Security Practices
Security Practices | News, how-tos, features, reviews, and videos
12 database security landmines, failures, and mistakes that doom your data
Lapses in protecting databases are common and attackers know it. Here are the top database weaknesses they try to exploit.
How Windows admins can get started with computer forensics
Analyzing forensics logs requires a unique approach. Here are the basics of what you need to know and the tools to use.
CISOs’ 15 top strategic priorities for 2021
Mitigating third-party risk, baking security into the development process, defending against ransomware attacks, keeping pace with digital transformation efforts—these are just a few things that are top-of-mind for CISOs today.
Opsec examples: 6 spectacular operational security failures
Even savvy dark web denizens sometimes fail to cover their tracks.
![A user reviews data and statistical models. [analytics / analysis / tracking / monitoring / logging]](https://images.idgesg.net/images/article/2020/08/user_reviews_data_tracking_monitoring_analytics_event_logging_analysis_threat_detection_by_tzido_gettyimages-1060376922_2400x1600-100855963-small.3x2.jpg?auto=webp){kind=tracking}
5 best practices for designing application logs
Better logs make it easier to distinguish between critical data and noise. Here's how to design logs with security in mind.
CISA unveils Joint Cyber Defense Collaborative with tech heavyweights as first private partners
The new initiative aims to provide organizations with unprecedented levels of information and context with an initial focus on ransomware and incident response for cloud providers.
Mitre D3FEND explained: A new knowledge graph for cybersecurity defenders
D3FEND is a new schema released by Mitre last month to establish a common language to help cyber defenders share strategies and methods. It is a companion project to the company’s ATT&CK framework.
Tabletop exercises: Six sample scenarios
Tabletop exercises are a low-stress, high-impact way to test your plans for handling a crisis. Here are some tips for getting the most out of the process, plus six scenarios you can use to start your journey.
IT asset disposal is a security risk CISOs need to take seriously
Sensitive company and personal data often leaves organizations on disposed devices. An auditable chain of custody that shows data destruction is essential for any ITAD program.
Tabletop exercises explained: Definition, examples, and objectives
A tabletop exercise is an informal, discussion-based session in which a team or discusses their roles and responses during an emergency, walking through one or more example scenarios.
10 things to do now to reduce the cost of your next data breach
Taking these steps will save money, time, and reputation when that next breach hits.
Minimizing damage from a data breach: A checklist
How you respond to a data breach and the amount of damage it causes depends on how well prepared you are. Have you done everything on this list?
Can WebAuthn and U2F finally give us safe and easy Two-Factor authentication?
Using your smartphone for two-factor authentication is easy, but it's not as secure as you might think. The real future for secure 2FA lies in the WebAuthn and Universal 2nd Factor standards.
Why XDR must include MDR
Technology alone isn't enough; organizations need help with security operations.
XDR is coming: 5 steps CISOs should take today
Beyond threat detection and response, CISOs should think of XDR as an opportunity to modernize the SOC, automating processes, and improving staff productivity. Here's your XDR game plan for 2021.
Microsoft 365 Advanced Audit: What you need to know
Microsoft's powerful new auditing options will help detect intrusions and see what was accessed...if you've paid for the right licenses.
5 ways to combat audit fatigue
The growing number of audits for security and privacy regulatory compliance is stressing security personnel and draining resources from security operations. Here's how to better manage them.
5 ways attackers counter incident response, and how to stop them
IR has become a chess match with attackers who can cleverly spoil responders' efforts and keep a foothold in systems. Here's how they do it and how to kick them out for good.
-
White Paper
-
White Paper
-
White Paper
-
Video/Webcast
Sponsored -
eGuide
Sponsored
BrandPosts
Learn more-
Sponsored by CIS
-
Sponsored by Sophos