Risk Management: Page
-
Brand Experience Team/TechTarget
Expert AdviceHow to conduct a cloud security assessment
Cloud computing presents organizations of all types with a nearly endless array of security challenges. Is your security team keeping up – and how do you know?
By Dave Shackleford • July 18, 2024 -
Brand Experience Team/TechTarget
Video
An explanation of CIA triad
In information security CIA stands for confidentiality, integrity and availability.
By Sabrina Polin • July 15, 2024 -
Brand Experience Team/TechTarget
Corvus: Cyber insurance premiums see ‘stabilization’
Corvus Insurance's Peter Hedberg provided insight into the cyber insurance landscape after a tumultuous 2023 and what enterprises can expect moving forward.
By Arielle Waldman • June 24, 2024 -
Brand Experience Team/TechTarget
Expert Advice
Zero trust vs. defense in depth: What are the differences?
Security administrators don't have to choose between zero-trust and defense-in-depth cybersecurity methodologies. Learn how the two frameworks complement each other.
By Andrew Froehlich • June 12, 2024 -
Brand Experience Team/TechTarget
Expert Advice
What is a cloud security framework? A complete guide
With so many apps and data residing in cloud, employing a security framework to help protect cloud infrastructure is an essential move for an organization.
By Ed Moyle • June 5, 2024 -
Brand Experience Team/TechTarget
Opinion
10 risk-related security updates you might have missed at RSAC
AI was a prominent theme at RSA Conference, but many security vendors also delivered risk-focused capabilities to help infosec pros better manage their risk posture.
By David Vance • May 22, 2024 -
Brand Experience Team/TechTarget
Expert Advice
5 Mitre ATT&CK framework use cases
The Mitre ATT&CK framework helps security teams better protect their organizations. Read up on five Mitre ATT&CK use cases to consider adopting, from red teaming to SOC maturity.
By Amy DeCarlo • May 21, 2024 -
Brand Experience Team/TechTarget
Common Vulnerability Scoring System (CVSS)
The Common Vulnerability Scoring System (CVSS) is a public framework for rating the severity and characteristics of security vulnerabilities in information systems.
By Madelyn Bacon, Kinza Yasar, Alexander Gillis • May 15, 2024 -
Brand Experience Team/TechTarget
Expert Advice
Cloud vulnerability management: A complete guide
Your security strategy might not grapple directly with cloud vulnerability management. Is it time to consider the possible benefits and challenges of this emerging product class?
By Ed Scannell • May 14, 2024 -
Brand Experience Team/TechTarget
bug bounty program
A bug bounty program, also called a vulnerability rewards program (VRP), is a crowdsourcing initiative that rewards individuals like ethical hackers and security researchers for discovering and reporting vulnerabilities and bugs in software.
By Rahul Awati • May 14, 2024 -
Brand Experience Team/TechTarget
Expert Advice
How to create a cloud security policy, step by step
What are the necessary components of a cloud security policy, and why should an organization go to the trouble to create one? Download a template to get the process started.
By Paul Kirvan • May 13, 2024 -
Brand Experience Team/TechTarget
virtual machine escape
A virtual machine escape is an exploit in which an attacker runs code on a VM that lets the operating system (OS) running within it break out and interact directly with the hypervisor.
By Rahul Awati • May 10, 2024 -
Brand Experience Team/TechTarget
risk-based patch management (RBPM)
Risk-based patch management (RBPM) is an approach to implementing patches to fix software code that prioritizes patches that address security issues posing the highest risk to the organization.
By Mary Pratt • May 8, 2024 -
Brand Experience Team/TechTarget
risk-based vulnerability management (RBVM)
Risk-based vulnerability management (RBVM) is an approach to identifying and addressing security vulnerabilities in an organization's IT environment that prioritizes remediating vulnerabilities that pose the greatest risk.
By Mary Pratt • May 6, 2024 -
Brand Experience Team/TechTarget
Coalition: Insurance claims for Cisco ASA users spiked in 2023
Coalition urged enterprises to be cautious when using Cisco and Fortinet network boundary devices as attackers can leverage the attack vectors to gain initial access.
By Arielle Waldman • April 24, 2024 -
Brand Experience Team/TechTarget
Opinion // Omdia Analysts' Perspectives
5 areas to help secure your cyber-risk management program
To meet the challenges of managing cyber-risk, organizations need to have a cyber-risk management plan in place. Look at five areas to better secure your organization's assets.
By David Vance • March 28, 2024 -
Brand Experience Team/TechTarget
Expert Advice // Modern phishing
How to defend against phishing as a service and phishing kits
Phishing is a perennial thorn in the side of enterprise security. Thanks to phishing-as-a-service offerings and phishing kits, the problem will only get worse.
By Ashwin Krishnan • March 20, 2024 -
Brand Experience Team/TechTarget
Expert Advice // Third-party risk management in action
How to manage third-party risk in the cloud
Third parties, including CSPs, remain a weak point in the supply chain. Adding CSPs into your organization's third-party risk management processes is crucial.
By Dave Shackleford • March 19, 2024 -
Brand Experience Team/TechTarget
vulnerability assessment
A vulnerability assessment is the process of defining, identifying, classifying and prioritizing vulnerabilities in computer systems, applications and network infrastructures.
By TechTarget Contributor • March 11, 2024 -
Brand Experience Team/TechTarget
Expert Advice
How dynamic malware analysis works
Security teams use dynamic malware analysis to uncover how malware works -- and thereby improve threat hunting and incident detection capabilities.
By Rob Shapland • March 1, 2024 -
Brand Experience Team/TechTarget
Opinion // Omdia Analysts' Perspectives
Why companies need attack surface management in 2024
The attack surface is in a constant state of change and growth -- which is bad news for cyber-risk management. This vulnerability needs to be addressed.
By Jon Oltsik • Feb. 20, 2024 -
Brand Experience Team/TechTarget
Expert Advice // Cyber risk for CISOs
How to craft cyber-risk statements that work, with examples
A cyber-risk statement should be clear, concise and simple -- but that doesn't mean it's easy to write. Get tips and read our cyber-risk statement examples.
By Jerald Murphy • Feb. 15, 2024 -
Brand Experience Team/TechTarget
Expert Advice // How to conduct risk-based vulnerability management
Why organizations need risk-based vulnerability management
As organizations become increasingly dispersed, they need a risk-based vulnerability management approach to achieve the best protection against cybersecurity threats.
By Mike Chapple • Jan. 30, 2024 -
Brand Experience Team/TechTarget
sandbox
A sandbox is an isolated testing environment that enables users to run programs or open files without affecting the application, system or platform on which they run.
By TechTarget Contributor • Jan. 9, 2024 -
Brand Experience Team/TechTarget
NIST Cybersecurity Framework
The NIST Cybersecurity Framework (CSF) provides guidance on how to manage and reduce IT infrastructure security risk.
By Alexander Gillis • Jan. 8, 2024
Previous
