Risk Management: Page

Tripwire IP360: Vulnerability management product overview

Expert Ed Tittel examines vulnerability management products from Tripwire, including the rack-mounted IP360 appliance and the cloud- based PureCloud Enterprise service.

By Ed Tittel • Nov. 9, 2016

Information security risk management: Understanding the components

An enterprise has to know what risks it is facing. Expert Peter Sullivan explains why an information security risk management plan is crucial for cybersecurity readiness.

By Peter Sullivan • Nov. 4, 2016

Rapid7 Nexpose: Vulnerability management product overview

Ed Tittel examines Rapid7 Nexpose, a vulnerability management product for physical, virtual, cloud and mobile environments that discovers assets and scans for vulnerabilities.

By Ed Tittel • Oct. 26, 2016

Qualys Vulnerability Management: Product overview

Expert Ed Tittel examines Qualys Vulnerability Management, a product for organizations of all sizes that is designed to help admins identify, monitor and mitigate vulnerabilities.

By Ed Tittel • Oct. 26, 2016

How would a cyberattack information database affect companies?

A proposed cyberattack information database in the U.K. aims to improve cyberinsurance. Expert Mike Chapple explains what collecting data breach information means for U.S. companies.

By Mike Chapple • Oct. 5, 2016

Are new cybersecurity products the best investment for enterprises?

Having the latest cybersecurity products isn't always the best way to approach security. Expert Mike O. Villegas explains why and how to deal with pressure to buy new.

By Mike Villegas • Sept. 19, 2016

The security ratings game grades third-party vendors

Can security ratings services patterned on consumer credit scores offer insight into the security postures of third parties and other business partners?

By Steve Zurier • Sept. 1, 2016

Information Governance and Security: Protecting and Managing Your Company’s Proprietary

In this excerpt of Information Governance and Security, authors John G. Iannarelli and Michael O'Shaughnessy offer tips for establishing guidelines for all departments or sectors of a business.

By SearchSecurity and Syngress • April 1, 2016

What are the latest SEC Risk Alert findings?

The latest SEC Risk Alert from the OCIE has important updates for financial services firms. Expert Mike Chapple reviews the report.

By Mike Chapple • March 11, 2016

Comparing the top vulnerability management tools

Expert Ed Tittel compares how the top-rated vulnerability management tools measure up against each other so you can select the right one for your organization.

By Ed Tittel • Feb. 9, 2016

Seven criteria for buying vulnerability management tools

Expert contributor Ed Tittel describes purchasing criteria for full-featured vulnerability management tools for small organizations to large enterprises.

By Ed Tittel • Jan. 19, 2016

The business case for vulnerability management tools

Expert Ed Tittel describes business use cases for vulnerability management tools and examines how organizations of all sizes benefit from these products.

By Ed Tittel • Jan. 14, 2016

Introduction to vulnerability management tools

Expert Ed Tittel explores how vulnerability management tools can help organizations of all sizes uncover defense weaknesses and close security gaps before they are exploited by attackers.

By Ed Tittel • Jan. 12, 2016

Clearswift SECURE Email Gateway: Product overview

Expert Karen Scarfone reviews the Clearswift SECURE Email Gateway product, which monitors incoming and outgoing emails.

By Karen Kent • Dec. 21, 2015

Fortinet FortiMail: Product overview

Expert Karen Scarfone reviews the Fortinet FortiMail email security gateway product that is used for monitoring email messages on behalf of an organization.

By Karen Kent • Dec. 21, 2015

How should agencies prepare for federal security scanning?

What do agencies need to consider before going through the Department of Homeland Security's network security scanning? Expert Mike Chapple answers.

By Mike Chapple • March 20, 2015

The 10 questions to ask during a mobile risk assessment

To both embrace the benefits of BYOD and shore up the security gaps created by it, ask these 10 questions when conducting a mobile risk assessment.

By Bryan Barringer • Nov. 7, 2014

The three stages of the ISO 31000 risk management process

The ISO 31000 risk management process proposes three stages. Expert Mike Chapple reviews this alternative to the ISO 27001 framework.

By Mike Chapple • Nov. 6, 2014

NIST cybersecurity framework: Assessing the strengths and weaknesses

Video: Securicon executive consultant Ernie Hayden discusses what the NIST cybersecurity framework got right, and how the document can be improved.

May 13, 2014

Third-party risk management: Horror stories? You are not alone

The majority of breaches occur as the result of third parties. MacDonnell Ulsch advises companies to safeguard third-party management agreements.

By MacDonnell Ulsch, Contributor • Aug. 1, 2013

Outsourcing security services in the enterprise: Where to begin

Outsourcing security services doesn’t have to mean moving to the cloud. Enterprises have many options for outsourcing security services, including managed and hosted services.

By Mike Chapple • Feb. 25, 2013

Is it possible to prevent DDoS attacks?

A distributed denial-of-service (DDoS) attack can consume all your network bandwidth. Learn how to prevent a DDoS attack in this expert response.

By Mike Chapple • March 20, 2012

Common Weakness Enumeration (CWE)

Common Weakness Enumeration (CWE) is a universal online dictionary of weaknesses that have been found in computer software... (Continued)

By TechTarget Contributor • March 21, 2011

Cloud security standards provide assessment guidelines

The Cloud Security Alliance Cloud Controls Matrix helps cloud providers and customers to evaluate security controls.

By Dave Shackleford • Jan. 27, 2011

Performing a security risk analysis to assess acceptable level of risk

No organization is ever completely without risk, but there are steps that can be taken to establish an acceptable level of risk that can be appropriately mitigated. In this tip, Michael Cobb explains how to perform a security risk analysis to help determine an acceptable level of risk.

By Michael Cobb • April 16, 2010