CISO Strategy: Page

What an email security policy is and how to build one

Companies must have an effective security policy in place to protect email from cybercriminals and employee misuse. Learn how to build one for your company.

By Andrew Froehlich • Oct. 30, 2023

JPMorgan Chase CISO explains why he’s an ‘AI optimist’

Pat Opet, CISO at JPMorgan Chase & Co., discussed how the financial services giant invests in cybersecurity and where generative AI could provide game-changing benefits.

By Rob Wright • Oct. 24, 2023

SSAE 16

The Statement on Standards for Attestation Engagements No. 16 (SSAE 16) is a set of auditing standards and guidance on using the standards, published by the Auditing Standards Board (ASB) of the American Institute of Certified Public Accountants (AICPA), for redefining and updating how service companies report on compliance controls.

By Alex DelVecchio, Casey Clark, Cameron Hashemi-Pour • Oct. 24, 2023

Cybersecurity vs. cyber resilience: What’s the difference?

Companies need cybersecurity and cyber-resilience strategies to protect against attacks and mitigate damage in the aftermath of a successful data breach.

By Paul Kirvan • Oct. 18, 2023

security awareness training

Security awareness training is a strategic approach IT and security professionals take to educate employees and stakeholders on the importance of cybersecurity and data privacy.

By Kinza Yasar , Mary Pratt • Oct. 12, 2023

Takeaways from Oktane23: Okta AI, universal logout and more

New game-changing security features from Okta speed threat detection and response times, enabling IT pros to log all users out of applications during a cyber attack.

By Jack Poller • Oct. 11, 2023

How to land a corporate board seat as a CISO

Any CISO who aspires to a corporate board seat needs a strategic approach. Learn how security executives can position themselves to become top-level decision-makers.

By Jerald Murphy • Sept. 29, 2023

CrowdStrike makes a breakout move

CrowdStrike's annual user conference emphasized the company's future vision for AI, automation and an integrated security IT approach.

By Dave Gruber • Sept. 26, 2023

Google and Mandiant flex cybersecurity muscle at mWISE

End-to-end cybersecurity coverage and generative AI could accentuate Google and Mandiant's combined cybersecurity opportunities -- with the right execution.

By Jon Oltsik • Sept. 22, 2023

What to consider when creating a SaaS security strategy

Securing SaaS applications is more important and confusing than ever. Consider visibility, UX and workflow when creating a SaaS security strategy and adopting tools.

By John Grady • Sept. 18, 2023

Google Cloud Next focuses on generative AI for security

Google discussed its vision for applying generative AI to cybersecurity at its Google Cloud Next conference in August, with announcements about new features and capabilities.

By Melinda Marks • Sept. 14, 2023

CrowdStrike CTO: ‘Rookie mistakes’ are hurting cloud security

CrowdStrike's Elia Zaitsev discusses the rise in credential-based attacks, as well as the common errors organizations make in the cloud that often lead to breaches.

By Rob Wright • Aug. 30, 2023

SEC cyber attack regulations prompt 10 questions for CISOs

New SEC regulations governing the disclosure of cyber attacks by public companies lead to 10 questions board members should ask their CISOs about managing cyber-risk.

By Frank Kim • Aug. 30, 2023

CISA shares ‘secure by design’ plan for US tech ecosystem

The cyber agency plans to establish secure-by-design principles through internal and external communications, data collection and education for the next generation.

By Alexander Culafi • Aug. 10, 2023

U.S., Ukraine cyber leaders talk resilience, collaboration

At Black Hat 2023, CISA's Jen Easterly and Ukraine's Victor Zhora discuss cyber resilience and security hardening in the face of destructive cyber campaigns.

By Alexander Culafi • Aug. 10, 2023

Coalition looks to bridge gap between CISOs, cyber insurance

While carriers and CISOs agree cyber insurance has contributed to better security postures, Coalition said the relationship needs to stronger as threat evolve and intensify.

By Arielle Waldman • Aug. 9, 2023

Thoma Bravo sells Imperva to Thales Group for $3.6B

With the acquisition, Thales looks to expand its Digital Security and Identity business with an increased focus on protecting web applications and API.

By Arielle Waldman • July 25, 2023

Enterprise communication security a growing risk, priority

Enterprise Strategy Group's Dave Gruber discusses survey results on security threats related to the use of email and other communication and collaboration tools.

By Craig Stedman • July 20, 2023

Rein in cybersecurity tool sprawl with a portfolio approach

Market consolidation can counterintuitively exacerbate cybersecurity tool sprawl, with many products offering overlapping features. A portfolio approach brings clarity to chaos.

By Jerald Murphy • July 14, 2023

TPG Capital acquires Forcepoint’s government unit for $2.45B

Forcepoint's Global Governments and Critical Infrastructure unit will operate independently under TPG, while the commercial business will remain at Francisco Partners.

By Arielle Waldman • July 10, 2023

PCI compliance

PCI compliance is adherence to the set of policies and procedures developed to protect credit, debit and cash card transactions and prevent the misuse of cardholders' personal information.

By Nick Barney, Ben Cole • June 19, 2023

What generative AI’s rise means for the cybersecurity industry

ChatGPT's moment in cybersecurity is significant for both technological and marketing reasons. Security analysts and experts have their own reasons why.

By Alexander Culafi • June 7, 2023

Smart contract benefits and best practices for security

While smart contracts promise enormous benefits in the enterprise, they also present opportunities for cybercriminals. Explore best practices to keep them secure.

By Alissa Irei , Karen Kent • May 25, 2023

Follow a 6-phase roadmap to secure cyber-physical systems

Cyber-physical systems help bridge the digital world with the physical world, but they introduce cybersecurity risks that must be addressed.

By Katell Thielemann • May 22, 2023

Closing the book on RSA Conference 2023

AI, cloud security, SOC modernization and security hygiene and posture management were all hot topics at RSAC in San Francisco this year.

By Jon Oltsik • May 16, 2023