CISO Strategy: Page

Six questions to ask before buying enterprise MDM products

Mobile device management can be a crucial part of enterprise security. Expert Matt Pascucci presents the key questions to ask when investigating MDM products.

By Matthew Pascucci • Jan. 5, 2018

Understand the basics of mobile device management products

Implementing MDM products has traditionally been the go-to answer for securing mobile devices, but with the role of mobile devices in the enterprise growing, admins need a more comprehensive security option.

By Matthew Pascucci • Jan. 4, 2018

Three enterprise scenarios for MDM products

Expert Matt Pascucci outlines three enterprise uses cases for mobile device management products to see how they can protect users, devices and corporate data.

By Matthew Pascucci • Jan. 4, 2018

Breach awareness low among executives, CA Veracode survey says

According to a new survey from CA Veracode, breach awareness regarding recent major cyber incidents was low among executives, managers and directors, surprising some experts.

By Michael Heller • Dec. 13, 2017

Proposed data breach legislation could put executives in jail

Democratic senators have proposed data breach legislation that could lead to jail time for some executives who conceal breaches and fail to disclose them to consumers.

By Rob Wright • Dec. 1, 2017

John Germain lands the new CISO position at Duck Creek

Serving the technology needs of the property and casualty insurance industry means keeping a weathered eye on risk profiles, enterprise software and emerging threats.

By Alan Earls • Dec. 1, 2017

DHS cyberinsurance research could improve security

A longitudinal cyberinsurance study performed by the Department of Homeland Security could improve enterprise security but the effects depend on the data collected, said experts.

By Michael Heller • Oct. 3, 2017

Machine learning in cybersecurity: How to evaluate offerings

Vendors are pitching machine learning for cybersecurity applications to replace traditional signature-based threat detection. But how can enterprises evaluate this new tech?

By Ellen Muraskin • Sept. 26, 2017

How to balance organizational productivity and enterprise security

It's no secret that enterprise security and organizational productivity can often conflict. Peter Sullivan looks at the root causes and how to address the friction.

By Peter Sullivan • Sept. 19, 2017

Top cybersecurity conferences for when Black Hat and RSA aren’t right

The big cybersecurity conferences can make attendees weary, but there are many alternatives to the big name shows that may be easier to get to and easier to handle.

By Peter Loshin • Aug. 29, 2017

Cybersecurity machine learning moves ahead with vendor push

Bloggers explore the growing role of cybersecurity machine learning, the capabilities of Microsoft's containers and how well SIEM works for threat detection.

By Eamon Earls • Aug. 11, 2017

Interfacing with an information technology entrepreneur

E. Kelly Fitzsimmons started with coconuts and then sold four companies. A serial entrepreneur discusses security and technology startups and why embracing failure works.

By Marcus Ranum • Aug. 1, 2017

Details of Trend Micro Worry-Free Business Security Services

Expert Ed Tittel takes a closer look at Trend Micro Worry-Free Business Security Services, an antivirus and antimalware product for small organizations.

By Ed Tittel • Aug. 1, 2017

At Black Hat 2017, an industry hits a milestone and finds new directions

Long a conference that has thrived on technical sophistication and nuanced attacks, Black Hat USA 2017 in Las Vegas also found room for softer themes.

By Robert Richardson • July 26, 2017

IT diversity and the cyberskills gap Q&A with Jules Okafor

Jules Okafor discusses the skills gap in the cybersecurity industry, how better IT diversity could help, and what is needed to bring in more women and minorities.

By Michael Heller • July 12, 2017

Cybersecurity skills gap fixes must support minorities

A new survey shows a majority of organizations are facing a cybersecurity skills gap and experts say more focus on women and minorities could be key to finding talent.

By Michael Heller • July 7, 2017

(ISC)2 CEO on cybersecurity workforce expansion and 2017 Congress

Recently, SearchSecurity editorial director Robert Richardson checked in with (ISC)2's CEO David Shearer as the organization prepares for its fall Security Congress.

By Robert Richardson • June 13, 2017

Guide to vendor-specific IT security certifications

The abundance of vendor-specific information technology security certifications can overwhelm any infosec professional. Expert Ed Tittel helps navigate the crowded field.

By Ed Tittel • June 9, 2017

Wendy Nather: ‘We’re on a trajectory for profound change’

This former CISO talks about her uncharted path from international banking to industry analysis. What's next for infosec? We ask the security strategist those questions and more.

By Marcus Ranum • June 1, 2017

Acquiring cybersecurity insurance: Why collaboration is key

Cybersecurity insurance is becoming more important to enterprises as threats increase. Sean Martin explains why enterprise departments need to work together to acquire it.

By Sean Martin • June 1, 2017

Applying the new FDA medical device guidance to infosec programs

New FDA medical device guidance demonstrates the need for better cybersecurity during manufacturing and use. Expert Nick Lewis explains how enterprises can use the recommendations.

By Nick Lewis • May 11, 2017

Same-origin policy: How did Adobe Flash Player’s implementation fail?

The same-origin security feature in Adobe Flash Player was implemented incorrectly, allowing local attackers to spy on users. Expert Michael Cobb explains how this flaw occurred.

By Michael Cobb • May 3, 2017

CISO job requires proven track record in business and security

In the security field, certifications and degrees are never a substitute for on-the-job experience. For women in security, the challenges may be even greater.

By Kathleen Richards • May 1, 2017

Verizon DBIR 2017: Basic cybersecurity focus misplaced

Basic cybersecurity measures like limiting password reuse and implementing multifactor authentication could be big benefits, according to the Verizon DBIR 2017.

By Michael Heller • April 28, 2017

Still waiting for a cybersecurity executive order from Trump

News roundup: A cybersecurity executive order overdue, but 'close and nearby.' Plus, the USPTO says it will stop using HTTPS; a teenage hacker sentenced to prison; and more.

By Madelyn Bacon • April 28, 2017