Page 5 - White Papers in Training & Security Leadership

How to Start a Cybersecurity Program (or Restart One that Lapsed)

Are you tasked with starting or improving the security processes within your organization? Expel’s CISO, Bruce Potter, provides tips on how to do more with less, or improve a less-than-stellar legacy program.

Budget Planning: Determining your Security Spend

Are you in the process of selecting endpoint, network, or SIEM security products? Expel has the expertise you can rely on during the evaluation process. Expel’s CISO, Bruce Potter, provides insights on budget planning when determining your security spend.

Passwords: BioTech and Pharma Both Need a New Path

A year ago, Chris Pierson and BlackCloak studied executives at top global pharma companies to learn the extent of password-based vulnerabilities. The findings weren't reassuring. Pierson revisited the study this year with a select few entities to see if the needle has moved in a more secure direction. In a video...

Buyer’s Guide for Complete Privileged Access Management (PAM)

Controlling, monitoring, and auditing privileges and privileged access—for employees, vendors, systems, applications, IoT, and everything else that touches your IT environments is essential for protecting against both external and internal threat vectors, and for meeting a growing list of compliance...

5 Critical Steps in Your Endpoint Security Strategy

The 5 Critical Steps to Endpoint Security enable a comprehensive, preventative approach to protecting all of the endpoints in your organization, whether officebased or remote. Enabling least privilege and allowing pragmatic application control are often overlooked but are crucial to achieving complete endpoint...

Signature-Based Antivirus Bypass Threats

Antivirus (AV) software has generally been regarded by businesses as the best and simplest defense to keeping data and systems secure. That somehow, it is nearly unconquerable. In reality, while AV products are certainly a must-have in your security solutions suite, they do not provide 100% protection against...

Threat Insight: PowerShell Suspicious Scripting

For years, organizations and IT professionals have turned to Microsoft’s PowerShell for its efficiency and ease of use. It provides a well-integrated command-line experience for the operating system, and a simple way to manipulate server and workstation components. PowerShell is often treated as more secure than...

Cybersecurity Key Performance Indicators

“What are we doing about Cybersecurity?” This question unnerves even the most sure-footed IT leaders. Many would attribute such anxiety to uncertainty surrounding whether their investments are sufficient to secure their organization. Others would say their budget is insufficient to achieve the visibility they...

Why Cybersecurity Training has Changed Forever

In theory, organizations are best protected by a layered security approach to cybersecurity based on best-in-class security tools. In reality, the desired outcome is rarely achieved. Why? Because most teams are not fully trained to use the technology on which their security program is built. Download this...

How 400 Barclays Security Professionals Upgraded their Cyber Skills

As an international bank, Barclays needed to invest more in its information security training in order to minimize risk and ensure business continuity. The goal was learn and teach the modern way to minimize a security breach posed by the latest advanced threats. Cyber sieges immerse teams in real-world cyberattack...

Making the Business Case for Cyber Skills Training

The day-to-day pressures of being a CISO are enormous and extend to matters far beyond those of incident response time. Meanwhile, traditional approaches to training cybersecurity team members have either been limited by scalability, lack of hands-on learning, or cost. So, how much can Simulation-based Cybersecurity...

Unemployment Fraud Targets Executive Suite

Unemployment fraud incidents have spiked in the past year, and high-salaried senior executives are often the fraudsters’ victims. Dr. Christopher Pierson of BlackCloak describes how these scams are pulled off, what impact they have and how the CISO can bolster defenses. "When a 20- or 30-person executive team is...

Stopping BEC and EAC

Business email compromise (BEC) and email account compromise (EAC) are complex problems that require multi-layered defenses. Cyber attackers have countless ways of tricking your users, preying on their trust and exploiting their access to key data, systems and resources. To succeed, attackers need to find just...

Isolated Castles: Incident Response in the New Work From Home Economy

It can no longer be a topic of debate. If you have enterprise assets connected to the Internet, you will get breached. It is only just a matter of when. Every organization, especially in today’s work-from-home economy must have a documented incident response plan and sets of playbooks that form the incident response...

The Top Mainframe Security Threats of 2020

Real-world penetration and security assessments have uncovered the most common risks to mainframe security. What are they? Download this infographic for a brief, yet detailed synopsis.