CISO Strategy: Page

Should cybersecurity be part of your digital transformation strategy?

Digital transformation offers companies some tantalizing possibilities. But new technologies usher in new vulnerabilities. Cybersecurity needs to play a key role.

By Stephen Bigelow • June 11, 2025

AI-powered attacks: What CISOs need to know now

AI-powered attacks are transforming cybersecurity, using AI to automate and personalize threats at an unprecedented scale since 2022.

By Sean Kerner • June 10, 2025

News brief: CISA and partners face budget overhauls, cuts

Check out the latest security news from the Informa TechTarget team.

By Staff report • June 6, 2025

The DOGE effect on cybersecurity: Efficiency vs. risk

The DOGE effect on security is a complex issue. Pursuit of efficiency might be a legitimate goal, but experts caution it can conflict with cybersecurity defenses.

By Staff report • June 2, 2025

Best practices for board-level cybersecurity oversight

Corporate boards must play an increasingly active role in overseeing cybersecurity strategies. Here's what they need to know, from SEC disclosure requirements to best practices.

By Jerald Murphy • May 20, 2025

AI model theft: Risk and mitigation in the digital era

Enterprises are spending big bucks on developing and training proprietary AI models. But cybercriminals are also eyeing this valuable intellectual property.

By Amy DeCarlo • May 19, 2025

News brief: AI security risks highlighted at RSAC 2025

Check out the latest security news from the Informa TechTarget team.

By Staff report • May 9, 2025

RSAC 2025: The time for crypto-agility adoption is now

An RSAC 2025 speaker explained why companies should begin their quantum-safe journey now and how crypto-agility adoption helps prepare for post-quantum cryptography.

By Kyle Johnson • May 1, 2025

RSAC Conference 2025 video reports

We chatted on camera with attendees and presenters at RSAC 2025. Check out this video collection to get highlights from one of the world's major cybersecurity conferences.

By Brenda Horrigan • April 30, 2025

RSAC 2025 to center on agentic AI, GenAI in security

If AI continues to become more accurate and secure, automation and self-healing systems that strengthen security programs could be the future.

By Melinda Marks • April 25, 2025

What is corporate governance?

Corporate governance is the combination of rules, processes and laws by which businesses are operated, regulated and controlled.

By Ben Lutkevich, Stephen Bigelow, Sarah Lewis • April 14, 2025

How to create a data breach response plan, with free template

A data breach response plan outlines how a business reacts to a breach. Follow these six steps, and use our free template to develop your organization's plan.

By Rob Shapland • April 9, 2025

What the $32B Google-Wiz deal says about cloud-native security

Google's acquisition of Wiz for $32 billion highlights the importance of cloud-native security as organizations transition to microservices and containerization.

By Melinda Marks • March 27, 2025

How to calculate the cost of a data breach

An effective risk management policy can help companies determine the best ways to offset the costs associated with a data breach and avoid reputational damage.

By Matthew Smith • March 18, 2025

SEC cybersecurity disclosure rules, with checklist

Public companies must regularly share information about their cybersecurity practices and disclose details of material cyberincidents. Learn how to comply.

By Paul Kirvan • March 7, 2025

Entrust sells certificate business: Implications and actions

Entrust selling its certificate business to Sectigo isn't the only change that enterprises will face when it comes to the future of digital certificates.

By Todd Thiemann • Feb. 13, 2025

What is cyber insurance, and why is it important?

Cyber insurance, also called cyber liability insurance or cybersecurity insurance, is a contract a business or other organization can purchase to reduce the financial risks associated with doing business online.

By Kinza Yasar, Cameron Hashemi-Pour • Feb. 7, 2025

Risk & Repeat: What is the future of CISA?

South Dakota Gov. Kristi Noem, who is President Donald Trump's nominee for DHS secretary, said during a recent confirmation hearing that CISA should be 'smaller.'

By Alexander Culafi • Jan. 21, 2025

Tech industry experts digest cybersecurity executive order

IT pros assess a last-minute cybersecurity executive order with new directives on a broad swath of topics, from cybercriminal sanctions to AI and identity management.

By Beth Pariseau, Arielle Waldman • Jan. 16, 2025

Enterprise cybersecurity hygiene checklist for 2025

Enterprise cybersecurity hygiene must be a shared responsibility between employees and employers. Learn how both can get the job done with this checklist.

By Ashwin Krishnan • Jan. 7, 2025

Amit Yoran, Tenable CEO and cybersecurity advocate, dies at 54

Amit Yoran was a decades-long practitioner of cybersecurity and previously held key roles at the U.S. Department of Homeland Security, RSA Security and NetWitness.

By Alexander Culafi • Jan. 6, 2025

Top 7 enterprise cybersecurity challenges in 2025

Security teams faced unprecedented challenges in 2024. The year ahead appears no less daunting. Here are the cybersecurity trends and safeguards to consider in 2025.

By Sharon Shea • Jan. 2, 2025

10 of the biggest cybersecurity stories of 2024

Some of the biggest stories of the year include a massive IT outage, a record-setting ransom payment and devastating breaches at several U.S. telecommunications companies.

By Alexander Culafi • Dec. 23, 2024

Blackberry sells Cylance to Arctic Wolf for $160M

After exiting the mobile device market, Blackberry acquired Cylance for $1.4 billion in 2018 to expand its presence in enterprise security.

By Arielle Waldman • Dec. 16, 2024

How AI is shaping the future of the cybersecurity workforce

ISACA's 'State of Cybersecurity 2024' report found that, while AI helps automate lower-level tasks, it presents issues when it comes to succession planning and talent development.

By Sushila Nair • Dec. 13, 2024