Risk Management
Risk Management | News, how-tos, features, reviews, and videos
FSU’s university-wide resiliency program focuses on doing the basics better
An audit showing inadequate disaster recovery plans in many of the university’s 307 administrative units was the stick CISO Bill Hunkapiller needed to advance a centralized, streamlined resiliency program.
Device identity: The overlooked insider threat
Device/machine identity, especially in association with robotic process automation, can be a conduit for intentional and unintentional insider breaches.
6 steps for third-party cyber risk management
If you have third-party partners, you need a third-party cyber risk management program. Here are six key steps to follow.
CRISC certification: Your ticket to the C-suite?
Certified in Risk and Information Systems Control (CRISC) is a certification that focuses on enterprise IT risk management. Learn about the exam, prerequisites, study guides, and potential salary.
video
How chemical manufacturer Celanese secures its IT and OT environments
Celanese Corporation is a global chemical leader in the production of differentiated chemistry solutions and specialty materials used in most major industries and consumer applications. With IT and OT environments exposed to risk, the...
![Tech Spotlight > Cybersecurity [CSO] > Hands gesture in conversation](https://images.idgesg.net/images/article/2021/03/spot_cybersecurity_02_cso_hands_gestures_talking_by_rawpixel_cc0_abstract_security_by_jeff_hu_gettyimages-1221975486_hero-100879634-small.3x2.jpg?auto=webp){kind=tracking}
How CISOs and CIOs should share cybersecurity ownership
CISOs and CIOs weigh in on how their cybersecurity responsibilities are evolving with changes in the business environment and threat landscape.
The 10 most powerful cybersecurity companies
What makes these 10 security vendors the biggest power players? We break it down.
Security teams report rise in cyber risk
A recent report shows declining confidence in many organizations’ security function to address today’s threats. Here’s why and how security teams can reverse the trend.
How Jefferson Health enhanced cybersecurity via its cloud transformation
Jefferson Health CISO Mark Odom discusses the healthcare provider's shift to a cloud-first strategy and shares how it has created a more efficient, agile, and risk-focused security approach.
8 biases that will kill your security program
CISOs and their security teams often hold cognitive biases that get in the way of making the right risk management and incident response decisions. Here are eight of the most common to avoid.
Move over XDR, it's time for security observability, prioritization, and validation (SOPV)
Independent tools and data repositories are coming together for better threat management, impacting organizations, security professionals, and the industry. We need to take the same approach to security hygiene and posture management....
![A multitude of arrows pierce a target. [numerous attacks / quantity / severity]](https://images.idgesg.net/images/article/2020/12/arrows_piercing_a_target_numerous_attacks_quantity_by_franck_v_cc0_via_unsplash-100869381-small.3x2.jpg?auto=webp)
7 best practices for enterprise attack surface management
Follow this advice to minimize vulnerabilities and give threat actors fewer opportunities to compromise your organization's network and devices.
7 ways technical debt increases security risk
Shoddily developed and deployed projects can leave your enterprise vulnerable to attacks. Here's how to stop technical debt from sending your organization to the cyber-poorhouse.
video
Securing the software supply chain: A structured approach
Managing risk across an extended supply chain is extremely challenging for organizations of all sizes. The sheer volume of connected components that communicate, store, and process data will continue to expand the attack surface, and...
GAO calls out US government agencies: Get your supply chain security act together
The US Government Accounting Office tells Congress that federal agencies have largely ignored its supply chain risk management guidance for nearly ten years.
17 cyber insurance application questions you'll need to answer
Recent high-profile security incidents have tightened requirements to qualify for cyber insurance. These are the tougher questions insurance carriers are now asking.
Defining linchpins: An industry perspective on remediating Sunburst
The concept of linchpin software can be useful in assessing risk and focusing security efforts, but it comes with challenges.
![CSO Hall of Fame 2021 [LOGO]](https://images.idgesg.net/images/article/2021/04/cso_2021_05_cso50_hall_of_fame_3x2_2400x1600-100886850-small.3x2.jpg?auto=webp)
-
eBook
Sponsored -
eBook
Sponsored -
Case Study
Sponsored -
eBook
Sponsored -
White Paper
