CISO Strategy: Page

Healthcare CISO offers alternatives to ‘snake oil’ companies

Indiana University Health CISO Mitchell Parker discussed internal risk assessments, security snake oil salesmen and more at his Black Hat USA 2020 talk.

By Alexander Culafi • Aug. 11, 2020

Not just politics: Disinformation campaigns hit enterprises, too

In her Black Hat USA 2020 keynote, Renée DiResta of the Stanford Internet Observatory explains how nation-state hackers have launched 'reputational attacks' against enterprises.

By Rob Wright • Aug. 7, 2020

Which type of CISO are you? Company fit matters

Incompatibility between CISOs and their companies can lead to stress, frustration, burnout and rapid turnover. Identify your CISO style to target the ideal role and environment for you.

By Alissa Irei • Aug. 3, 2020

7 security awareness statistics to keep you up at night

As if protecting corporate systems and data wasn't hard enough, beware of another potential foe: those well-meaning but woefully uninformed staff members.

By Jessica Scarpati • Aug. 3, 2020

How to start an enterprise bug bounty program and why

Incentivizing researchers for finding software vulnerabilities can be advantageous for vendors and participants. Here's what to know before starting a bug bounty program.

By Ed Moyle • Aug. 3, 2020

How CISOs can deal with cybersecurity stress and burnout

Being a paramedic and working in cybersecurity taught CISO Rich Mogull how to avoid stress and burnout. Check out his advice to maintain mental health in high-stress roles.

By Michael Heller • July 30, 2020

Minorities in cybersecurity face unique and lasting barriers

IT is facing renewed scrutiny into its lack of diversity. Explore the unique barriers minorities in cybersecurity face and why hiring approaches are ill equipped to address them.

By Katie Donegan • July 22, 2020

Post-pandemic cybersecurity: Lessons learned

Pandemic lockdowns provided companies with valuable cybersecurity experience. Here's how to make sure post-pandemic cybersecurity operations are prepared for a second wave.

By Karen Kent • July 20, 2020

Advent, Forescout bury the hatchet with new acquisition deal

Despite an ugly legal dispute and allegations of channel stuffing, Advent International and Forescout Technologies are moving forward with an amended acquisition agreement.

By Rob Wright • July 15, 2020

The future of cyber warfare requires infosec’s attention

The future of cyber warfare places enterprise security and survivability in the crosshairs. Learn more about cyber warfare threats and capabilities and how infosec can prepare.

By Katie Donegan • July 9, 2020

Why COVID-19 won’t stop cybersecurity jobs and recruitment

The economy is struggling, and many careers are taking hits, but cybersecurity jobs and careers will likely stay in demand as companies need to keep data and customers safe.

By Jonathan Meyers, Guest Contributor • July 7, 2020

3 must-ask post-pandemic questions for CISOs

The worldwide health pandemic has created multiple challenges for today's CISOs and their security teams. Ask these three questions to stay safe in a post-pandemic workplace.

By Jessica Groopman • June 30, 2020

Unpack the use of AI in cybersecurity, plus pros and cons

The use of AI in cybersecurity is now under renewed scrutiny as its popularity rises. Discover the pros and cons of machine learning and AI for incident response.

By Peter Sullivan • June 16, 2020

Forescout sues Advent for calling off acquisition

Forescout Technologies filed a lawsuit against Advent International, claiming the private equity firm violated the terms of its $1.9 billion acquisition agreement.

By Arielle Waldman • May 20, 2020

Top 2 post-COVID-19 CISO priorities changing in 2020

CISO priorities for 2020 were upended when the COVID-19 pandemic hit. Learn two ways forward-thinking CISOs are planning to deal with the new normal.

By Ashwin Krishnan • May 19, 2020

Advent calls off Forescout acquisition

On what was scheduled to be the closing day, Forescout Technologies instead announced Advent International will not proceed with the $1.9 billion acquisition as planned.

By Arielle Waldman • May 18, 2020

Volunteers join forces to tackle COVID-19 security threats

The COVID-19 Cyber Threat Coalition has amassed approximately 4,000 volunteers from the infosec community to monitor, analyze and block pandemic-themed threats across the globe.

By Arielle Waldman • May 11, 2020

Why nation-state cyberattacks must be top of mind for CISOs

Even though organizations face threats coming from many sources, one type of cyberattack should be top of mind for CISOs: those backed by nation-states. Here's why.

By Johna Johnson • May 1, 2020

One security framework may be key to cyber effectiveness

The Mitre ATT&CK security framework could best enable effective cybersecurity, according to The Chertoff Group, as could joining information sharing and analysis organizations.

By Michael Heller • May 1, 2020

CISO stress and burnout cause high churn rate

The nature of the CISO role can take a toll, say industry vets, with frustration and stress contributing to high turnover rates and burnout. Learn how to make it work.

By Alissa Irei • May 1, 2020

Cybersecurity impact analysis template for pandemic planning

This template from IANS Research can help IT and security professionals document and prioritize essential processes, staffing and systems when faced with a pandemic event.

By IANS, Guest Contributor • April 28, 2020

With US ban, Huawei products put CISOs on notice

The U.S. federal government has enacted bans on equipment it deems a national security risk. The move should make CISOs wary of what products they bring into their organizations.

By Mary Pratt • April 17, 2020

TPG Capital combines 3 vendors to form Digital.ai

Private equity firm TPG Capital combined three acquisitions -- CollabNet VersionOne, XebiaLabs and Arxan Technologies -- to create the new DevSecOps-focused vendor.

By Arielle Waldman • April 16, 2020

Skill building is key to furthering gender diversity in tech

Gender disparities imperil the threat intelligence community. Shannon Lietz, leader and director of DevSecOps at Intuit, discusses current efforts to attract female talent.

By Katie Donegan • April 7, 2020

4 essential AI-enabled security concerns for buyers and vendors

Experts offer four concerns for enterprises and vendors to discuss in order to deploy and run AI-based cybersecurity tools.

By Michael Heller • April 3, 2020