Risk Management: Page

Transparency, disclosure key to fighting ransomware

Current and former CISA members say the best methods for curbing ransomware attacks are organizations reporting attacks and assisting in investigations.

By Tim McCarthy • Sept. 15, 2022

air gap (air gapping)

An air gap is a security measure that involves isolating a computer or network and preventing it from establishing an external connection.

By Alexander Gillis • Sept. 13, 2022

How to start developing a plan for SASE implementation

From prioritizing business problems to identifying future initiatives to assessing critical tool gaps, learn how to create a realistic SASE implementation roadmap.

By John Grady • Sept. 1, 2022

VMware aims to improve security visibility with new services

Unveiled at VMware Explore, the company's new security services include Project Trinidad, Project Watch and Project Northstar. All three offer customer visibility enhancements.

By Alexander Culafi • Aug. 30, 2022

VMDR: Inside vulnerability management, detection and response

VMDR offers automated asset identification, threat prioritization and patch management. But do companies need another vulnerability management tool?

By Kyle Johnson • July 20, 2022

Cyber-war game case study: Preparing for a ransomware attack

In this real-world cyber-war game case study, an exercise on ransomware preparedness helped a company discover shortcomings in its incident response plan.

By Johna Johnson • July 19, 2022

8 top digital wallet companies

Digital wallets offer more security and convenience to consumers, with the flexibility to pay from mobile devices.

By Amanda Hetler • July 13, 2022

SANS Institute: Human error remains the top security issue

The SANS Institute's annual report on security awareness found that human risk is still the biggest source of data breaches and security issues for enterprises.

By Shaun Nichols • June 30, 2022

Why the next-gen telecom ecosystem needs better regulations

The telecom industry keeps the world connected but also poses national and cybersecurity risks. Learn why the sector needs better -- and uniform -- regulations.

By John Lash • June 28, 2022

SANS lists bad backups, cloud abuse as top cyberthreats

A panel of experts from the SANS Institute took the stage at RSA Conference 2022 to weigh in on some of the biggest threats and risks facing security teams.

By Shaun Nichols • June 8, 2022

Microsoft flags common pitfalls for cyber insurance

Cyber insurance is getting more expensive and tougher to acquire. At RSA Conference 2022, Microsoft's Cynthia James discussed the common mistakes made when obtaining coverage.

By Peyton Doyle • June 7, 2022

How to counter insider threats in the software supply chain

Insider threats extend beyond employees within your company to include people working at partners and third parties. Learn about these insider threats in the software supply chain.

By Will Kelly • May 20, 2022

How to conduct a cyber-war gaming exercise

A successful cyber-war game can help organizations find weaknesses in their system but only if the right participants are involved and an after-action review is completed.

By Johna Johnson • May 19, 2022

Cyber-war gaming: A cybersecurity tabletop exercise

Based off military war games, cyber-war gaming examines a company's security posture. Learn how it works, the readiness needed, who should be involved and more.

By Kyle Johnson • May 3, 2022

Do phishing simulations work? Sometimes

Phishing simulations are becoming increasingly popular to pinpoint which employees fall victim to scams, but their effectiveness and morality have been called into question.

By Isabella Harford • May 2, 2022

Sender Policy Framework (SPF)

Sender Policy Framework (SPF) is a protocol designed to restrict who can use an organization's domain as the source of an email message.

By Peter Loshin • April 28, 2022

Best practices for creating an insider threat program

A thorough insider threat program includes plan preparation, threat assessment, and plan review and renewal. Learn how to implement this three-step model to protect your company.

By Ashwin Krishnan • April 27, 2022

7 best practices for Web3 security risk mitigation

Tech builders and businesses evaluating decentralized technologies should keep these seven Web3 security best practices in mind to help mitigate traditional and novel cyber threats.

By Jessica Groopman • April 21, 2022

Making sense of conflicting third-party security assessments

Third-party security assessments from different sources may not always agree, but that doesn't mean they can be ignored. Learn how Mitre ATT&CK can provide perspective.

By Dave Gruber • April 14, 2022

Synopsys: Enterprises struggling with open source software

To curb open source risk, Synopsys advises enterprises to keep a comprehensive inventory of all software within its environment and to understand that securing open source requires strong management.

By Arielle Waldman • April 12, 2022

How effective is security awareness training? Not enough

Annual security awareness trainings do little to improve security. Learn why they aren't helpful, and discover steps to improve your organization's training program.

By Isabella Harford • April 5, 2022

6 types of insider threats and how to prevent them

From disgruntled employees to compromised users to third-party vendors, here are six types of insider threats and best practices to mitigate the issues.

By Sharon Shea • March 25, 2022

North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP)

The North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) plan is a set of standards aimed at regulating, enforcing, monitoring and managing the security of the Bulk Electric System (BES) in North America.

By Rahul Awati, Ben Cole • March 2, 2022

4 tips for selecting cybersecurity insurance

Choosing a cybersecurity insurance provider can be a daunting and complex task. Follow this advice to select the best policy -- and provider -- for your business.

By Nate Smolenski • Feb. 25, 2022

Pave a path to cybersecurity and physical security convergence

Physical security doesn't get the attention cybersecurity does, but that gap poses significant risks. Find out what you can do to better protect your organization's assets.

By Johna Johnson • Feb. 24, 2022