Risk Management
Risk Management | News, how-tos, features, reviews, and videos
Cyber insurance explained: What it covers and why prices continue to rise
Cyber insurance, also referred to as cyber risk insurance or cyber liability insurance coverage (CLIC), mitigates risk exposure by offsetting costs involved with damages and recovery after a cybersecurity incident.
5 IT risk assessment frameworks compared
Formal risk assessment methodologies can help take guesswork out of evaluating IT risks if applied appropriately. Here is real-world feedback on using COBIT, OCTAVE, FAIR, NIST RMF, and TARA.
Why are people so bad at risk assessment? Blame the brain
Stakeholders and CISOs tend to have different perspectives on estimating the risk of a potential cybersecurity incident. Understanding the psychological aspects can help bridge the gap.
Decline in ransomware claims could spark change for cyber insurance
New research indicates that ransomware attack and payment claims are in decline as resiliency takes priority for organizations.
6 ways the pandemic has triggered long-term security changes
With some changes prompted by COVID-19 likely to be permanent, enterprises will need to revise their data security strategies.
FSU’s university-wide resiliency program focuses on doing the basics better
An audit showing inadequate disaster recovery plans in many of the university’s 307 administrative units was the stick CISO Bill Hunkapiller needed to advance a centralized, streamlined resiliency program.
Device identity: The overlooked insider threat
Device/machine identity, especially in association with robotic process automation, can be a conduit for intentional and unintentional insider breaches.
6 steps for third-party cyber risk management
If you have third-party partners, you need a third-party cyber risk management program. Here are six key steps to follow.
CRISC certification: Your ticket to the C-suite?
Certified in Risk and Information Systems Control (CRISC) is a certification that focuses on enterprise IT risk management. Learn about the exam, prerequisites, study guides, and potential salary.
video
How chemical manufacturer Celanese secures its IT and OT environments
Celanese Corporation is a global chemical leader in the production of differentiated chemistry solutions and specialty materials used in most major industries and consumer applications. With IT and OT environments exposed to risk, the...
![Tech Spotlight > Cybersecurity [CSO] > Hands gesture in conversation](https://images.idgesg.net/images/article/2021/03/spot_cybersecurity_02_cso_hands_gestures_talking_by_rawpixel_cc0_abstract_security_by_jeff_hu_gettyimages-1221975486_hero-100879634-small.3x2.jpg?auto=webp&quality=85,70){kind=tracking}
How CISOs and CIOs should share cybersecurity ownership
CISOs and CIOs weigh in on how their cybersecurity responsibilities are evolving with changes in the business environment and threat landscape.
The 10 most powerful cybersecurity companies
What makes these 10 security vendors the biggest power players? We break it down.
Security teams report rise in cyber risk
A recent report shows declining confidence in many organizations’ security function to address today’s threats. Here’s why and how security teams can reverse the trend.
How Jefferson Health enhanced cybersecurity via its cloud transformation
Jefferson Health CISO Mark Odom discusses the healthcare provider's shift to a cloud-first strategy and shares how it has created a more efficient, agile, and risk-focused security approach.
8 biases that will kill your security program
CISOs and their security teams often hold cognitive biases that get in the way of making the right risk management and incident response decisions. Here are eight of the most common to avoid.
Move over XDR, it's time for security observability, prioritization, and validation (SOPV)
Independent tools and data repositories are coming together for better threat management, impacting organizations, security professionals, and the industry. We need to take the same approach to security hygiene and posture management....
![A multitude of arrows pierce a target. [numerous attacks / quantity / severity]](https://images.idgesg.net/images/article/2020/12/arrows_piercing_a_target_numerous_attacks_quantity_by_franck_v_cc0_via_unsplash-100869381-small.3x2.jpg?auto=webp&quality=85,70)
7 best practices for enterprise attack surface management
Follow this advice to minimize vulnerabilities and give threat actors fewer opportunities to compromise your organization's network and devices.
7 ways technical debt increases security risk
Shoddily developed and deployed projects can leave your enterprise vulnerable to attacks. Here's how to stop technical debt from sending your organization to the cyber-poorhouse.
-
White Paper
-
Video/Webcast
Sponsored -
eBook
Sponsored -
Case Study
Sponsored -
Analyst Report
Sponsored
