CISO Strategy: Page

Build a proactive cybersecurity approach that delivers

Whether it's zero-trust, adaptive security or just plain common sense, IT leaders must embrace an approach to IT security that's proactive, not reactive.

By Stan Gibson • June 26, 2019

The CISO’s guide to Kubernetes security and deployment

Container orchestration platform Kubernetes provides tools needed to deploy scalable applications with efficiency. Learn what steps CISOs must take to secure a Kubernetes environment.

By Joe Nemer • June 26, 2019

Gartner: Cybersecurity skills shortage requires a new approach

At the Gartner Security and Risk Management Summit, analysts discuss the challenge of finding skilled cybersecurity professionals and how it can be solved.

By Mekhala Roy • June 18, 2019

CrowdStrike IPO success puts spotlight on endpoint security

Cybersecurity firm CrowdStrike made its successful Wall Street debut Wednesday. The company closed its trading with a share price of $58.

By Mekhala Roy • June 13, 2019

Recorded Future acquired by private equity firm for $780 million

Recorded Future said the $780 million acquisition agreement with private equity firm Insight Partners affirms the growing importance of threat intelligence for enterprises.

By Mekhala Roy • May 30, 2019

Cylance CSO: Let’s name and shame failed security controls

Malcolm Harkins, the chief security and trust officer at BlackBerry Cylance, says security controls that don't live up to their billing should be taking more blame for data breaches.

By Rob Wright • May 28, 2019

New executive order moves to ban Huawei

U.S. businesses are barred from dealing with Huawei following an executive order from the White House and the additions of Huawei and its affiliates to a trade blacklist.

By Michael Heller • May 16, 2019

Why centralization in a multi-cloud security strategy is key

When moving to a multi-cloud infrastructure, there are a few strategies to keep in mind. Learn how centralization will limit the challenges of fragmented security access and monitor controls.

By Dave Shackleford • May 13, 2019

Effects of cybersecurity skills shortage worsening, new study says

The cybersecurity skills shortage is putting businesses at risk in a variety of ways, according to a new study. Experts suggest ways to combat the problem.

By Mekhala Roy • May 10, 2019

Symantec CEO Greg Clark unexpectedly steps down

Cybersecurity giant Symantec is searching for a new CEO once again after Greg Clark unexpectedly resigned from the vendor after three years at the helm.

By Rob Wright • May 10, 2019

Google I/O 2019 keynote brings focus on security and privacy

After being a no-show at last year's conference, security and privacy improvements were big themes at Google I/O's first day, including discussion on federated learning.

By Michael Heller • May 8, 2019

The risks of multi-cloud security compared to single cloud

Single-cloud architecture poses some challenges, which has led to a new trend in adopting multi-cloud designs. Discover whether multi-cloud is right for your enterprise.

By Dave Shackleford • May 7, 2019

Putting cybersecurity for healthcare on solid footing

CISO Kevin Charest talks security threats he sees in the healthcare field and the means his company is using to thwart them, including HCSC's Cyber Fusion Center.

By Alan Earls • May 1, 2019

Huawei ban highlights 5G security issues CISOs must tackle

Why worry over Huawei? A U.S. ban of this Chinese company's products should remind CISOs that now is the time to consider security issues related to the rollout of the 5G network.

By Mary Pratt • May 1, 2019

AI, machine learning in cybersecurity focused on behavior

Artificial intelligence, and machine learning in particular, is being fruitfully employed in IT security tools. Learn where this advanced technology works best now.

By Nick Cavalancia • April 17, 2019

Blue Hexagon bets on deep learning AI in cybersecurity

Cybersecurity startup Blue Hexagon uses deep learning to detect network threats. Security experts weigh in on the limitations of AI technologies in cybersecurity.

By Mekhala Roy • April 15, 2019

How important is security awareness training for executives?

Corporate executives are prime targets for spies and hackers, and that is why security awareness training for executives is so important.

By Andrew Froehlich • April 11, 2019

HPE takes aim at STEM and cybersecurity education, awareness

HPE CISO Liz Joyce worked with the Girl Scouts on an educational cybersecurity game for girls and ensures HPE's Women in Cybersecurity encourages more women to join the industry.

By Madelyn Bacon • March 29, 2019

2019 RSA Conference bottom line: People are security’s strongest asset

People in the security community and beyond are more important and influential than the leading technologies if the talk at the 2019 RSA Conference is any indication.

By Madelyn Bacon • March 26, 2019

What is post-quantum cryptography and should we care?

Post-quantum cryptographic algorithms are aimed at securing encrypted data against super-powerful computers in the future, but will they even be necessary? Hanno Böck explains.

By Hanno Böck • March 26, 2019

Plugging the cybersecurity skills gap with security automation

Security automation and response promises to help alleviate the shortage of qualified cybersecurity pros. Learn how SOAR helps security teams work smarter, not harder.

By Mike Chapple • March 20, 2019

Bobbie Stempfley: Cybersecurity AI has a long way to go

Many cybersecurity vendors have embraced AI and machine learning, but CERT Division's Bobbie Stempfley says more work is needed around testing algorithms and validating results.

By Rob Wright • March 19, 2019

Despite reservations about NSA’s Ghidra, experts see value

The NSA's reverse-engineering tool, Ghidra, was released to the public and despite some initial concerns experts are generally bullish on the prospects for the free software.

By Michael Heller • March 15, 2019

Battling misinformation focus of Facebook, Twitter execs’ talk

Facebook and Twitter executives say finding a pattern of malicious activity is more effective in identifying bad actors on sites than looking at the misleading information itself.

By Antone Gonsalves • March 8, 2019

How bellwether cybersecurity technologies predict success

Bellwether cybersecurity technologies -- advanced endpoint security, behavioral threat analytics and a trio of cloud-based apps -- are used by successful cybersecurity teams. Find out why.

By Johna Johnson • March 6, 2019