Page 146 - White Papers in Governance & Risk Management

The Intelligent Hybrid Security Approach

Old-school cybersecurity approach has proven to be futile, and many organizations and high-profile events-including the recently convened G20 Summit-are opting for the new approach because of the vulnerabilities that have been exposed by recent, high-profile attacks. Advanced threats are multilayered and...

ROI of Vendor Risk Management: How to Leverage the Efficiencies of Automation

Organizations across sectors have come to understand the inherent security risks posed by third-party vendors. But too many approach vendor risk management with a manual process, says Daniel de Juan of Rsam. To attain true ROI, security leaders must explore new, automated VRM solutions, says de Juan, Director of...

The Dark Web: 5 Things to Know

Terbium CEO Danny Rogers on How to Search for Your Organization's Data, interviewed by ISMG's Vice President of Editorial, Tom Field What's required to access the Dark Web? And how does one separate fact from fiction? These are two of the five things Dark Web users need to know, says Danny Rogers, cofounder and CEO...

Ignoring Risks from Same-day ACH Will Cost You Big

Same-day Automated Clearing House (ACH) payment processing became a reality. While this represents a terrific opportunity for banks to be responsive to their customer's requirements for faster ACH payments, plus the ability to attract new customers from banks who choose not to offer the same level of responsiveness,...

Forrester Data Breach TLP

STOP THE BREACH: Reduce the Likelihood of an Attack Through an IAM Maturity Model. Forrester estimates that 80% of security breaches involve privileged credentials. In December 2016, Centrify commissioned Forrester Consulting to evaluate identity and access management (IAM) practices and technology among large...

2017 State of Malware Report: Headlines Finally Catch Up to the Hype

In 2016, cyberattacks and cybersecurity (or a lack thereof) grabbed media attention on both the corporate and consumer sides, even becoming a key issue in the US presidential election. In this respect, you could say that everyone, even those who have never logged on, was affected by cyberattacks and hacking in...

Satisfy that Android Sweet Tooth

Android has long ruled the consumer market. Now, the latest security advancements from Google and device manufacturers, and support for Android by leading EMM solution providers, are expanding its presence in the enterprise. To ensure security and compliance with industry standards and government regulations,...

The Top Four Firewall Security Gaps to Fix and Secure Your Organization

Firewall complexity is leaving companies exposed. The technology to keep company networks safe exists, but it isn't being managed properly. Firewall technology has come a long way since its initial, most rudimentary forms. Next-Generation Firewalls (NGFW) are the latest development, and organizations are accelerating...

Modernize Your Firewall Now: They Will Pass if You Fail

Building a Zero Trust (ZT) network where security permeates the entire digital ecosystem, rather than assuming an internal trusted network and managing an external untrusted network, has become paramount. Forrester advocates that Next-generation firewalls (NGFWs) are critical to architecting a ZT network, but the...

Data-driven Security Meets the 21st Century

As cyber threats become more complex in nature and the attack surface grows, enterprises are shifting to a risk-centric threat identification, containment, and remediation security strategy, prioritizing investments in tools and capabilities to detect threats and respond to incidents faster and more...

9 Steps to Building an Insider Threat Defense Program

Insider threats pose high risks to all enterprises. No organization, regardless of size, industry or region, is immune. With all the advantages that the digital age has brought us (and they are many) it has also brought a rise of highly damaging data breaches, from both internal and external sources. Regardless of...

From C&A to A&A: The RMF Shoe Has Dropped

Certification and accreditation (C&A) has been like alphabet soup. As it transitions to assessment and authorization (A&A), it's time to sort through the confusion and identify which terms and processes apply in any given situation. This paper sorts through the confusion to identify which terms, approaches, and...

Federal Agencies Make the Case for Modern Network Security Operations

Cloud computing initiatives, network monitoring and risk management are driving network security operations. Meanwhile, federal agencies face record levels of threats yet still rely on manual processes and outdated point tools. Agency network security operations must be modernized to streamline network security...

Is Your Organization Prepared for Today's Sophisticated Cyber Threats?

While PCI DSS compliance is an important piece of the security checklist, it's not enough to protect retailers from sophisticated Cyber-attacks that fall outside of the cardholder data environment (CDE). With more sales traffic over more channels than ever before, hackers have more opportunities to launch advanced...

2017 Cyber Threat Checklist: Are You Prepared?

With sophisticated cyber threats more prominent than ever before, PCI DSS compliance is not enough to protect retailers from cyber-attacks that fall outside of the cardholder data environment (CDE). Are you prepared to defend against today's advanced cyber threats? Download this whitepaper for a checklist on how to...