Risk Management: Page

OT attacks shift from recon to physical control, raising stakes

Malicious hackers are no longer just snooping around OT systems, researchers warn. They're preparing to cause real-world damage.

By Alissa Irei • May 28, 2026

How to operationalize a strong cyber-resilience plan

Attackers are becoming increasingly powerful, and regulators are demanding proof of cyber-resilience. In this threat landscape, cyber-resilience plans need to change, too.

By Michael Nadeau • May 27, 2026

What CISOs need to know about AI audit logs

AI audit logs are rapidly becoming essential tools for enterprise CISOs. Here's what cybersecurity leaders need to track to mitigate risks.

By Amy DeCarlo • May 20, 2026

Instructure cyberattack reignites ransom payment debate

Instructure struck a deal to recover its stolen data -- likely paying a hefty ransom. For CISOs, deciding whether to negotiate with cybercriminals should come down to business risk.

By Alissa Irei • May 15, 2026

6 things to check in your cyber insurance policy fine print

Cyber insurance premiums are stabilizing, but coverage is narrowing. From AI risks to nation-state attacks, here's what your policy might no longer cover.

By John Burke • May 5, 2026

How cyber insurance helped with breach recovery -- or not

Four organizations, each with cyber insurance policies, responded differently to data breaches. Read the real-world examples of what went right and wrong.

By Richard Livingston • May 4, 2026

Shadow code: The hidden threat for enterprise IT

The shadow code running in your web apps could be a ticking time bomb. Learn more about the cybersecurity risks of shadow code and how to protect your enterprise.

By Karen Kent • April 28, 2026

Deepfake era demands proof-based security, not just awareness

Deepfakes are reshaping social engineering attacks, and traditional security awareness training is falling short. Some experts say it's time for proof-based verification policies.

By Sean Kerner • April 24, 2026

The push for digital sovereignty: What CISOs need to know

Digital sovereignty is reshaping global IT strategies and governments are prioritizing local tech to reduce foreign dependencies. Find out what this means for your organization.

By Mary Pratt • April 23, 2026

Beyond awareness: Human risk management metrics for CISOs

Traditional security training isn't keeping threat actors out. As employee awareness programs fall short, Forrester Research suggests a better approach.

By Richard Livingston • April 21, 2026

What to know about red team testing and the law

Red teaming isn't just about finding flaws in cyberdefenses. There are important legal implications that deserve careful consideration.

By Phil Sweeney • April 6, 2026

How to perform a data risk assessment, step by step

Data risk assessments review how an organization protects its sensitive data and identify necessary improvements by revealing potential vulnerabilities, threats and other risks.

By Alexander Gillis, Karen Kent • March 2, 2026

Counter third-party risk with continuous vendor monitoring

Assessing a vendor's security posture is not a box that gets checked. The risk of a third-party attack requires the kind of diligence provided by continuous vendor monitoring.

By Dave Shackleford • Feb. 26, 2026

Top threat modeling tools, plus features to look for

Automated threat modeling tools make identifying threats simpler, but the tools themselves can be fairly complex. Understanding where risks exist is only one part of the process.

By Paul Kirvan • Feb. 24, 2026

Quantifying cyber-risk at Netflix, Highmark Health: Case studies

Show me the money: In these case studies, learn how the FAIR model helped a nonprofit healthcare company and a streaming giant quantify cyber-risk in financial terms.

By Mary Pratt • Jan. 31, 2026

Deepfake phishing is here, but many enterprises are unprepared

Deepfake phishing attacks are on the rise, as attackers use AI to deceive and defraud end users and their employers. Learn what CISOs can do to protect their organizations.

By Amy DeCarlo • Jan. 13, 2026

Cybersecurity awareness news brief: What works, what doesn’t

Check out the latest security news from the Informa TechTarget team.

By Staff report • Oct. 24, 2025

Cybersecurity awareness quiz: Questions and answers

From phishing to patching, file sharing to MFA, find out how much you know about preventing cybersecurity incidents in this security awareness training quiz.

By Staff report • Oct. 23, 2025

Red vs. blue vs. purple team: What are the differences?

Red teams attack, blue teams defend and purple teams facilitate collaboration. Together, they strengthen cybersecurity through simulated exercises and knowledge sharing.

By Sharon Shea • Aug. 22, 2025

News brief: Safeguards emerge to address security for AI

Check out the latest security news from the Informa TechTarget team.

By Staff report • Aug. 22, 2025

What is integrated risk management (IRM)?

Integrated risk management (IRM) is a set of proactive, businesswide practices that contribute to an organization's security, risk tolerance profile and strategic decisions.

By Nick Barney, Wesley Chai • Aug. 7, 2025

How to prepare for post-quantum computing security

One of the biggest fears about quantum computing is its ability to easily break current encryption algorithms. Learn why and how to start making quantum security preparations.

By Kyle Johnson • Aug. 5, 2025

What is an input validation attack?

An input validation attack is any malicious cyberattack that involves an attacker manually entering strange, suspicious or unsafe information into a normal user input field of a target computer system.

By Rahul Awati, Laura Fitzgibbons • July 29, 2025

An explanation of risk management for businesses

Risk management transforms uncertainty into opportunity by identifying threats, evaluating impacts and implementing strategic controls to protect and enhance business value.

By Sabrina Polin, Tommy Everson • July 24, 2025

How extortionware, cyberextortion and ransomware differ

Prevention is the only line of defense against an extortionware attack. Learn how extortionware works and why it can be more damaging than ransomware.

By Andrew Froehlich • July 24, 2025