Risk Management: Page

How to build a better vulnerability management program

With a vulnerability management program in place, your organization is better equipped to identify and mitigate security vulnerabilities in people, processes and technologies.

By Karen Kent • May 16, 2023

Coalition: Employee actions are driving cyber insurance claims

After analyzing cyber insurance claims data, Coalition determined that phishing escalated in 2022, ransomware dropped and timely patching remained a consistent problem.

By Arielle Waldman • May 16, 2023

5 SBOM tools to start securing the software supply chain

Organizations can use these SBOM tools to help secure their software supply chain by understanding the components of their deployed software and applications.

By Ravi Das • May 10, 2023

How to reduce risk with cloud attack surface management

Attack surfaces continue to expand, fueled in part by the cloud. Attack surface management is a key way to identify vulnerable assets and reduce the risk to a corporate network.

By Dave Shackleford • May 10, 2023

Protestware explained: Everything you need to know

Developers use protestware technology to drive points home; some arrives as messages of defiance, others with malicious intent.

By Sean Kerner • May 8, 2023

11 cybersecurity tips for business travelers

Don't put your sensitive information at risk when you travel. Learn how to take a few extra precautions with these cybersecurity tips.

By Amanda Hetler • April 17, 2023

How to use a CASB to manage shadow IT

Shadow IT can cost organizations time, money and security. One way to combat unauthorized use of applications is to deploy a CASB.

By Paul Kirvan • April 12, 2023

PCI DSS merchant levels

Payment Card Industry Data Security Standard (PCI DSS) merchant levels rank merchants based on their number of transactions per year to outline compliance verification requirements.

By Linda Rosencrance • March 30, 2023

Vulnerability management vs. risk management, compared

Vulnerability management seeks out security weaknesses in an organization, while risk management involves looking holistically at how the company is running.

By Ravi Das • March 29, 2023

Is ransomware declining? Not so fast, experts say

While some 2022 ransomware statistics indicate a possible 'decline' in activity, threat researchers warn there's more to the picture than the numbers suggest.

By Alexander Culafi • March 9, 2023

FACTA (Fair and Accurate Credit Transactions Act)

FACTA (Fair and Accurate Credit Transactions Act) is an amendment to FCRA (Fair Credit Reporting Act ) that was added, primarily, to protect consumers from identity theft... (Continued)

By Alexander Gillis • March 8, 2023

New National Cybersecurity Strategy takes aim at ransomware

The Biden-Harris administration's 39-page National Cybersecurity Strategy covers multiple areas, including disrupting ransomware operations and addressing vulnerable software.

By Alexander Culafi • March 2, 2023

How cyber deception technology strengthens enterprise security

They say the best defense is a good offense. Cyber deception puts that philosophy into practice in the enterprise, using a combination of technology and social engineering.

By Karen Kent • Jan. 25, 2023

Do companies need cyber insurance?

As cyber insurance costs rise, companies must determine whether they truly need cyber insurance to tackle their increased risk of cyber attacks.

By Mark Brown • Nov. 17, 2022

Security hygiene and posture management requires new tools

Using multiple tools to address security hygiene and posture management at scale is costly and difficult. A new converged security technology category may be the answer.

By Jon Oltsik • Oct. 31, 2022

It’s time to rethink security certification for OT devices

Security certifications don't protect OT devices from vulnerable processes and insecure-by-design practices. It's time to update security certs for the connected OT age.

By Daniel dos Santos • Oct. 28, 2022

Enterprise ransomware preparedness improving but still lacking

An Enterprise Strategy Group survey found enterprises are making strides in ransomware preparedness, but work remains to prevent and mitigate attacks.

By Kyle Johnson • Oct. 28, 2022

Top security-by-design frameworks

Following a security-by-design framework, or designing one specific to your company, is key to implanting security into every step of the software development lifecycle.

By Ashwin Krishnan • Oct. 25, 2022

compensating control (alternative control)

A compensating control, also called an alternative control, is a mechanism that is put in place to satisfy the requirement for a security measure that is deemed too difficult or impractical to implement at the present time.

By Robert Sheldon, Ivy Wigmore • Oct. 20, 2022

How to manage and reduce secret sprawl

Secret sprawl plagues companies, making them vulnerable to data breaches. Discover what causes secret sprawl and how to better protect secrets.

By Charles Kolodgy • Oct. 19, 2022

full-disk encryption (FDE)

Full-disk encryption (FDE) is a security method for protecting sensitive data at the hardware level by encrypting all data on a disk drive.

By Alexander Gillis • Oct. 18, 2022

Compare vulnerability assessment vs. vulnerability management

Vulnerability assessments and vulnerability management are different but similar-sounding security terms. Discover their similarities and differences.

By Ravi Das • Oct. 18, 2022

rainbow table

A rainbow table is a password hacking tool that uses a precomputed table of reversed password hashes to crack passwords in a database.

By Alexander Gillis • Sept. 27, 2022

Does AI-powered malware exist in the wild? Not yet

AI sending out malware attacks may invoke images of movielike, futuristic technology, but it may not be too far from reality. Read up on the future of AI-powered malware.

By Isabella Harford • Sept. 26, 2022

Use shadow IT discovery to find unauthorized devices and apps

Shadow IT may be convenient for users, but it isn't for IT -- especially where security is concerned. Shadow IT discovery finds unmanaged devices and apps.

By Karen Kent • Sept. 15, 2022