Risk Management: Page

How to prepare for malicious insider threats

Stopping malicious insider threats is just as important as preventing external ones. Uncover what to look for and strategies to prevent insider threats before they cause damage.

By Packt Publishing, Kyle Johnson • Jan. 31, 2022

4 software supply chain security best practices

The increasing complexity of software supply chains makes it difficult for companies to understand all its components. Learn how to find vulnerabilities before attackers.

By Ed Moyle • Jan. 18, 2022

white hat hacker

A white hat hacker -- or ethical hacker -- is an individual who uses hacking skills to identify security vulnerabilities in hardware, software or networks.

By Madelyn Bacon, Andrew Froehlich • Dec. 29, 2021

How to get started with attack surface reduction

Attack surface reduction and management are vital to any security team's toolbox. Learn what ASR is and how it complements existing vulnerability management products.

By Diana Kelley • Dec. 6, 2021

How SBOMs for cybersecurity reduce software vulnerabilities

With SBOMs, companies will know what components constitute the software they purchase, making it easier for security teams to understand and manage vulnerabilities and risks.

By Ed Moyle • Nov. 29, 2021

scareware

Scareware is a type of malware tactic used to manipulate victims into downloading or buying potentially malware-infested software.

By Alexander Gillis • Nov. 22, 2021

How enterprises need to prepare for ‘cyberwar’ conflicts

Infosec expert Tarah Wheeler said increasing international conflicts are posing new compliance and regulatory standards, but adapting the changes may be difficult for enterprises.

By Arielle Waldman • Nov. 19, 2021

Reduce the risk of cyber attacks with frameworks, assessments

Don't rely on a compliance mandate to reduce the risk of cyber attacks or on a cyber insurer to cover an attack's aftermath. Assessments and frameworks are key to staying safe.

By Kayne McGladrey • Nov. 15, 2021

7 best practices to ensure GDPR compliance

Complying with the EU's GDPR data privacy mandates remains challenging. These best practices -- such as hiring a data protection officer and classifying data -- can help.

By Michael Cobb • Nov. 4, 2021

vulnerability disclosure

Vulnerability disclosure is the practice of reporting security flaws in computer software or hardware.

By Katie Terrell Hanna, Linda Rosencrance • Nov. 4, 2021

FinCEN: 2021 ransomware activity outpaces 2020 in 6 months

The U.S. Treasury's financial crimes bureau has seen a rise in anonymity-enhanced cryptocurrencies like Monero, though Bitcoin remains the most used.

By Alexander Culafi • Oct. 18, 2021

What is a Certified Information Systems Auditor (CISA)?

Certified Information Systems Auditor (CISA) is a certification and globally recognized standard for appraising an IT auditor's knowledge, expertise and skill in assessing vulnerabilities and instituting IT controls in an enterprise environment.

By Taina Teravainen • Oct. 5, 2021

6 reasons unpatched software persists in the enterprise

Patching is like flossing -- everyone knows they should do it, yet too few do it often and well. Explore why unpatched software is still ubiquitous, despite the risks.

By Alissa Irei • Sept. 30, 2021

Secure Electronic Transaction (SET)

Secure Electronic Transaction (SET) is a system and electronic protocol to ensure the integrity and security of transactions conducted over the internet.

By Rahul Awati • Sept. 30, 2021

How to use the NIST framework for cloud security

Aligning the NIST Cybersecurity Framework with cloud services such as AWS, Azure and Google Cloud can improve cloud security. Read how to best use the framework for the cloud.

By Ed Moyle • Aug. 5, 2021

Balancing the benefits with the risks of emerging technology

Emerging technologies enable companies to maintain a competitive edge through their various benefits but can come with high risks. A balancing act is required.

By Jacob Young • July 19, 2021

4 healthcare risk management tips for secure cloud migration

From improving the security posture and updating threat modeling to securing cloud data, learn about four risk management tips for healthcare organizations migrating to cloud.

By Nabil Hannan • July 16, 2021

Microsoft to acquire RiskIQ to combat growing cyberthreats

Microsoft has agreed to purchase threat intelligence vendor RiskIQ to bolster its cloud security offerings and help customers address global cyberthreats.

By Arielle Waldman • July 12, 2021

Hybrid workforce model needs long-term security roadmap

From SASE to ZTNA to EDR to VPNs, enterprises need to deploy the technologies to develop a secure hybrid workforce model now that can work into the future.

By Andrew Froehlich • June 25, 2021

McAfee CTO: Use data to make better cyber-risk decisions

According to McAfee CTO Steve Grobman, the best response to today's cyber-risks includes both human and technology-based solutions, like threat intelligence and good security hygiene.

By Alexander Culafi • May 18, 2021

Neuberger calls for shift in software supply chain security

In an RSA Conference keynote, Anne Neuberger, deputy national security advisor for cyber and emerging technology, said security requires a major "mindset shift."

By Arielle Waldman • May 18, 2021

Cyber insurance firm AXA halts coverage for ransom payments

As ransomware attacks increase across the globe and ransom payment reimbursement becomes a key issue for cyber insurers, AXA may be setting a new trend for private industries.

By Arielle Waldman • May 12, 2021

Exploring GRC automation benefits and challenges

Governance, risk and compliance is a crucial enterprise task but can be costly and time-consuming. This is where GRC automation fits in. Learn about its benefits and challenges.

By Paul Kirvan • April 9, 2021

Ransomware negotiations: An inside look at the process

Ransomware negotiators are brought in to communicate with cybercriminals and hopefully arrange less expensive payments. How often do they succeed?

By Rob Wright • March 29, 2021

Strengthening supply chain security risk management

In the wake of several supply chain attacks, Pam Nigro discusses how companies can work to reduce risk by broadening how to manage third-party vendors' access to company data.

By Pam Nigro • March 11, 2021