Page 13 - White Papers in Training & Security Leadership

Stop Unauthorized Abuse of Privileged Access: Protect your SSH Keys

Take control of your SSH keys to minimize your risk of intrusion SSH keys provide the highest level of access rights and privileges for servers, applications and virtual instances. Cyber criminals want this trusted status and invest considerable resources into acquiring and using SSH keys in their attacks. Even...

2017 SSH Study - Executive Brief

A recently published 2017 survey of over 400 security professionals in the U.S., U.K. and Germany measured how well their organizations implemented security controls for SSH keys. The results show that most organizations are underprepared to protect against SSH-based attacks, with fewer than half following industry...

Average Cost of Healthcare Breach? $3.62 Million, Regardless of Compliance

Clearly, adherence to HIPAA, NIST and other regulators in healthcare is paramount, but that does not mean that your organization isn't vulnerable to cybercrime hacking. When the average breach is worth $3.62 million with $380 per patient record compromised (as per Ponemon's 2017 Cost of a Data Breach Report), the...

2017 Faces of Fraud Survey Report: Mobile Exploits Come of Age

Defending against tomorrow's mobile attacks is a moving target; but new technologies and strategies, including behavioral biometrics and machine-learning-based analytics, are allowing financial institutions to reduce their fraud losses while enhancing their customer experience. Based on the latest results of ISMG's...

The Need to Expand Beyond Windows OS; Maximizing Malware Analysis

Yes, malware commonly targets the Windows operating system. But if you limit malware analysis to Windows OS, you're leaving gaping vulnerabilities, says Christopher Kruegel of Lastline Inc. Here's how to maximize your analysis. Kruegel, CEO of Lastline, says that one common limitation of malware analysis is that...

Simplify Compliance & Avoid Breaches in Healthcare

Through an ongoing series of Healthcare Security Readiness workshops, key gaps in how healthcare organizations defend against cybercrime hacking have emerged. Has your organization assessed and mitigated gaps in security...or are even aware of what they are? In the following ISMG interview transcript, David...

What Keeps CISOs Up at Night: The Biggest Security Challenges in 2017

CISOs have plenty to keep them up at night. With data breaches, ransomware incidents and system compromises, security leaders are forced to find ways to beat threats without slowing their pace of business. If they fail to effectively manage those risks, their organizations can face huge consequences. While process...

How to Implement NIST CSF: A 4-Step Journey to Cybersecurity Maturity

Often, security leaders will look for an industry standard or best practice to help them navigate through the minefield. A recent Rsam survey revealed that 87% of InfoSec leaders said they plan to incorporate NIST CSF into their risk and compliance strategy. NIST CSF can help CISOs understand their organization's...

4 Critical Elements of a Successful GRC Implementation

Today's business climate is one of unprecedented regulatory growth, data complexity and cybersecurity concerns. There is a corresponding increase in media attention, customer awareness and Board-level scrutiny. Organizations must demonstrate that they have a viable process for managing risk and compliance (broadly...

7 Ways to Improve Your Security Incident Response

Organizations share common concerns and frustrations about security incident response. The scope of what you need to protect has expanded significantly - more users, more endpoints, more everything. At the same time, internal and external scrutiny has skyrocketed due to the increasing coverage of large scale security...

Top 5 Reasons Why Mobile will Transform Enterprise Authentication

There's no denying that the proliferation of mobile devices presents new safety challenges for enterprises and consumers alike. But these potential challenges can be mitigated, paving the way for mobile to become a trusted, convenient and multipurpose enterprise digital ID. Learn why mobile is the future of...

Transforming the Banking Experience with Trusted Identities

Today's FIs face a breadth of consumer demands, competitive threats and security and fraud risks. Acquiring and retaining consumers in a fiercely competitive marketplace flooded with waves of non-traditional players requires a consumer-centric digital strategy. The key enabler for an effective digital strategy is...

Trusted Identities: An Imperative for Digital Transformation

Modern enterprises are in the midst of a digital revolution, adapting to the demands of Business 2.0. They are looking to embrace new business opportunities, expand into new markets, and propose new product offerings, as well as be more agile in responding to existing demands. This transformation relies on digital...

The Illusive and Intrusive Advanced Malware; How it Avoids Detection

Contrary to common assumption, "advanced malware" is not a singular type of superior malicious code or harmful object that can that compromises systems, harvests data or damages corporate networks. Rather, this term describes sophisticated behavior and evasion capabilities that certain strands of malware possess which...

The Truth About Your Vulnerability to Ransomware

Ransomware is a rapidly evolving challenge for organizations of all sizes. Despite expert protection technologies and staff, attackers are consistently changing techniques and developing bolder strategies that creep through vulnerabilities. Although the majority of ransomware attacks are spread by email through...