White Papers in Governance & Risk Management

The Buyer's Guide to Cyber Threat Intelligence

The Recorded Future buyer's guide will help you to answer 11 key questions at the center of deciding how to invest in a threat intelligence solution. A template is also included to help build an RFP you can use to quiz vendors on their capabilities. The guide includes: Definitions of types of threat intelligence...

Justifying Your Insider Threat Program

Security professionals have long struggled to demonstrate the return on investment of their security spend. Getting sign off for an insider threat program is no different. Advanced analytics and user and entity behavior analytics (UEBA) solutions enhance the security posture of organizations deploying them....

Best Practices for Remote Access in Disaster Mitigation and Recovery Scenarios

In times of crisis organizations can excel in quick resource mobilization but not necessarily rational decision-making. Quick choices are made that seemingly address an immediate challenge but also lead to long-term unforeseen consequences. This white paper provides guidance for network security administrators on...

The Accidental Hacker

When we think of insider threats, we inevitably imagine the likes of a Julian Assange or Edward Snowden, and spectacular leaks of confidential information with vengeful or ideological motivations. But while a WikiLeaks-type threat is well understood, an intense focus on malicious threats risks missing out all the...

2020 Ponemon Cost of Insider Threats Global Report

The 2020 industry benchmark report independently conducted by the Ponemon Institute and sponsored by IBM Security and ObserveIT is now available. What are the findings and implications of an insider breach? Ponemon Institute's latest report is conducted to understand the direct and indirect costs that result from...

Threat Brief: Iranian Cyber Warfare

Most U.S. organizations have already been monitoring and defending against Iranian advanced persistent threat (APT) groups for years. With that said, this is a good opportunity to assess whether your organization is a likely target of Iranian state-sponsored cyber operations, and determine if your team is ready and...

Sponsored by Attivo Networks

Deception-Based Threat Detection: Shifting Power to the Defenders

Increased compute power, artificial intelligence, and tools on the Dark Web are equipping cyberattackers with the resources to launch more sophisticated and destructive attacks. Reactive defenses are no longer enough to stop attackers from infiltrating even the best security architectures. Environmental dynamics are...

Sponsored by Attivo Networks

Active Deception to Combat Advanced Threats

As cyberattacks increase in sophistication and penetrate networks with higher frequency and effectiveness, security professionals are expressing growing concerns about being able to quickly detect and stop in-network threats from both internal and external threat actors. The growing number of these cyberattacks have...

Sponsored by Attivo Networks

Intercepting Live Attacks With The Attivo Networks AdSecure Solution

By design, Active Directory (AD) will readily exchange information with any member system it manages. Attackers can also leverage this access to extract information on the entire domain quickly. Security teams may not realize that attacks on AD are occurring because the activities will appear as if AD is providing...

Sponsored by Attivo Networks

Why Active Directory (AD) Protection Matters

Active Directory Mismanagement exposes 90% of businesses to breaches. Download this infographic to learn more about: The percentage of active directories that pentesters are able to breach How open source tools are simplifying AD exploitation Other areas of opportunity for exploitation...

Sponsored by Attivo Networks

Defending Against Insider Threats With Attivo Networks

Insider threats are one of the most difficult challenges an organization can face. Where a range of conventional defenses exist to thwart exterior threats, malicious actors within an organization are much more difficult to identify and contain. This paper will delve into the challenges presented by insider threats and...

Sponsored by Attivo Networks

Case Study: A View of Deception Technology in Security Testing

Whether security testing is driven by compliance or as part of standard security resiliency testing, it is a vital component of an organization's defenses, especially in today's era of high-profile breaches. Download this whitepaper to learn more about: The role of deception in security testing Examples of Red Team...

Sponsored by Attivo Networks

A Definitive Market Guide to Deception Technology

The use of deception technology to combat cyber attackers has steadily gained ground over the last several years, especially among a subset of IT security practitioners who have grown weary of the noise detection technologies generate. Those technologies yield an exponentially larger number of false positives than...

The Unspoken Insider Threat

When it comes to identifying and stopping malicious and even accidental insider threats, organizations are often overlooking a significant gap. Nathan Hunstad of Code42 discusses how to plug this costly leak. In this interview about the insider threat, Hunstad discusses: Why organizations are overlooking the IP...

2019 Integrating Password and Privilege Management for Unix and Linux Systems

Unix and Linux build the foundation for most business-critical systems. Thus, they present target-rich environments for cyber-attackers. Privileged Access Management (PAM) helps to mitigate such risks. To succeed, security teams must follow an integrated approach, covering both privilege elevation and centralized...