Page 24 - White Papers in Security Operations > Network Detection & Response

Ironclad APIs: An Approach for Application Security Testing

Application Programming Interfaces (APIs) are a set of operations used for accessing a web application. Today, the "API economy" is quickly changing how the world interacts. Everything from photo sharing, to online shopping, to hailing a cab is happening through APIs. Because of APIs, technical innovation is...

Application Security: Why the Whole Company Needs to be on Board

While board level executives understand the concepts and terms used in network security and perimeter security, application security, as a concept and discipline, is not quite firmly defined. AppSec is much different than other security domains, so applying the standard methods does not necessarily address the unique...

Uncovering the Harsh Realities of Endpoint Management

One of the largest IT security trends that defined 2017 and is expected to continue growing in importance in 2018 is endpoint management. Endpoint management is an essential IT management process that allows a company to centrally manage, update and troubleshoot all its devices including desktops, laptops, servers,...

Conquering Complexity in Endpoint Management

As your endpoint infrastructure becomes increasingly complex, maintaining patch deployments and policies that cover vulnerabilities needs to be a top priority for IT professionals. A recent analysis by Aberdeen Group shows that the volume of critical endpoint vulnerabilities, and the percentage of vulnerabilities...

The State of Security Education: Healthcare

This report uses healthcare-specific data to explore how medical staff and other end users in this industry are performing on cybersecurity assessments. We analyze responses gathered via nearly 85 million questions asked and answered in our Security Education Platform, as well as data culled from tens of millions of...

2018 Beyond The Phish Report

Anti-phishing training should be the foundation of any security awareness training program - but it's critical to think beyond email (in more ways than one) in order to effectively strengthen end-user defenses. Simulated phishing attacks - that is, email tests designed to mimic real-world social engineering attacks...

2018 State of The Phish Report ®

The 2018 State of the Phish Report presents analysis of data from tens of millions of simulated phishing attacks sent through our Security Education Platform. The report captures and delivers the types of data infosec professionals are seeking as they develop their own security awareness training programs. These...

Utilizing Deception Technology To Protect ATM Networks

Distributed deception technology does not provide a viable solution for defending ATM machines against attacks executed physically on the machines themselves. But it is arguably the most effective means of stopping the most damaging attacks - the ones executed against the larger ATM network or those enabled by...

Does Your Incident Response Plan Measure Up?

In many instances, we learn that companies have an incident response plan that looks good on paper but not in practice. The plan cannot just live in a manual that sits on a shelf. It needs to be a strategy that everyone agrees to, can evolve over time, is rehearsed often and can be carried out immediately when the...

The Executive's Breach Response Preparedness Playbook

Today's cyber landscape has become a matter of 'when' not 'if' a cyber breach will affect your organisation. In this environment, running a successful organisation requires mature cyber incident response capabilities that lead to strong organisational defense and mitigation of harmful breaches. C-suite understanding...

The Complexities of Vulnerability & Patch Management

There are massive amounts of vulnerabilities that companies deal with on an ongoing basis - not everything is lost though. Organizations that use unpatched software face a race against the clock, with attackers regularly beginning to hammer new vulnerabilities just hours after new fixes or security alerts get released...

A New Way to Handle Cyber Claims: Adopting a Project Management Approach

There is a lot to say about the disorganized way most cyber incident claims are currently handled. Instead, adopting a project management approach will make better use of resources and lead to several benefits. To this point, many incidents have traditionally been handled with a "lawyer-heavy" approach, but the...

Open Banking, PSD2, and The Transformation of Financial Services

The Open Banking mandate in the United Kingdom and the second Payment Services Directive (PSD2) regulation in the EU are meant to increase competition and innovation in the financial system. They come into force in early 2018 and will set new standards for banks in the areas of strong customer authentication, secure...

Power to the People: GDPR, Trust, and Data Privacy

Time is running out. You've heard that costly penalties will be assessed for companies that have been slow to comply with GDPR in late May of 2018. But GDPR should not be viewed as only 'another regulation'. Coming to compliance with GDPR is an opportunity to build trust with consumers as it lays out the privacy...

The Effects of GDPR on Customer Relations

GDPR will have significant impact and businesses must rethink which PII that they collect and how they will gain consent from their customers. Businesses are well-advised to thoroughly review these changes and prepare. Managing consumer identities consistently across all apps, portals, and services is essential. As...