IT Risk Management

Whitepaper

Best Practices to Protect Communication and Email Fraud with Technology

September 4, 2024

For nearly 70 years, Village Roadshow has been entertaining moviegoers, theme park visitors and many other customers. For these creative collaborators, keeping the lines of communications up—while keeping risk down—is central to business. This case study talks about the three primary business risks that Village...

Webinar

From Basic to Brilliant: Transforming Compliance with Advanced Screening Practices

August 23, 2024

In an increasingly complex regulatory environment, traditional compliance practices often fall short of ensuring comprehensive risk management. This session explores how organizations can enhance their compliance frameworks through advanced screening practices that focus on thorough risk evaluation, proactive...

Article

How the Paris Olympics Survived Unprecedented Cyberthreats

Chris Riotta • August 19, 2024

France’s cyber defense agency teamed up with governments and security experts from across the globe to identify and mitigate a historic level of both physical and cyber threats following years of preparation, experts tell Information Security Media Group.

Webinar

Live Webinar | Demonstrating the Value of Your Cybersecurity Program

Dustin Hutchison • August 19, 2024

Explore how cybersecurity leaders are successfully demonstrating the value of their cybersecurity programs through a risk-based approach. Gain insights into real-world examples and strategies that have secured resources, support, and budgets by effectively communicating risks to various audiences. Join this webinar...

Article

Mimecast Acquires Aware to Advance Collaboration Security

Michael Novinson • August 14, 2024

Mimecast's acquisition of Aware bolsters its human risk management by adding AI and natural language processing capabilities for collaboration tools. The deal enhances security across communication platforms, addressing insider threats and compliance issues while boosting Mimecast's market presence.

Blog

Cyber Supply Chain Security and Third-Party Risk Management

Sujit Christy • August 8, 2024

The intersection of cyber supply chain security and third/fourth-party risk management presents significant challenges for CISOs. Here's how to take a proactive, comprehensive approach to cyber supply chain risk management to protect critical assets and enhance resilience against evolving threats.

►

Article

Cybersecurity in Healthcare: Collaboration Is Key

Marianne Kolbasuk McGee • August 6, 2024

Most hospitals prioritize cybersecurity but often lack the necessary resources to comply with these goals. The question becomes not about the practices, but the potential barriers to implementation, according to John Riggi at the American Hospital Association.

Whitepaper

2024 State Of Identity Security in Financial Services

August 1, 2024

Financial services companies are managing tens of thousands of identities which, at scale, can be challenging to quickly manage and secure access for employees as they join, transfer departments, or leave a company. 77% state these problems are exacerbated by a rapid influx of identities as a result of mergers and...

►

Article

Securing M&A Transactions With Cyber Due Diligence

Suparna Goswami • July 16, 2024

An M&A due diligence process must include a comprehensive cybersecurity risk assessment, including all assets, threats, vulnerabilities and control measures, said Bradley Schaufenbuel, vice president and CISO at payroll and HR solution company Paychex.

Blog

Cybersecurity Can Be a Businesses Enabler

CyberEdBoard • July 15, 2024

To make cybersecurity a business enabler, cybersecurity teams need to focus on opening things up in a secure fashion so that the functionality and productivity of the business can flourish. Hearst's Andres Andreu discusses the areas in which this can be done.

Article

North America Midwest Summit Addresses AI's Role in Security

Amish Kulkarni • July 2, 2024

At ISMG's Cybersecurity Summit: North America Midwest, security leaders gathered to discuss AI's dual role in cybersecurity, regulatory challenges, cyber insurance strategies and emerging threats including deepfakes. The event featured critical insights on evolving threats and defense strategies.

►

Article

Balancing AI Potential and Risk Management in Cybersecurity

Michael Novinson • July 1, 2024

Generative AI offers significant potential for enhancing productivity across various organizational functions. The integration of gen AI demands meticulous oversight to mitigate errors and ensure alignment with company mission, vision and values, said Patrick Dunphy, head of cybersecurity, Omron.

Interview

Purple Teaming: Evaluate the Efficacy of Security Controls

Steve King • July 1, 2024

Red teaming is not effective for evaluating the efficacy of preventative or detective security controls, said Jared Atkinson of Specter Ops, but purple teaming is. Purple teaming as "the evaluation of security control efficacy through atomic testing, using deliberately selected test cases."

Webinar

OnDemand | From Risk-Based Vulnerability Management to Exposure Management: The Future of Cybersecurity

Zaira Pirzada • June 20, 2024

The traditional approach of Risk-Based Vulnerability Management (RBVM) is critical for prioritizing vulnerabilities but frequently misses providing a full threat landscape perspective. It often overlooks the comprehensive risk assessment of vulnerabilities and assets and the importance of compensatory controls....

Webinar

OnDemand | 2023 OT Cybersecurity Year in Review: Lessons Learned from the Frontlines

Marissa Costa, Senior Penetration Tester, Dragos , Jackson Evans-Davies, Director of Professional Services, Dragos , Hussain Virani, Senior Industrial Incident Responder, Dragos , Eddy Wade, Senior Industrial Consultant, Dragos • June 14, 2024

In the dynamic battleground of operational technology (OT) cybersecurity, the frontlines are where the most valuable lessons are learned. Join Dragos' panel of seasoned cybersecurity frontline experts as they draw on firsthand experiences from architecture reviews, incident response, and penetration testing in OT...

Best Practices to Protect Communication and Email Fraud with Technology

From Basic to Brilliant: Transforming Compliance with Advanced Screening Practices

How the Paris Olympics Survived Unprecedented Cyberthreats

Live Webinar | Demonstrating the Value of Your Cybersecurity Program

Mimecast Acquires Aware to Advance Collaboration Security

Cyber Supply Chain Security and Third-Party Risk Management

Cybersecurity in Healthcare: Collaboration Is Key

2024 State Of Identity Security in Financial Services

Securing M&A Transactions With Cyber Due Diligence

Cybersecurity Can Be a Businesses Enabler

North America Midwest Summit Addresses AI's Role in Security

Balancing AI Potential and Risk Management in Cybersecurity

Purple Teaming: Evaluate the Efficacy of Security Controls

OnDemand | From Risk-Based Vulnerability Management to Exposure Management: The Future of Cybersecurity

OnDemand | 2023 OT Cybersecurity Year in Review: Lessons Learned from the Frontlines

Around the Network

Purple Teaming: Evaluate the Efficacy of Security Controls

Collaborate on Shifting Left: Why 'AppSec Is a Team Sport'

Gaining Better Visibility Into Medical Devices, IoT, OT

What Kind of People Do Cybersecurity for a Living?

Oswal: AI, Platformization Key to Network Security Evolution

Enhancing Cyber Defense with AI-Powered SOCs

Court's Web Tracker Ruling: What HIPAA Entities Should Know

Top 'Privacy by Design' Considerations for Medical Devices

Taking an AI-First Approach to Securing Your Organization

Why Zero Trust Is Critical in Health and Government Sectors