Page 153 - White Papers in Governance & Risk Management

Aim Small, Miss Small: Producing a World-Class Threat Intelligence Capability

Building a threat intelligence team from the ground up can be riddled with political inertia. This whitepaper details how to merge operational and strategic capabilities to automate and analyze external attack data to identify current and future security threats. Discover the six core competencies that comprise a...

Sponsored by NSS Labs

The Encrypted Web: Be Wary of What Travels Inside TLS/SSL

Encrypted web communication routinely bypasses enterprise security controls. Left unscanned, these channels are perfect vehicles for hiding infection, command & control, and data exfiltration. The malicious use of encryption is growing at an alarming rate, from 104 in 2014, to 13,542 as of mid-2016, according to...

Sponsored by NSS Labs

Global Adoption of Encryption; Is it Inevitable?

Encryption keeps data confidential, but we're left unprotected from threats that may be embedded in the data. In fact, encryption actually conceals these threats and adds network performance burdens for organizations that wish to inspect encrypted traffic. The first in a series on encryption, this technical brief...

Sponsored by NSS Labs

Breach Detection Systems: Product Selection Guide

Breach detection systems (BDS) are security products that offer timely detection of threats. When evaluating these products, customers must take into account traditional factors, such as security effectiveness, deployment options, performance and administrative capabilities. Since cybercriminals prize new threats...

Sponsored by NSS Labs

Advanced Endpoint Protection: Strategic Guidance When Replacing Antivirus

Replacing traditional antivirus (AV) with advanced endpoint protection (AEP) products may not be the best decision for every organization. If you do decide to switch, determining which AEP product is the best fit can be challenging as claims of capabilities and value differ between products. This guide provides...

Sponsored by NSS Labs

When Should Your Enterprise Move to Advanced Endpoint Protection?

Advanced endpoint protection (AEP) products are still relatively immature, which makes it difficult to decide whether to replace or augment existing endpoint protection (EPP). Adding to the difficulty in assessing AEP products is the fact that measuring some of their features can be complicated. AEP products are...

Information Security Risk and the Need for Quantitative Ratings

Credit rating models transformed the way we do business and have existed for almost a century. Now, these same models are inspiring a new way of managing vendor security risk by using externally collected security data to assess and quantify security performance. Download this white paper to learn: The...

The Evolution of Vendor Risk Management in Financial Institutions

Learn how Financial Services organizations have moved from trustbased exercises, to evidencebased, continuous monitoring of vendor security. The Financial Services industry has long been a pioneer in developing risk management practices. As third party data breaches have increased in recent years, regulators...

Cybersecurity: The New Metrics

"How secure are we?" That's one of the most common questions asked by boards and senior managers. But security and technology leaders do not always have ready answers, says Jacob Olcott of BitSight Technologies. Are they even using the right security metrics? In an interview about cybersecurity metrics, Olcott...

Cyber Threat Hunting Season is Now Open; Detect Attackers Already Inside Your Network

Determined cyber attackers invade even the best security defenses with the same stealth as wolves creeping up on sheep; if they make themselves known before you spot them, it's too late. Attackers only need to successfully invade once to cause serious damage, but preventing them all is simply not possible. By...

Healthcare HIPAA Breach Violations of All Sizes Now Under Microscope

The Health Insurance Portability and Accountability Act (HIPAA) just celebrated its 20th anniversary in 2016 as one of the most significant pieces of healthcare-related legislation in U.S. history. Once viewed as a "paper tiger," it has taken many years for the full impact of HIPAA's data security provisions to be...

The Healthcare Industry & Need for a New Cybersecurity Strategy

From ransomware to targeted social engineering attacks, the threats to healthcare entities have changed enormously. Isn't it time for healthcare's cybersecurity strategy to change too? Aaron Rinehart, the Chief Enterprise Security Architect at Optum, has never seen an industry with quite the urgent cybersecurity needs...

What's Required in Your Next Generation IPS Solution?

The threat landscape certainly has changed in recent years. But can you say the same about the traditional intrusion prevention system."The biggest problem with IPSs today is that organizations are trying to fight today's threats with yesterday's solutions," says Bertone, who serves as CTO of Fidelis Cybersecurity....

How to Establish Your Cybersecurity Benchmarking Plan

Do your competitors and peers have a better cybersecurity game plan than you? If simply answering that question seems exhausting, this eBook is here to help. Today's chief information officer knows they can't outsource risk. Yet every year, cyber risk demands more and more time from the already-busy CIO. This...

How to Use Behavioral Attributes & Cognition to Fight Fraud

As fraudsters continually refine their techniques to steal banking customers' credentials, IBM fights back with new tools that use behavioral biometrics and cognitive fraud detection. Satti Charles, a Financial Crime Prevention Strategist with IBM Security Trusteer, is enthusiastic about the new behavioral biometric...