Page 239 - White Papers in Governance & Risk Management

ESG on Information-Driven Security through Strong Technologies for Incident Detection and Response

Large organizations are under constant cyber-attack and many are breached each day. How many? Aside from the infamous breaches at Neiman-Marcus, the New York Times, and Target in 2013, ESG research indicates that nearly half of all enterprise organizations experienced at least one successful malware-based attack over...

Rethinking Endpoint Security: An ESG White Paper

Mention endpoint security to an infosec professional and he or she will likely think of antivirus software, vulnerability scanning, and patch management. These three areas have made up the essence of endpoint security since organizations first connected to the Internet. Antivirus software, vulnerability scanning, and...

Q&A with CISO of LA World Airports on their State-of-the-Art SOC

Los Angeles World Airports (LAWA) is the airport oversight and operations department for the city of Los Angeles, California and is headquartered on the grounds of Los Angeles International Airport. Bob Cheong, CISO of LA World Airports, discusses Achieving Control and Visibility with RSA Security Analytics, ECAT...

M-Trends 2015: A View From the Front Lines

Talking about the threat landscape is no substitute for experiencing it first-hand. "M-Trends 2015: A View from the Front Lines," distills the insights gleaned from hundreds of Mandiant incident response investigations in more than 30 industry sectors. The report provides key insights, statistics, and case studies...

Is It Phishing or an APT?

Spear phishing is a primary means by which APTs target and infiltrate networks. This e-book explores the various elements of these types of attacks, such as: The characteristics of phishing emails; How spear phishing and APTs are related; How to protect against them and keep your organization safe from advanced...

Are We Losing the Battle Against APTs?

Going by the number of headlines about data breaches, it appears the bad guys always seem to be one step ahead, skillfully customizing malware and social engineering to get past our best defenses and evade detection. The problem is when it comes to advanced attacks, security teams can't see the forest of trees - too...

Secure Code and the Role of Software Assurance

With a spate of recent breaches taking place at well-known companies including Target, Home Depot and Sony, organizations must reevaluate the security of the code running within the enterprise. Leaving flawed code in place almost invites hackers in to the company's network. Why has application security not kept pace...

Sponsored by IBM

Striking the Big Data vs. Good Data Balance

This infographic highlights key actions to take in order to align the "keep everything" needs of Big Data with the "defensible disposal" mandates of Information Governance. Download this infographic to learn: The keys to the analytics machine; How to organize and devise a manageable solution....

Sponsored by IBM

Data Risk Management: Rethinking Data Discovery and Classification

Defining data via data discovery and classification is an often overlooked, yet critical, component of data security and control. Security and risk (S&R) pros can't expect to adequately protect data if they don't have knowledge about what data exists, where it resides, its value to the organization, and who can use...

Sponsored by IBM

Gartner and IBM ECM newsletter

In today's challenging marketplace, businesses across every industry are scrambling to find a competitive advantage. What many of them fail to realize, however, is that the solution to the many issues they face is already right inside their four walls: It's the wealth of insight that's trapped within the structured...

Sponsored by IBM

Are You Ready for Mobile Capture?

Mobile capture is quickly becoming an important differentiator for many companies and organizations, especially those in traditionally document-intensive fields like banking, insurance, healthcare and government operations. According to a 2014 study conducted by AIIM, 45% of companies feel that mobile capture is...

Custom Defense Against Targeted Attacks

Advanced threats and targeted attacks have clearly proven their ability to penetrate standard security defenses and remain undetected for months while siphoning valuable data or carrying out destructive actions. According to a 2014 Ponemon Institute study, the average cost of just a single targeted attack on a large...

Critical Infrastructure and Cybersecurity eBook

Critical infrastructure industries vary in the sophistication of their digital defenses. But malware including Stuxnet and Flame, denial-of-service attacks on the financial industry, and other threats have made it clear that all sectors are targets. This eBook looks at key dependencies among critical infrastructure...

Mature Security eBook

As the incidence and cost of cyber crime have escalated, organizations have responded by establishing security operations centers (SOC) to detect and counter cyber attack and to assure compliance with industry guidelines. But how capable are SOCs, and where is the greatest opportunity for improvement? HP Security...

ESG Cyber Security Maturity Model

How does your cyber security program compare to other companies? Where do your security people, processes, and technology place you among peer organizations? And more important, what should be your next steps to improve your program? Based on their research, Enterprise Strategy Group has developed a cyber security...