Risk Management: Page

Explore 5 business email compromise examples to learn from

Gift cards are for gifts, never for payment. Explore real-world examples of business email compromise to learn common attack patterns and red flags.

By Katie Donegan • March 9, 2021

Rebuild security and compliance foundations with automation

Instead of patchwork security fixes, financial organizations need to embrace automation, create and deploy secure software and address implementation problems.

By Ehsan Foroughi • March 4, 2021

3 post-SolarWinds supply chain security best practices

Following the devastating SolarWinds breach, IT leaders should renew their focus on third-party risk management. Start by implementing supply chain security best practices.

By Jessica Groopman • Feb. 25, 2021

How to manage third-party risk in the supply chain

From third-party risk assessments to multifactor authentication, follow these steps to ensure suppliers don't end up being your enterprise cybersecurity strategy's weakest link.

By Michael Cobb • Feb. 25, 2021

How to prevent supply chain attacks: Tips for suppliers

Every company, large and small, must assume it is a target in the supply chain. Suppliers should follow these best practices to keep themselves and their customers protected.

By Michael Cobb • Feb. 24, 2021

Why developers should consider automated threat modeling

Traditional threat modeling is hard. Can automated threat modeling make development and security teams' lives easier?

By O'Reilly Media, Kyle Johnson • Feb. 22, 2021

How to address and prevent security alert fatigue

An influx of false positive security alerts can lead infosec pros to overlook real threats. Learn how to avoid security alert fatigue and avoid its potential consequences.

By Michael Cobb • Feb. 10, 2021

Design a human firewall training program in 5 steps

Follow these five steps to develop human firewall training that's not only effective at preventing social engineering attacks, but also relevant and accessible to employees.

By Jessica Groopman • Feb. 3, 2021

Deloitte cyber practice aims for growth with Root9B deal

The acquisition extends the consultancy's cybersecurity business into threat hunting and credential risk management and analytics. Additional transactions may be in the offing.

By John Moore • Jan. 29, 2021

The case for applying psychology in cybersecurity training

Chartered psychologist Rebecca McKeown describes how psychology in cybersecurity can improve incident response and makes the case for a research-based approach to training.

By Katie Donegan • Jan. 29, 2021

Insider threat vs. insider risk: What’s the difference?

Identifying, managing and mitigating insider threats is far different than protecting against insider risks. Read up on the difference and types of internal risks here.

By Sharon Shea; Skyhorse Publishing • Dec. 30, 2020

Insider risk indicators thwart potential threats

By paying attention to risk indicators, enterprises can tell the difference between insider threat and insider risk to prevent falling victim at the hands of one of their own.

By Sharon Shea • Dec. 30, 2020

Enterprise cybersecurity threats spiked in 2020, more to come in 2021

After an unprecedented year from an enterprise cybersecurity threat standpoint, security leaders are preparing for growing number and sophistication of attacks in 2021.

By Mary Pratt • Dec. 22, 2020

Microsoft, FireEye create kill switch for SolarWinds backdoor

The kill switch follows several other moves Microsoft made against the malware, including the removal of digital certificates and quarantining the malware in Windows Defender.

By Alexander Culafi • Dec. 17, 2020

Practice Certified Ethical Hacker exam questions

Preparing for your Certified Ethical Hacker certification? Assess your knowledge of topics on the CEH exam with these practice test questions.

By McGraw Hill Education, Sharon Shea • Dec. 8, 2020

Pair cyber insurance, risk mitigation to manage cyber-risk

The role of cyber insurance may come after a breach, but it remains a useful element in an organization's vulnerability management strategy.

By Paul Kirvan • Nov. 20, 2020

Cybersecurity communication key to addressing risk

As security teams strengthen communication with the overall organization as well as with vendors, more positive cybersecurity cultures can be forged.

By Michael Heller • Nov. 4, 2020

5 steps to get IoT cybersecurity and third parties in sync

Third parties often prove to be the weak links when it comes to IoT cybersecurity. Learn what you can do to minimize the risk while reaping the benefits that outside vendors bring.

By Jaikumar Vijayan • Nov. 2, 2020

Mitre ATT&CK: How it has evolved and grown

Adoption of the Mitre ATT&CK framework, which saw version 8.0 released Tuesday, has grown rapidly over the last years, though challenges still remain for enterprise users.

By Arielle Waldman • Oct. 27, 2020

Cybersecurity testing essentials for mergers and acquisitions

Before moving forward with an M&A, conduct some cybersecurity testing to ensure your company knows how the acquired company protects data, employees and customers.

By Mark Whitehead • Sept. 28, 2020

Shopify discloses data breach caused by insider threats

Canadian e-commerce company Shopify disclosed a data breach involving two insider threats, but questions remain about the breach and how it was discovered.

By Alexander Culafi • Sept. 24, 2020

Gartner: Securing remote workforce a top priority

In a COVID-19 pandemic world with new security threats and risks emerging, Gartner analysts discussed the urgency of securing access and devices for remote employees.

By Arielle Waldman • Sept. 16, 2020

CISA issues vulnerability disclosure order for federal agencies

The U.S. Cybersecurity and Infrastructure Security Agency gives a directive for federal agencies to establish vulnerability disclosure policies in the next 180 calendar days.

By Alexander Culafi • Sept. 3, 2020

Inclusivity a crucial step beyond diversity in cybersecurity

Spurred on by the social justice movement around the world, cybersecurity experts want to see a move beyond diversity efforts to ensure inclusivity in organizations as well.

By Michael Heller • Aug. 31, 2020

Email enigma: Why is Canada hit with so many phishing attacks?

Canada has become an increasingly popular target for phishing attacks, according to several security vendors, but the reasons for the increase remain a mystery.

By Arielle Waldman • Aug. 17, 2020