CISO Strategy: Page

SSPM vs. CSPM: What’s the difference?

Posture management in the cloud is key, but evaluating different tools, such as SaaS security posture management and cloud security posture management platforms, can be confusing.

By Dave Shackleford • May 6, 2024

IBM study shows security for GenAI projects is an afterthought

IBM's survey of C-suite executives finds that 82% say trustworthy and secure AI are essential, but only 24% have a security component included in their GenAI projects.

By Alexander Culafi • May 6, 2024

Security updates from Google Cloud Next ‘24 center on GenAI

Google has infused Gemini into its security tools and while GenAI isn’t going to solve every security problem right away, its assistive capabilities save much needed time.

By Melinda Marks • April 30, 2024

RSAC 2024: Real-world cybersecurity uses for GenAI

Security pros can expect a lot of buzz around GenAI at RSA 2024, where vendors and experts will share how the latest generative AI tools can enhance cybersecurity.

By Jon Oltsik • April 29, 2024

4 steps CISOs can take to raise trust in their business

When CISOs align their investments with CIOs' tech investments, both can fuel business success and enable greater trust with customers, employees and partners.

By Sandy Carielli • April 19, 2024

5 trends in the cyber insurance evolution

As cyber insurance companies evolve, they will wield more power throughout the industry. Check out five areas where cyber insurance trends are changing the cybersecurity market.

By Jon Oltsik • April 10, 2024

Risk & Repeat: Cyber Safety Review Board takes Microsoft to task

This podcast episode discusses the Cyber Safety Review Board's report on Microsoft and its conclusion that the software giant must overhaul its security culture.

By Alexander Culafi • April 5, 2024

Infosec professionals praise CSRB report on Microsoft breach

Security professionals and executives weigh in on how the Cyber Safety Review Board handled its investigation into Microsoft and what it could mean for the tech giant.

By Alexander Culafi • April 4, 2024

Private vs. public cloud security: Benefits and drawbacks

Uncover the differences between private vs. public cloud security -- as well as hybrid cloud security and multi-cloud security -- before deciding on an enterprise deployment model

By Andrew Froehlich , Sharon Shea • March 27, 2024

JetBrains, Rapid7 clash over vulnerability disclosure policies

In a blog post this week, JetBrains argued that attacks on TeamCity customers were the result of Rapid7 publishing the full technical details of two critical vulnerabilities.

By Arielle Waldman • March 14, 2024

Cybersecurity market researchers forecast significant growth

The cybersecurity market is growing and changing at a rapid pace, leading to major opportunities for vendors, heightened confusion for buyers and new challenges for CISOs.

By Alissa Irei • March 6, 2024

AWS on why CISOs should track ‘the metric of no’

AWS' Clarke Rodgers believes that tracking the number of times CISOs say no to line-of-business requests will ultimately help them build a stronger security culture.

By Rob Wright • Feb. 29, 2024

Multi-cloud security challenges and best practices

Where multi-cloud goes, security complexity follows. From configuration to visibility, organizations must be aware of these main challenges and how to overcome them.

By Dave Shackleford • Feb. 28, 2024

Threat intelligence programs need updating -- and CISOs know it

Most enterprise threat intelligence programs are in dire need of updating. Security executives need to formalize programs, automate processes and seek help from managed services.

By Jon Oltsik • Feb. 27, 2024

Benefits and challenges of managed cloud security services

The rapid drive to hybrid and multi-cloud environments has organizations scrambling to get proper protections into place. For many, external security support is critical.

By Amy DeCarlo • Feb. 12, 2024

Linux group announces Post-Quantum Cryptography Alliance

The Post-Quantum Cryptography Alliance aims to 'drive the advancement and adoption of post-quantum cryptography' and respond to security threats introduced by the emerging tech.

By Alexander Culafi • Feb. 6, 2024

Shadow AI poses new generation of threats to enterprise IT

AI is all the rage -- and so is shadow AI. Learn how unsanctioned use of generative AI tools can open organizations up to significant risks and what to do about it.

By John Burke , Alissa Irei • Feb. 5, 2024

CISOs on alert following SEC charges against SolarWinds

The Securities and Exchange Commission announced charges against SolarWinds and its CISO in October, but will it help improve transparency or simply scare infosec executives?

By Arielle Waldman • Jan. 17, 2024

How CISOs can manage multiprovider cybersecurity portfolios

In today's cybersecurity market, the as-a-service model reigns. That means, as they increasingly rely on outsourcing, CISOs must learn to juggle multiple third-party providers.

By Jerald Murphy • Dec. 15, 2023

Key cybersecurity takeaways from AWS re:Invent

Security was strongly emphasized throughout the AWS re:Invent user conference, with product updates to help companies secure data as they build apps and scale in the cloud.

By Melinda Marks • Dec. 8, 2023

Cybersecurity budgets lose momentum in uncertain economy

Organizations' increasing prioritization of cybersecurity has protected most programs from major budget cuts. Even so, many CISOs are feeling the pinch.

By Alissa Irei • Nov. 21, 2023

Security highlights from KubeCon + CloudNativeCon 2023

KubeCon + CloudNativeCon provided valuable insights for security teams supporting cloud-native development, including securing GenAI, platform engineering and supply chains.

By Melinda Marks • Nov. 17, 2023

8 ways to cope with cybersecurity budget cuts

In times of economic uncertainty, cybersecurity budget cuts can make the security team's job even more challenging. Here are eight ways to minimize risk with minimal resources.

By Jerald Murphy • Nov. 16, 2023

Research points to 5 ways to improve cybersecurity culture

Respondents to a new Enterprise Strategy Group/ISSA survey offered five key points on how to strengthen an organization's cybersecurity culture.

By Jon Oltsik • Nov. 8, 2023

Microsoft launches Secure Future Initiative to bolster security

In the wake of several significant attacks, Microsoft announced new initiatives to address software development and vulnerability mitigation, among other security risks.

By Arielle Waldman • Nov. 2, 2023