Page 2 - White Papers in Governance & Risk Management

The State of Organizations' Security Posture as of Q1 2018

As of Q1 2018, the global cybersecurity community finds themselves inundated with both internal and external advanced threat actors who are stealthier, more resilient and sadly, more effective than they have ever been before. Many organizations are coming to terms with deciding whether their security posture is...

Automation Suite for The National Institute of Standards and Technology

This guide gives a detailed overview of The National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53. SP 800-53 and establishes information security standards and guidelines for federal information systems. The compliance requirement is broken down into each segment of the business,...

Proactive Compliance Requires A Minimal Amount Of Effort To Meet Obligations

Manual processes cultivate a silo-based approach to compliance, risk management, and IT security, with individual groups or departments focused on specific risks or guidelines. Regulatory requirements, operational risks and cyber-threats are now entwined and more complex. This paper outlines six key areas in which...

Risk Management Framework: Assessing and Monitoring NIST 800-53 Controls for DoD

In 2014, the Department of Defense (DoD) issued instructions that replaced DoD Information Assurance Certification and Accreditation Process (DIACAP) with the Risk Management Framework (RMF). The RMF is designed to be managed as a continual process as the risk posture evolves over time for each information...

Federal Agencies Tech Brief: Security Investigation, Detection and Rapid Response

The fact that Federal agencies are prime targets for the most sophisticated cyber threats is undeniable. If cyberattacks are inevitable, then robust capabilities for security investigation, threat hunting, and rapid response are essential. Government cybersecurity professionals require visibility across their silos of...

Securing Your SWIFT Environment Using Micro-Segmentation: What Financial Institutions Need to Know

As of January 1, 2018, all SWIFT customers must self-attest to their compliance with the new SWIFT Customer Security Program (CSP). The program is designed to respond to the wave of cybercrime targeting SWIFT installations that began with the Bank of Bangladesh breach back in February 2016 and has swept across the...

Spear Phishing and Targeted Attacks: Defend Against Socially Engineered Strikes

Spear phishing is the common trigger to many of the most popular - and successful - targeted attacks. How can organizations improve their defenses? Jon Clay of Trend Micro tells how to better spot and stop spear phishing.

A Framework for Healthcare Data Protection

Hospitals and healthcare organizations must ensure that both their mundane and highly-sensitive information is protected and compliant, which is where content aware data loss prevention comes in. To ensure your data is not breached, download this whitepaper and learn: How to identify project priorities and...

Buyer's Guide for Certificate Management

As certificate counts within the average organization rise to tens of thousands, it has become exponentially harder to manage them effectively. Many organizations turn to their certificate authorities (CAs) to protect the keys and certificates that each CA issues. The basic tools CAs provide are certainly a step up...

Dark Web Research: How Much Will Criminals Pay for Your Certificates?

It's frightening what criminals can buy on the dark web. But it's even scarier that they may be buying your own security certificates to use against you. Venafi recently sponsored a six-month investigation into the sale of digital code signing certificates on the dark web. Conducted with the Cyber Security Research...

How Does Enterprise Intelligence Work?

Enterprise intelligence combines human-led analysis and computer-driven analytics to provide actionable insights for your enterprise, so you can disrupt and neutralize threats. Download this infographic and learn: How often insider misuse is responsible for security incidents; The average cost of a single data...

4 Critical Elements of a Successful GRC Implementation

Today's business climate is one of unprecedented regulatory growth, data complexity and cybersecurity concerns. There is a corresponding increase in media attention, customer awareness and Board-level scrutiny. Organizations must demonstrate that they have a viable process for managing risk and compliance (broadly...

It's About Risk: 2017 Strategic Cybersecurity Investments Study

Sixty-five percent of security leaders consider their organizations' security postures to be above average or superior, as compared to peers in their sectors. Yet, only 29 percent say that they are very confident in the effectiveness of their security controls, and nearly half say that they have gaps in detecting...

Best Practices for Audit and Compliance Reporting for Power Systems Running IBM i

It's not enough to comply with government and industry regulations such as SOX, PCI, MICS, and HIPAA. Organizations must also prove their compliance to auditors on a regular basis. Even companies not bound by regulatory requirements may need to confirm their adherence to internal IT security policies. But...

A Modern Security Assessment Model that Breaks from Tradition

Security professionals think in terms of risks and threats to ensure that the right security measures are deployed in the right places and to a proper degree. Security teams need an evaluation process to help them determine whether an object is under-protected or over-protected, but traditional security assessment...