at RSA Conference 2023 focused on climate change -- a topic that is not commonly featured during cybersecurity conversations, but should be.

By Sharon Shea • May 2, 2023

Secureworks CEO weighs in on XDR landscape, AI concerns

Secureworks CEO Wendy Thomas talks with TechTarget Editorial about the evolution of the threat detection and response market, as well as the risks posed by new AI technology.

By Alexander Culafi • April 27, 2023

Rising AI tide sweeps over RSA Conference, cybersecurity

AI is everywhere at RSA Conference 2023, though experts have differing views about why the technology has become omnipresent and how it will best serve cybersecurity.

By Alexander Culafi • April 25, 2023

Cloud-native security metrics for CISOs

Author and chief risk officer Rich Seiersen talks about the challenges of securing cloud-native applications and how to use metrics to improve their effectiveness.

By Melinda Marks • April 25, 2023

How to prepare for a cybersecurity audit

Organizations should conduct regular cybersecurity audits to determine if their networks and other assets are properly protected, as well as if they meet compliance mandates.

By Paul Kirvan • April 19, 2023

10 hot topics to look for at RSA Conference 2023

RSA Conference 2023 promises another exciting year of cybersecurity discussions and hyperbole. Enterprise Strategy Group's Jon Oltsik shares what he hopes to see at the show.

By Jon Oltsik • April 11, 2023

How to prepare for the Microsoft Cybersecurity Architect exam

Before taking the Microsoft Cybersecurity Architect exam, learn about the knowledge areas covered on the SC-100 test, studying recommendations, prerequisites and more.

By Kyle Johnson • April 11, 2023

Microsoft, Fortra get court order to disrupt Cobalt Strike

Microsoft, Fortra and the Health Information Sharing and Analysis center announced they obtained a court order in an effort to curb malicious Cobalt Strike use.

By Arielle Waldman • April 7, 2023

Defining policy vs. standard vs. procedure vs. control

Infosec pros may have -- incorrectly -- heard the terms 'standard' and 'policy' used interchangeably. Examine the differences among a policy, standard, procedure and technical control.

By Katie Donegan • April 7, 2023

Microsoft launches AI-powered Security Copilot

Microsoft Security Copilot is an AI assistant for infosec professionals that combines OpenAI's GPT-4 technology with the software giant's own cybersecurity-trained model.

By Rob Wright • March 28, 2023

6 principles for building engaged security governance

Security governance isn't enough. Enter engaged security governance -- an ongoing process that aligns business strategy with security across an organization.

By Steve Durbin • March 15, 2023

GoDaddy’s response to ‘multi-year’ breach criticized

GoDaddy took nearly three months to disclose that attackers breached the company in a multi-year campaign, and customers are still in the dark about the details of the attack.

By Arielle Waldman • Feb. 21, 2023

social media policy

A social media policy is a corporate code of conduct that provides guidelines for employees who post content on the internet either as part of their job or as a private person.

By Wendy Schuchart, Nick Barney • Feb. 14, 2023

What cybersecurity consolidation means for enterprises

Experts predict cybersecurity consolidation will increase in the months and years ahead. Security leaders should consider what that means for their purchasing strategies.

By Jerald Murphy • Jan. 31, 2023

6 cybersecurity buzzwords to know in 2023

Enterprise Strategy Group research indicates many organizations will increase cybersecurity spending in 2023, and with that comes an evolving set of vendor buzzwords to sort out.

By Jon Oltsik • Jan. 20, 2023

How to build a cyber-resilience culture in the enterprise

Discover how organizations can build a culture of cyber resilience by reducing risk, limiting damage, having a disaster recovery plan and assuming a cyber attack is coming.

By Geoff Hancock • Jan. 18, 2023

Vulnerable software, low incident reporting raises risks

Beneath the buzz around tech innovations at CES were discussions about cybersecurity and how to prevent the next generation of tech from being just as vulnerable as the last.

By Bridget Botelho • Jan. 11, 2023

11 cybersecurity predictions for 2023

Analysts and experts have looked into their crystal balls and made their cybersecurity predictions for 2023. Is your organization prepared if these predictions come true?

By Kyle Johnson • Dec. 19, 2022

After the CISO role: Navigating what comes next

Former chief information security officers may have numerous career options available but no clear path forward. Here's how to navigate life after the CISO role.

By Alissa Irei • Dec. 13, 2022

As a new CISO, the first 100 days on the job are critical

As a chief information security officer, you won't get a second chance to make a first impression. Learn how a CISO's first 100 days lay the foundation for a successful tenure.

By Jerald Murphy • Dec. 12, 2022