CISO Strategy: Page

How to maintain security with an understaffed security team

Unsurprisingly, many companies function without a complete security team. Security tasks often fall to others in the organization. Here's some advice for stand-in security members.

By Sharon Shea • Nov. 29, 2022

Reality check: CISO compensation packages run the gamut

A capable security executive is invaluable -- a fact organizations increasingly recognize. CISOs' salaries are generally trending up, but the range in compensation is wide.

By Jerald Murphy • Nov. 16, 2022

3 best professional certifications for CISOs and aspiring CISOs

While one doesn't necessarily need professional cybersecurity certifications to become a CISO, they don't hurt. Explore the best certifications for CISOs and aspiring CISOs.

By Jerald Murphy • Nov. 8, 2022

How to build a shadow IT policy to reduce risks, with template

With a shadow IT policy in place, organizations reduce security risks from unapproved applications and services that employees introduce independently.

By Paul Kirvan • Nov. 8, 2022

How Sheltered Harbor helps banks navigate cyber-recovery

Banks must be able to recover quickly from a cyber attack -- a difficult task, given the volume and sophistication of attacks. The not-for-profit Sheltered Harbor aims to help.

By Vinny Choinski • Oct. 27, 2022

3 cloud security posture questions CISOs should answer

As cloud adoption continues to accelerate, CISOs must help IT and cybersecurity teams keep pace with evolving cloud markets, especially when it comes to cloud security posture.

By Kristopher Carr • Oct. 19, 2022

Google launches new supply chain security offerings

Securing the software supply chain, especially open source libraries, was a major theme behind the new products released at the Google Cloud Next '22 conference.

By Arielle Waldman • Oct. 11, 2022

Tips for developing cybersecurity leadership talent

Navigating the skills gap from an employer's perspective starts with investing in talent. Get advice on how to develop and hire emerging leaders from an industry analyst.

By Richard Addiscott • Sept. 26, 2022

Biden issues cybersecurity guidance for software vendors

The guidance is an extension of President Biden's cybersecurity executive order from 2021 and includes new requirements for software deployed in federal agencies.

By Alexander Culafi • Sept. 14, 2022

How to connect cyber-risk and climate risk strategies

Every business faces two global systemic risks: cybersecurity and climate change. Learn how to integrate these two areas of risk management for greater business resilience.

By Jessica Groopman • Sept. 14, 2022

5 ways to improve your cloud security posture

With more applications deployed to multiple clouds, organizations must shore up their security posture, and cloud security posture management is designed to help. Find out why.

By Melinda Marks • Sept. 14, 2022

7 CISO succession planning best practices

Nothing is certain except death, taxes and CISO turnover. Learn how to prepare for the inevitable and future-proof your security program with a succession plan.

By Jerald Murphy • Sept. 7, 2022

Cybersecurity budget breakdown and best practices

Once budget is secured, CISOs must figure out where it should be allocated -- as well as how to justify the costs. Get the lowdown on a cybersecurity budget breakdown here.

By Ashwin Krishnan • Sept. 1, 2022

PCI DSS v4.0 is coming, here’s how to prepare to comply

Organizations need to start laying the groundwork to reap the benefits of the forthcoming PCI DSS v4.0 specification. Creating a team to focus on the upgrade is one good step.

By Paul Kirvan • Aug. 24, 2022

5 reasons to integrate ESG and cybersecurity

Every business faces global systemic risks, yet most have failed to integrate cybersecurity with ESG programs. Here are five reasons why integration makes good business sense.

By Jessica Groopman • Aug. 18, 2022

How to ensure a secure metaverse in your organization

Before deploying your company's metaverse, follow these practices -- including inventorying vulnerabilities and developing T&Cs -- to proactively address metaverse security issues.

By Ashwin Krishnan • Aug. 16, 2022

For cyber insurance, some technology leads to higher premiums

Though cyber insurance demand is exceeding supply and companies might receive less coverage with higher premiums, experts say there are ways enterprises can reduce risk.

By Arielle Waldman • Aug. 16, 2022

What is Domain-based Message Authentication, Reporting and Conformance (DMARC)?

The Domain-based Message Authentication, Reporting and Conformance (DMARC) protocol is one leg of the tripod of internet protocols that support email authentication methods.

By Peter Loshin • Aug. 12, 2022

Chris Krebs: It’s still too hard to work with the government

Former CISA Director Chris Krebs offered multiple areas of improvement to the U.S. government's cyber readiness during a Black Hat 2022 keynote.

By Alexander Culafi • Aug. 10, 2022

Cybersecurity lessons learned from COVID-19 pandemic

Cybersecurity lessons companies learn from the COVID-19 pandemic include having work-from-home preparations and developing disaster recovery and business continuity plans.

By Kyle Johnson • Aug. 5, 2022

3 ways to help cybersecurity pros avoid burnout

Many security professionals are pushed to their breaking point. Discover three ways employers and managers can help their employees avoid burnout.

By Chloé Messdaghi • July 26, 2022

4 criteria to measure cybersecurity goal success

Measuring the success of cybersecurity goals is challenging because they are components of larger goals and often probabilistic rather than deterministic.

By Packt Publishing, Sharon Shea • July 8, 2022

How to write a cybersecurity job posting

Is your organization struggling to find cybersecurity talent? Your job descriptions could be the problem. Learn how to write a good cybersecurity job posting.

By Wiley Publishing, Isabella Harford • July 5, 2022

How to find your niche in cybersecurity

It's difficult to navigate a career in cybersecurity, especially with all the varying roles. A veteran CISO offers advice on how to find your niche in the security industry.

By Isabella Harford • July 5, 2022

Negotiating a golden parachute clause in a CISO contract

If a CISO becomes the company scapegoat after a security incident, a strong golden parachute clause can mean the difference between a soft landing and a hard crash.

By Jerald Murphy • June 28, 2022