Risk Management: Page

Games, not shame: Why security awareness training needs a makeover

Elevate Security co-founder Masha Sedova spoke at Black Hat USA 2020 about why traditional security awareness training is ineffective and fails to change risky behavior.

By Arielle Waldman • Aug. 10, 2020

10 tips for cybersecurity awareness programs in uncertain times

Explore the winning tactics and tools CISOs and other cybersecurity leaders are employing in their programs to raise employee security awareness -- and consider how they might work for you.

By Mary Pratt • Aug. 3, 2020

Importance of cybersecurity awareness never greater

Security awareness is more essential than ever, but in a world of increasingly sophisticated threats, making it a reality requires more than set-it-and-forget-it training.

By Ben Cole • Aug. 3, 2020

Security pros explain how to prevent cyber attacks

Even during pandemics, hackers use malware such as ransomware and phishing to exploit an organization's vulnerabilities. IT security pros discuss how they prevent cyber attacks.

By Sandra Gittlen • Aug. 3, 2020

5 steps to help prevent supply chain cybersecurity threats

Follow five steps to lower the risk of supply chain cybersecurity threats, from creating third-party risk management teams to using blockchain and hyperledger and more.

By Johna Johnson • July 8, 2020

Repeat ransomware attacks: Why organizations fall victim

Some organizations get hit with ransomware multiple times. Threat researchers explain why repeat attacks happen and how victims can prevent it from occurring again.

By Alexander Culafi • June 16, 2020

Remote work cybersecurity a concern during pandemic

Recent surveys by NordVPN and Kaspersky found that more than 60% of employees use personal devices as they work from home due to the coronavirus -- which creates cybersecurity issues.

By Taylor Driscoll • June 4, 2020

5 steps to determine residual risk during the assessment process

Even the best security controls have data management gaps that create risk. Here are steps to identify and offset residual risk during an assessment.

By Judith Myerson • May 28, 2020

Prevent spyware through user awareness and technical controls

Find out how to protect devices from spyware and educate users to avoid the most common traps from which spyware infections might come, including phishing attacks and rogue apps.

By Michael Heller, Kevin Beaver • May 7, 2020

Utilize SMB security tools to work from home safely

With the global pandemic forcing enterprise workers home, SMB security tools can provide necessary protection for newly built home offices in order to keep business moving.

By Kevin Tolly • April 28, 2020

How to prepare for ransomware and phishing attacks

Follow these best practices to properly prepare for ransomware and phishing attacks, as well as further steps to stay secure in the face of a pandemic or widespread health event.

By Paul Kirvan • April 22, 2020

Answering the top IoT risk management questions

Vulnerable IoT devices are commonly installed on enterprise networks, putting IT on the lookout for security issues. Here are answers to the biggest IoT risk management questions.

By Andrew Froehlich • March 25, 2020

Risk management vs. risk assessment vs. risk analysis

Understanding risk is the first step to making informed budget and security decisions. Explore the differences between risk management vs. risk assessment vs. risk analysis.

By Katie Donegan • March 10, 2020

Use this CCPA compliance checklist to get up to speed

California leads the pack in terms of state regulations on data privacy and transparency. Now, it's time for businesses to be proactive with this CCPA compliance checklist.

By Mike Chapple • March 5, 2020

6 cybersecurity strategies to solidify personal data protection

As consumers add more connected devices to personal networks, cybersecurity risk is hitting close to home. Here are steps individuals can take to ensure personal data protection.

By Daniel Allen • Feb. 28, 2020

Cyberinsurance coverage reflects a changing threat landscape

A constant deluge of data breach disclosures has prompted an increase in cybersecurity insurance coverage adoption. Learn how a policy can enhance an enterprise risk management program.

By Katie Donegan • Feb. 28, 2020

How to handle nation-state cyberattacks on the enterprise

It's only a matter of time before nation-state cyberattacks that threaten government entities today target the enterprise. Follow our expert's tips to prepare in time.

By Johna Johnson • Feb. 12, 2020

Beat common types of cyberfraud with security awareness

Hackers are taking deception to a new level, but security awareness programs are instrumental in helping employees detect various types of cyberfraud.

By Sharon Shea • Feb. 10, 2020

Data breach costs hit hard; where are you most vulnerable?

Breaking down the cost of a data breach isn't for the faint of heart. But with millions of dollars on the line for a single event, companies also need to have their eyes wide open.

By Jessica Scarpati • Feb. 3, 2020

NIST CSF provides guidelines for risk-based cybersecurity

Organizations benefit from identifying their unique risks when developing cybersecurity processes. Here's how the NIST Cybersecurity Framework can help guide risk-based IT protection.

By Peter Sullivan • Dec. 31, 2019

Shared responsibility model transparency boosts cloud security

The shared responsibility model delineates where company and CSP security responsibilities start and end. This is critical not only for compliance, but also the big security picture.

By Lee Penn • Dec. 23, 2019

The ins and outs of cyber insurance coverage

Cyber insurance coverage can help companies successfully navigate the aftereffects of a data breach. However, choosing a policy in the first place can be confusing.

By Pearson Education, Sharon Shea • Dec. 16, 2019

What are best practices for a modern threat management strategy?

Infosec pros need to mitigate traditional cyberthreats, as well anticipate sophisticated, emerging threats. Learn how to build a threat management strategy that helps with both.

By Andrew Froehlich • Dec. 5, 2019

As cybersecurity insurance coverage becomes common, buyer beware

Cybersecurity insurance coverage can certainly have its benefits after a breach, but companies must consider a variety of unique business factors before choosing a policy.

By Daniel Allen • Nov. 25, 2019

Build new and old strategies into insider threat management

The risk of insider threat does not discriminate across industry lines. Learn how to build an insider threat management program that combines AI, zero-trust principles and a healthy security culture.

By Katie Donegan • Nov. 13, 2019