Page 244 - White Papers in Governance & Risk Management

The CISO's Guide to Advanced Attackers

No matter the size of your organization, advanced cyber-attacks represent a credible threat to your organization. Security analyst firm Securosis and Dell SecureWorks collaborated on this guide to help: Gather intelligence; Mine for threat indicators; Respond to alerts; Break the attack process....

Targeting Account Takeover: Next-Gen Fraud Protection

Account takeover is becoming more prevalent and difficult to combat as data breaches increase and phishing scams continue to evolve. In this white paper, NuData Security examines the recent trends relating to account takeover and makes recommendations in protecting against this financially destructive fraud. This...

Which Assessment is Right for Me?

This document provides you with an understanding of common cybersecurity tests and assessments organizations can use to evaluate their security posture and the distinctions between them. It will help you more accurately determine which assessment may be appropriate for your organization's needs. Use this white...

Are Websites Still the Path of Least Resistance for Cybercriminals?

Even today, strange as it sounds, far too many websites have no protection at all. In organizations where developers are evaluated primarily on their ability to ship code on time, there is often a lack of incentive to adopt secure coding practices. Website protection services can quickly add measurable security to...

New Generation Security for Advanced Threats

Why have targeted advanced threats succeeded so dramatically when most organizations have architected sophisticated defense-in-depth strategies? Because most of the tools and strategies organizations possess were built for the last generation of security threats. Download this eBook and learn why: First generation...

How to Stay Compliant with FDIC Audit Requirements

Financial institutions today have vast quantities of data available that can be used to flag potential fraudulent transactions, but many struggle to effectively leverage this data to fight fraud. This inability to make sense of available data not only reduces the amount of fraud activity detected, but can put the bank...

Analyze Huge Volumes of Real-Time Logs

Network operations teams everywhere are challenged to not only maintain 100% connectivity and uninterrupted functioning of their data centers and offices, but also to meet a variety of regulatory compliance mandates. Complying with Section 404 of the Sarbanes-Oxley (SOX) Act, regarding IT process controls, can be a...

Leverage Continuous Monitoring to Achieve PCI-DSS Compliance

In the financial services industry, in-depth log analysis is essential to maintaining enterprise-wide security and meeting compliance requirements, including PCI-DSS regulations. In addition to being required to meet compliance standards, continuous monitoring of customers' financial data activity logs helps to detect...

Java Vulnerabilities Report: Write Once, Pwn Anywhere

Java's ubiquity and vulnerabilities have made it the technology most frequently exploited by cyber attackers. So it is timely to closely explore the breadth and state of its deployment among enterprises. Bit9 undertook an examination of these questions, leveraging endpoint data across many organizations. Download...

Close the Mac Security Gap in Your Enterprise

As Mac products grow in popularity in the enterprise, they are becoming increasingly attractive targets for cybercriminals. Advanced attackers are always looking for enterprise infrastructure vulnerabilities, and their knowledge of how to exploit Mac endpoints has grown. With this growth comes a new challenge for...

Think Server-Based VDI Keeps Your Data Secure?

If you're considering deploying Virtual Desktop Infrastructure (VDI) based on security considerations, make sure you understand the complete risk profile. Server-based desktop virtualization keeps corporate assets inside the data center rather than on the client. However, VDI does nothing to prevent exploits on the...

Essential Technology for Mobile Workforce Security

The number of devices in use by the enterprise is difficult to measure because of the large number of personal, unsecured and undocumented devices brought in by employees. Legacy approaches to mobile security are outdated at best and limiting at worst. It's widely agreed they don't fit today's mobile business...

Securing Cloud Platforms to Host Critical Workloads

As organizations prepare to move critical workloads to the cloud, more stringent security and compliance requirements emerge. This report examines the strengths and shortcomings of existing cloud platform security technologies, and defines an approach to overcome these limitations and leverage existing technology to...

The State of IBM i Security Study 2013

Too many powerful users? Unrestricted network access? Default passwords? Each year, PowerTech audits hundreds of IBM i servers and compiles the data in its annual State of IBM i Security study. The annual State of IBM i Security study strives to help executives, IT managers, system admins and auditors understand...

The Attack Continuum's In-Depth Defense Strategy

For many years, conventional wisdom focused solely on a perimeter-based defense with the mission to keep out all attackers. Now, it's become pertinent to see these persistent threats and attacks through a different lens - expect a successful attack and penetration of your defenses and design a defense-in-depth...