CISO Strategy: Page

Schneier talks cyber regulations, slams U.S. lawmakers

Speaking at RSA Conference 2018, Bruce Schneier slammed U.S. lawmakers and Facebook in discussions on internet security regulations and technology policy.

By Rob Wright • April 19, 2018

IBM’s new AI toolbox is designed to protect AI systems

IBM has made a new open source AI toolbox that's designed to provide practical defenses for real-world AI systems based on how threat actors can attack AI models.

By Michael Heller • April 18, 2018

How enterprises should handle GDPR compliance in the cloud

GDPR compliance in the cloud can be an intimidating concept for some enterprises, but it doesn't have to be. Rob Shapland explains why it's not so different from on premises.

By Rob Shapland • April 18, 2018

RSAC keynote speakers push teamwork, incremental improvements

The RSAC keynote speakers pushed a unified idea of collaboration across public and private sectors, improved teamwork and the value of incremental improvements in cybersecurity.

By Michael Heller • April 17, 2018

ISACA: Cybersecurity skills gap still hurting enterprises

ISACA's State of Cybersecurity 2018 report offered good news and bad news about the cybersecurity skills gap and also shed light on gender disparity in the infosec profession.

By Rob Wright • April 17, 2018

Cybersecurity AI hype matures at RSAC 2018

Top submissions to the RSA Conference 2018 indicate that the hype cycle around cybersecurity AI may be maturing, while diversity gets a lower ranking on the hot topic list.

By Michael Heller • April 13, 2018

Cybersecurity defense in depth means more than ticking boxes

F-Secure's Tom Van de Wiele explains the realities of cybersecurity defense in depth, and why companies need to have the right attitude to defend against cyberattacks.

By Peter Loshin • April 11, 2018

Healthcare CISO: ‘Hygiene and patching take you a long way’

Cybersecurity and healthcare can get along, according to CISO Joey Johnson, who leads the security program at Premise Health, but it takes patience and attention to the details.

By Alan Earls • April 3, 2018

Do CISOs need computer science degrees?

Equifax's CISO came under fire for having a music degree. David Shearer, CEO of (ISC)2, discusses what type of education infosec professionals should have.

By Rob Wright • March 30, 2018

CSO Stamos leaving Facebook, according to reports

News roundup: Is Alex Stamos leaving Facebook? The CSO hasn't confirmed, but reports say yes. Plus, an Orbitz breach exposed the payment card data of 880,000 people, and more.

By Madelyn Bacon • March 23, 2018

Becoming a cybersecurity professional: What are the options?

A cybersecurity professional has several options for their career path. Expert Ernie Hayden reviews the cybersecurity career track options and what skills are required for each one.

By Ernie Hayden • March 22, 2018

OURSA takes on RSA Conference to highlight diversity

News roundup: Our Security Advocates emerges amid criticism of RSA Conference's lack of female keynote speakers. Plus, a kill switch is discovered for the Memcrashed DDoS exploit, and more.

By Rob Wright and Peter Loshin • March 9, 2018

DHS cybersecurity audit scores below target security levels

A DHS cybersecurity audit for FISMA compliance by the Office of Inspector General rated the agency below target levels in three of five areas of information security.

By Michael Heller • March 9, 2018

SEC cybersecurity disclosure rules get a guidance update

The U.S. Securities and Exchange Commission introduced new SEC cybersecurity disclosure rules to prevent insider trading related to data breaches and other security incidents.

By Peter Loshin • Feb. 22, 2018

Cybersecurity insurance breaks coming for Apple, Cisco customers

Apple and Cisco customers could get lucrative terms for cybersecurity insurance under a new partnership with insurance giant Allianz and global services firm Aon.

By Peter Loshin • Feb. 7, 2018

What are the root causes of the cybersecurity skills shortage?

SearchSecurity talks with David Shearer, CEO of (ISC)2, about what is -- and isn't -- contributing to the cybersecurity skills shortage in the U.S., as well as how to fix the problem.

By Rob Wright • Feb. 6, 2018

Information security certification guide: Specialized certifications

This information security certification guide looks at vendor-neutral certifications in specialized areas such as risk management, security auditing and secure programming.

By Ed Tittel • Feb. 6, 2018

Fred Cohen on strategic security: ‘Start with the assumptions’

Cohen is a globally recognized expert in information protection and cybersecurity. Since coining the term 'computer virus,' he has remained a pioneer in information assurance.

By Marcus Ranum • Feb. 1, 2018

David Neuman: The CISO position and keeping the cloud safe

The Rackspace CISO joined the enlisted ranks in the Air Force, eventually becoming an officer with global responsibilities before moving to the private sector.

By Alan Earls • Feb. 1, 2018

CISOs map out their cybersecurity plan for 2018

What's on the short list for enterprise cybersecurity programs in the coming year? As attack vectors increase -- think IoT -- we ask information security leaders to discuss their plans.

By Mary Pratt • Feb. 1, 2018

Cybersecurity professionals: Lack of training leaves skills behind

Cybersecurity professionals' increased workloads leave little time for training, leaving their skill sets -- and their companies' data security -- vulnerable to outside threats.

By Mekhala Roy • Jan. 31, 2018

FBI encryption argument draws fire from senator

Sen. Ron Wyden challenged the FBI encryption argument and asked the FBI director to be transparent about claims that lawful access could be provided securely.

By Michael Heller • Jan. 26, 2018

The 12 biggest cloud security threats, according to the CSA

The Cloud Security Alliance reported what it found to be the biggest cloud security threats. Expert Rob Shapland looks at how cloud risks compare to on-premises risks.

By Rob Shapland • Jan. 10, 2018

The top six EMM vendors offering MDM capabilities

With vendors expanding their horizons from just MDM to more comprehensive EMM products, it is crucial to look at these EMM vendors who offer MDM capabilities.

By Matthew Pascucci • Jan. 8, 2018

Comparing the leading mobile device management products

Expert Matt Pascucci examines the top mobile device management offerings to help you determine which MDM products are the best fit for your organization.

By Matthew Pascucci • Jan. 8, 2018