Risk Management: Page

How extortionware, cyberextortion and ransomware differ

Prevention is the only line of defense against an extortionware attack. Learn how extortionware works and why it can be more damaging than ransomware.

By Andrew Froehlich • July 24, 2025

AI in risk management: Top benefits and challenges explained

AI can improve the speed and effectiveness of risk management efforts. Here are the potential benefits, use cases and challenges your organization needs to know about.

By Donald Farmer • July 15, 2025

What is cloud infrastructure entitlement management (CIEM)?

Cloud infrastructure entitlement management (CIEM) is a modern cloud security discipline for managing identities and privileges in cloud environments.

By Mary Pratt , Kinza Yasar • July 15, 2025

How to perform a cybersecurity risk assessment in 5 steps

When assessing cybersecurity risk, be sure to consider the scope of the project, your organization's specific assets and leadership's tolerance for risk.

By Char Sample • July 9, 2025

What is SIEM (security information and event management)?

SIEM (security information and event management) is software that helps organizations detect, analyze, and respond to security threats by collecting and correlating security event data from across the IT environment in real time.

By Alexander Gillis, Linda Rosencrance • July 2, 2025

What is an SBOM (software bill of materials)?

An SBOM (software bill of materials) is a detailed inventory of all components and software dependencies involved in the development and delivery of an application.

By Sean Kerner, Alexander Gillis • July 2, 2025

What is risk analysis?

Risk analysis is the process of identifying and analyzing potential issues that could negatively affect key business initiatives or projects.

By Alexander Gillis, Linda Rosencrance, Kinza Yasar • July 1, 2025

How to implement a risk-based security strategy: 5 steps

Making the move from compliance-based to risk-based security helps organizations prioritize threats using systematic assessment and strategic planning.

By Ed Moyle • July 1, 2025

What is risk management? Importance, benefits and guide

Risk management is the process of identifying, assessing and controlling threats to an organization's capital, operations and financial performance.

By Linda Tucci , Craig Stedman • July 1, 2025

What is the ISO 31000 Risk Management standard?

The ISO 31000 Risk Management framework is an international standard that provides organizations with guidelines and principles for risk management.

By Brien Posey, Alexander Gillis • July 1, 2025

What is attack surface management? Guide for organizations

Attack surface management can help CISOs and other cybersecurity managers address the growth in the number of potential entry points threat actors might exploit.

By John Moore • June 30, 2025

What is vulnerability management? Definition, process and strategy

Vulnerability management is the process of identifying, assessing, remediating and mitigating security vulnerabilities in software and computer systems.

By Alexander Gillis, Sean Kerner • June 30, 2025

SBOM formats explained: Guide for enterprises

SBOMs inventory software components to help enhance security by tracking vulnerabilities. Teams have three standard SBOM formats to choose from: CycloneDX, SPDX and SWID tags.

By Ravi Das • June 27, 2025

Ransomware threat actors today and how to thwart them

Top experts convened on BrightTALK's 'CISO Insights' to discuss 'Ransomware 3.0' -- the current threat and what organizations, large and small, must do to thwart these bad actors.

By Staff report • June 25, 2025

What is risk avoidance?

Risk avoidance is the elimination of hazards, activities and exposures that can negatively affect an organization and its assets.

By Mary Pratt • June 24, 2025

What is residual risk? How is it different from inherent risk?

Residual risk is the risk that remains after efforts to identify and eliminate some or all types of risk have been made.

By Francesca Sales, Dave Shackleford • June 23, 2025

What is pure risk?

Pure risk refers to risks that are beyond human control and result in a loss or no loss, with no possibility of financial gain.

By Linda Tucci, Ben Cole • June 23, 2025

What is risk assessment?

Risk assessment is the process of identifying hazards that could negatively affect an organization's ability to conduct business.

By Kinza Yasar, Alexander Gillis • June 20, 2025

What is operational risk?

Operational risk is the risk of losses caused by flawed or failed processes, policies, systems, people or events that disrupt business operations.

By Kinza Yasar, Lisa Morgan • June 16, 2025

News brief: Gartner Security and Risk Management Summit recap

Check out the latest security news from the Informa TechTarget team.

By Staff report • June 13, 2025

What is cyber risk quantification (CRQ)? How to get it right

Cyber risk quantification translates security threats into financial terms, so executives can prioritize risks, justify investments and allocate resources to protect the business.

By Stephen Bigelow • June 13, 2025

What a smart contract audit is, and how to conduct one

Smart contracts ensure the integrity of transactions, such as those that initiate key services. A smart contract audit is one way to ensure the programs work as designed.

By Paul Kirvan • June 13, 2025

Cybersecurity risk management: Best practices and frameworks

Proactive cyber-risk management protects business operations, ensures compliance and preserves reputation through established frameworks and security best practices.

By Stephen Bigelow • June 12, 2025

What is a chief risk officer (CRO)? A detailed CRO job description

The chief risk officer (CRO) is a senior executive tasked with assessing, overseeing and mitigating an organization's risks.

By Kinza Yasar, Mary Pratt, Ben Cole • June 3, 2025

What is security?

Security for information technology (IT) refers to the methods, tools and personnel used to defend an organization's digital assets.

By Madelyn Bacon, Nick Barney • May 30, 2025