Risk Management: Page

How a cloud backdoor poses a threat to the enterprise

Cloud backdoors pose a rising threat to enterprises, according to new research. Expert Ed Moyle explains what a cloud backdoor is and what mitigation options are available.

By Ed Moyle • May 9, 2018

How to do risk management in cybersecurity using ERM

Perfect security is impossible, but using risk management in cybersecurity using a range of strategies can significantly reduce your organization’s risk.

By Johna Johnson • April 6, 2018

Software security training: Perspectives on best practices

Software development training with an emphasis on secure coding can improve enterprise security postures. Steve Lipner of SafeCode discusses different ways to get the job done.

By Steve Lipner • March 13, 2018

Entropy sources: How do NIST rules impact risk assessments?

NIST recently released new guidance on entropy sources used for random bit generation. Judith Myerson explains these recommendations and how they alter cryptography principles.

By Judith Myerson • March 8, 2018

How are tech support scams using phishing emails?

Threat actors are using phishing email campaigns to fool users with tech support scams and fake Blue Screens of Death. Learn how these campaigns work with expert Nick Lewis.

By Nick Lewis • Feb. 21, 2018

What can enterprises do to prevent an IoT botnet attack?

An IoT botnet attack on Huawei home routers showed similarities to the Mirai malware. Expert Judith Myerson explains the threat and how enterprises can protect themselves.

By Judith Myerson • Feb. 14, 2018

What enterprises need to know about ransomware attacks

Ransomware attacks on enterprises are often the result of a company's poor IT hygiene. Expert Joe Granneman looks at attacks like those by WannaCry and SamSam ransomware.

By Joseph Granneman • Feb. 13, 2018

IT sabotage: Identifying and preventing insider threats

Preventing IT sabotage from insider threats can be a challenge. Peter Sullivan explains how enterprises should monitor for characteristics of insider threat behavior.

By Peter Sullivan • Jan. 11, 2018

Vulnerability scans: How effective are they for web apps?

Equifax's Apache Struts vulnerability was an example of a scan not being read correctly. Kevin Beaver explains vulnerability scans and how issues can be missed by security teams.

By Kevin Beaver • Jan. 4, 2018

How shared cloud security assessments can benefit enterprises

Ensuring cloud security is a constant problem that shared cloud security assessments are trying to address. Learn about the benefits of sharing assessments with Nick Lewis.

By Nick Lewis • Oct. 31, 2017

The Basics of Cyber Safety

In this excerpt from chapter four of The Basics of Cyber Safety, authors John Sammons and Michael Cross discuss basic email security.

By Syngress and SearchSecurity • Oct. 31, 2017

Grossman: Cyberinsurance market is like the ‘Wild West’

Jeremiah Grossman, chief of security strategy at SentinelOne, talks with SearchSecurity about the value of cyberinsurance and why the rapidly growing market needs to mature.

By Rob Wright • Oct. 30, 2017

The art of the cyber warranty and guaranteeing protection

Jeremiah Grossman, chief of security strategy at SentinelOne, talks with SearchSecurity about the science of developing a cyber warranty for threat detection products.

By Rob Wright • Oct. 26, 2017

How does a private bug bounty program compare to a public program?

Explore the differences of public versus private bug bounty programs, as well as the benefits of each one. Expert Mathew Pascucci explains the risk and return of both programs.

By Matthew Pascucci • Oct. 5, 2017

Freese: Cyber-risk management is the key to good infosec hygiene

Speaking at the (ISC)2 Security Congress, FBI Deputy Assistant Director Don Freese spoke about need for security pros to replace fear and emotion with proper cyber-risk management.

By Rob Wright • Sept. 25, 2017

Ransomware recovery goes beyond data loss for enterprises

Enterprises may see paying up as a quick path to ransomware recovery, but experts said there are many issues to consider when making that choice.

By Michael Heller • Aug. 4, 2017

Cyber-risk analysis, time are keys to infosec says game theory

Analyzing infosec through the lens of game theory shows that cyber-risk analysis and wasting attacker time may be highly effective cybersecurity strategies.

By Michael Heller • July 28, 2017

Applying cybersecurity readiness to today’s enterprises

How prepared is your organization for a cyberattack? Expert Peter Sullivan outlines the seven steps enterprises need to take in order to achieve cybersecurity readiness.

By Peter Sullivan • July 20, 2017

CISSP Domain 1 quiz: Security and risk management

Test your knowledge of the CISSP exam’s Domain 1: Security and Risk Management -- one of the heaviest-weighted portions of the test -- with this practice quiz.

By (ISC) 2 • July 20, 2017

How can customer service staff spot social engineering email attacks?

Social engineering emails targeted at customer service staff have led to the spread of the August malware. Expert Nick Lewis explains how to identify and mitigate these attacks.

By Nick Lewis • May 26, 2017

Trump cyber executive order focuses on cyber-risk management

The Trump cyber executive order arrived, with a focus on cyber-risk management and reports. But key details are missing in terms of implementing changes.

By Michael Heller • May 12, 2017

What should be included in a social media security policy?

A social media security policy is necessary for most enterprises today. Expert Mike O. Villegas discusses what should be included in social media policies.

By Mike Villegas • April 7, 2017

SecureWorks threat intelligence and what it can do for your enterprise

Expert Ed Tittel examines the features and capabilities of SecureWorks, which gathers its intelligence from thousands of SecureWorks global customers.

By Ed Tittel • April 5, 2017

User behavior analytics: Building a business case for enterprises

User behavior analytics can be beneficial to enterprises, but there are complexities involved. Expert Ajay Kumar explains what companies should know about this new technology.

By Ajay Kumar • April 3, 2017

What should enterprises know about how a stored XSS exploit works?

A stored XSS exploit can be damaging to enterprises that aren't fully protected. Expert Matthew Pascucci explains what stored XSS attacks are and how to defend against them.

By Matthew Pascucci • March 2, 2017