CISO Strategy: Page

How to talk about cybersecurity risks, colloquially

The cybersecurity field is riddled with confusion and complexity. Knowing how to talk about risk and how to manage it is key to building resilience.

By Todd Inskeep • Nov. 23, 2021

How to create security metrics business leaders care about

Security metrics must be clear, actionable and resonate with business leadership. Learn how to create metrics that business leaders care about and will act upon.

By Jeffrey Wheatman • Nov. 16, 2021

4 concepts that help balance business and security goals

The goal of enterprise security is to maintain connectivity, while remaining protected. Use these four concepts to balance business and security goals.

By Mark Pierpoint • Nov. 10, 2021

To improve resilience, augment zero-trust models

Zero-trust models are a start, but to improve resilience, they should be augmented and extended to include verification procedures, supply chain security and open source software.

By Mika Lauhde • Nov. 3, 2021

Applying security to operating models requires collaboration

Balancing business needs with security is more important than ever. Integrating operating models with reference architectures is a key step in the process.

By Altaz Valani • Oct. 28, 2021

5 IT security policy best practices

As businesses and technologies grow and evolve, it's important IT security policies do, too. Follow these five best practices to ensure policies are fresh and relevant.

By Diana Kelley • Oct. 27, 2021

Securities and Exchange Commission (SEC)

The Securities and Exchange Commission (SEC) is the U.S. government agency that oversees the nation's securities industry.

By Paul Kirvan • Oct. 27, 2021

5 cybersecurity personality traits for a successful career

In this excerpt of 'Confident Cyber Security,' author Jessica Barker outlines five cybersecurity personality traits employers look for in job candidates.

By Isabella Harford, Kogan Page • Oct. 26, 2021

How to start a career in cybersecurity from the human side

Discover how the co-founder of an infosec consultancy and author of 'Confident Cyber Security' started her career and became a leader in the human nature side of security.

By Isabella Harford • Oct. 26, 2021

Enterprises ask Washington to step up cyber collaboration

During CISA's National Cybersecurity Summit, critical infrastructure companies said they need better information on cyberthreats from the federal government.

By Arielle Waldman • Oct. 14, 2021

Cyber insurance premiums, costs skyrocket as attacks surge

As cyber attacks and losses have increased, so has demand for cyber insurance. But now premiums are reflecting a harsh new reality.

By Arielle Waldman • Oct. 11, 2021

How to prepare for the CIPP/US exam

The co-authors of a CIPP/US study guide offer advice on the IAPP certification, including career benefits, how to prepare and how the U.S. exam differs from other regions' exams.

By Isabella Harford • Sept. 30, 2021

Cybersecurity leaders back law for critical infrastructure

In the wake of cyberattacks like Colonial Pipeline, U.S. senators want a national law requiring critical infrastructure companies to report cybersecurity incidents to CISA.

By Makenzie Holland • Sept. 24, 2021

Experts debate XDR market maturity and outlook

Is extended detection response still all buzz and no bite? Experts disagree on whether XDR qualifies as a legitimate market yet or still has a ways to go.

By Alissa Irei • Sept. 23, 2021

CompTIA SYO-601 exam pivots to secure bigger attack surface

The latest CompTIA Security+ exam, SYO-601, tests skills and knowledge for dealing with an expanded attack surface and the latest forms of assault on cybersecurity defenses.

By CompTIA • Sept. 15, 2021

Tenable acquires cloud security startup Accurics for $160M

The acquisition will be Tenable's first expansion into securing infrastructure as code, as it makes a push to identify and fix flaws in cloud-native software.

By Arielle Waldman • Sept. 13, 2021

Private sectors pledge big for cyberdefense

Tech giants have invested billions to address cybersecurity threats such as supply chain security and attacks on critical infrastructures.

By Arielle Waldman • Aug. 26, 2021

DHS unveils second round of new pipeline security requirements

New requirements from DHS for oil and gas pipeline operators include the implementation of 'specific mitigation measures' against cyberthreats, specifically ransomware attacks.

By Alexander Culafi • July 20, 2021

SentinelOne IPO raises $1.2 billion, beating estimates

the endpoint security vendor has gone public in one of the largest IPOs in the cybersecurity industry.

By Arielle Waldman • June 30, 2021

Top 5 benefits of a new cybersecurity market model

Companies are struggling to identify the cybersecurity technology that would actually be useful for their use cases. It's time for a new market model around efficacy instead.

By Joe Hubback • June 11, 2021

CISA taps Bugcrowd for federal vulnerability disclosure program

The new program follows a CISA directive from September that requires executive branch agencies to create and publish vulnerability disclosure policies.

By Shaun Nichols • June 8, 2021

Hackers vs. lawyers: Security research stifled in key situations

The age-old debate between sharing information or covering legal liability is a growing issue in everything from bug bounties to disclosing ransomware attacks.

By Shaun Nichols • June 7, 2021

5 steps to secure the hybrid workforce as offices reopen

Companies must now face the security challenges of overseeing a hybrid workforce as employees return to the office.

By Ashwin Krishnan • June 4, 2021

FireEye and Mandiant part ways in $1.2B deal

FireEye products and Mandiant incident response services will split into two entities under the pending acquisition of FireEye by Symphony Technology Group.

By Arielle Waldman • June 3, 2021

MDM vs. MAM: What are the key differences?

Mobile workers are productive and even essential to business success. But IT has to protect corporate apps and data -- as well as worker privacy -- via MDM, MAM or both.

By Matt Kosht, Gary Olsen • May 28, 2021