CISO Strategy: Page

How can a compliance strategy improve customer trust?

Privacy compliance strategy can help build consumer trust and improve security if companies stop looking at the regulations as an obstacle and more as a business opportunity.

By Kassidy Kelley • Sept. 21, 2018

Jake Braun discusses the Voting Village at DEF CON

The Voting Village at DEF CON 26 expanded its scope to test every aspect of election security that it could. Organizer Jake Braun discusses how it went and what's next.

By Michael Heller • Sept. 12, 2018

Diversity at cybersecurity conferences is too important to ignore

Diversity at cybersecurity conferences became a hot topic in early 2018. Innovation Women founder Bobbie Carlton discusses why it takes more work to get women in security on stage.

By Madelyn Bacon • Aug. 28, 2018

Innovation Women founder strives to close gender gap at conferences

Innovation Women founder Bobbie Carlton discusses the all-male, all-pale panels that overwhelm tech conferences and that moved her to change the number of female speakers.

By Madelyn Bacon • Aug. 24, 2018

AI bias and data stewardship are the next ethical concerns for infosec

AI bias and the need for data stewardship to prevent issues surrounding the trend of hoarding data are the next big ethical concerns for infosec, according to Laura Norén.

By Michael Heller • Aug. 23, 2018

SIEM evaluation criteria: Choosing the right SIEM products

Establishing solid SIEM evaluation criteria and applying them to an organization's business needs goes far when selecting the right SIEM products. Here are the questions to ask.

By Karen Kent • Aug. 21, 2018

How new cybersecurity problems emerge from fake news

As fake news continues to emerge, new cybersecurity challenges for IT professionals arise. Learn why we should continue to care about cyber propaganda and what we can do.

By Char Sample • Aug. 21, 2018

What is missing from the NIST/DHS botnet security report?

The joint DHS and NIST report on botnet security offers goals and action items to counter distributed cyberthreats. Learn the report recommendations with expert Nick Lewis.

By Nick Lewis • Aug. 16, 2018

Infosec mental health support and awareness hits Black Hat 2018

While burnout, depression and PTSD can affect anyone, infosec mental health still doesn't often get the attention it deserves, but Black Hat 2018 attempted to change that.

By Michael Heller • Aug. 15, 2018

2018 Pwnie Awards cast light and shade on infosec winners

The Meltdown and Spectre research teams won big at the Pwnie Awards this year at Black Hat, while the late-entry Bitfi Wallet team overwhelmingly won for Lamest Vendor Response.

By Peter Loshin • Aug. 10, 2018

Parisa Tabriz’s Black Hat 2018 keynote challenges infosec’s status quo

In her Black Hat 2018 keynote, Google's Parisa Tabriz celebrated the unrecognized, long-term work that can cause real change in security and challenge the status quo.

By Michael Heller • Aug. 8, 2018

Bugcrowd CTO explains crowdsourced security benefits and challenges

In part two of this interview, Bugcrowd founder and CTO Casey Ellis discusses the value of crowdsourced vulnerability research, as well as some of the challenges.

By Rob Wright • Aug. 7, 2018

Black Hat 2018 survey: Cybersecurity staffing, budgets still lacking

According to a survey of Black Hat 2018 attendees, organizations are still struggling with insufficient cybersecurity staff and budgets to meet the current and emerging threats.

By Rob Wright • Aug. 2, 2018

Women in cybersecurity: How to make conferences more diverse

The lack of women speaking at security conferences might be representative of the low number of women in cybersecurity, but efforts are finally being made to close the gender gap.

By Madelyn Bacon • July 31, 2018

Bugcrowd CTO on the need for responsible disclosure policy, ‘good faith’

Bugcrowd founder and CTO Casey Ellis talks about his concerns that the era of 'good faith' between security researchers and enterprises is in jeopardy.

By Rob Wright • July 31, 2018

U.S. government making progress on DMARC implementation

The deadline for full DMARC implementation in U.S. government-owned domains is less than three months away, and only half of the domains have the correct policy in place.

By Madelyn Bacon • July 31, 2018

Accenture’s Justin Harvey explains why cyber attribution isn’t important

Accenture's Justin Harvey spoke at RSA Conference 2018 about his experiences with incident response and his views on the importance of cyber attribution.

By Rob Wright • July 17, 2018

Identify gaps in cybersecurity processes to reduce organizational risk

Organizational risk is a given at modern companies. But as threats persist, identifying preventable cybersecurity gaps presents an opportunity to strengthen enterprise defenses.

By Mary Pratt • June 26, 2018

Accenture’s Tammy Moskites on the cybersecurity gender gap

Accenture's Tammy Moskites spoke with SearchSecurity at RSA Conference 2018 about the gender gap in the infosec industry and what can be done to close it.

By Rob Wright • June 25, 2018

Accenture’s Tammy Moskites explains how the CISO position is changing

Accenture's Tammy Moskites spoke with SearchSecurity at RSA Conference 2018 about the daunting challenges CISOs face today and how the position may be changing.

By Rob Wright • June 18, 2018

Where machine learning for cybersecurity works best now

Need to up your endpoint protection endgame? Learn how applying machine learning for cybersecurity aids in the fight against botnets, evasive malware and more.

By Nick Cavalancia • June 7, 2018

Walmart’s Jerry Geisler on the CISO position, retail challenges

A global CISO in charge of one of the world's largest cybersecurity programs got his start on the retail floor. He's arrived just in time for the digital transformation.

By Kathleen Richards • June 1, 2018

Stranger things: IoT security concerns extend CISOs’ reach

The internet of things has drastically expanded the scope of what enterprises need to protect, adding challenges big and small to CISOs' responsibilities.

By Mary Pratt • June 1, 2018

New Walmart CISO discusses protecting the world’s largest retailer

Walmart CISO Jerry Geisler talks about the retail giant's evolving cloud strategy, vulnerability management and risks the company is focused on across its environments.

By Kathleen Richards • May 31, 2018

Philip Tully: AI models are cost prohibitive for some enterprises

Philip Tully discusses the expensive and time-consuming work of building AI models and how those models can become the target of cyberattacks by malicious actors.

By Michael Heller • April 26, 2018