Page 131 - White Papers - information security careers

10 Examples of Employee Behaviors in the Cloud That Can Increase Risk

Every CISO knows that cloud apps are being used by employees. Some are approved apps but most are not. What every CISO doesn't know is the full extent of the actions employees are taking in those cloud apps and how those actions introduce risk. These actions range anywhere on the continuum from ignorance to malicious....

11 Visibility and Control Outcomes of a Mature Cloud Defense System

Of the hundreds of CISOs we work with, there isn't one who doesn't know that as cloud adoption increases, the maturity of cloud security must also increase (unless of course you don't have any sensitive data or your risk tolerance is very high). But, before investing in the latest and greatest tools, we always...

The Intelligent Hybrid Security Approach

Old-school cybersecurity approach has proven to be futile, and many organizations and high-profile events-including the recently convened G20 Summit-are opting for the new approach because of the vulnerabilities that have been exposed by recent, high-profile attacks. Advanced threats are multilayered and...

ROI of Vendor Risk Management: How to Leverage the Efficiencies of Automation

Organizations across sectors have come to understand the inherent security risks posed by third-party vendors. But too many approach vendor risk management with a manual process, says Daniel de Juan of Rsam. To attain true ROI, security leaders must explore new, automated VRM solutions, says de Juan, Director of...

The Dark Web: 5 Things to Know

Terbium CEO Danny Rogers on How to Search for Your Organization's Data, interviewed by ISMG's Vice President of Editorial, Tom Field What's required to access the Dark Web? And how does one separate fact from fiction? These are two of the five things Dark Web users need to know, says Danny Rogers, cofounder and CEO...

Ignoring Risks from Same-day ACH Will Cost You Big

Same-day Automated Clearing House (ACH) payment processing became a reality. While this represents a terrific opportunity for banks to be responsive to their customer's requirements for faster ACH payments, plus the ability to attract new customers from banks who choose not to offer the same level of responsiveness,...

Forrester Data Breach TLP

STOP THE BREACH: Reduce the Likelihood of an Attack Through an IAM Maturity Model. Forrester estimates that 80% of security breaches involve privileged credentials. In December 2016, Centrify commissioned Forrester Consulting to evaluate identity and access management (IAM) practices and technology among large...

Lessons Learned from Studying Cybercrime

Who are the top cybercrime groups, and what security lessons can we derive from their latest attacks and attack vectors? Download this interview to explore: The evolution of cybercrime groups; The latest attacks, including ransomware and account takeover; Fox-IT's latest threat intelligence on who the...

2017 State of Malware Report: Headlines Finally Catch Up to the Hype

In 2016, cyberattacks and cybersecurity (or a lack thereof) grabbed media attention on both the corporate and consumer sides, even becoming a key issue in the US presidential election. In this respect, you could say that everyone, even those who have never logged on, was affected by cyberattacks and hacking in...

Satisfy that Android Sweet Tooth

Android has long ruled the consumer market. Now, the latest security advancements from Google and device manufacturers, and support for Android by leading EMM solution providers, are expanding its presence in the enterprise. To ensure security and compliance with industry standards and government regulations,...

9 Steps to Building an Insider Threat Defense Program

Insider threats pose high risks to all enterprises. No organization, regardless of size, industry or region, is immune. With all the advantages that the digital age has brought us (and they are many) it has also brought a rise of highly damaging data breaches, from both internal and external sources. Regardless of...

From C&A to A&A: The RMF Shoe Has Dropped

Certification and accreditation (C&A) has been like alphabet soup. As it transitions to assessment and authorization (A&A), it's time to sort through the confusion and identify which terms and processes apply in any given situation. This paper sorts through the confusion to identify which terms, approaches, and...

Federal Agencies Make the Case for Modern Network Security Operations

Cloud computing initiatives, network monitoring and risk management are driving network security operations. Meanwhile, federal agencies face record levels of threats yet still rely on manual processes and outdated point tools. Agency network security operations must be modernized to streamline network security...

Is Your Organization Prepared for Today's Sophisticated Cyber Threats?

While PCI DSS compliance is an important piece of the security checklist, it's not enough to protect retailers from sophisticated Cyber-attacks that fall outside of the cardholder data environment (CDE). With more sales traffic over more channels than ever before, hackers have more opportunities to launch advanced...

2017 Cyber Threat Checklist: Are You Prepared?

With sophisticated cyber threats more prominent than ever before, PCI DSS compliance is not enough to protect retailers from cyber-attacks that fall outside of the cardholder data environment (CDE). Are you prepared to defend against today's advanced cyber threats? Download this whitepaper for a checklist on how to...