Page 5 - White Papers in Governance

Managing Business Email Compromise and Impostor Threats to Keep Your Organization Protected

Since 2015, more than 22,000 organizations have fallen victim to business email compromise (BEC) attacks. The FBI estimates that organizations have lost an estimated USD $3.08 billion to these attacks. Download this guide to protect your organization by learning: How BEC works and why it succeeds: the targets and...

10 Impossible Things You Can Do with Metadata

Historically, the only way organizations could come close to capturing high-fidelity data about what's happening on their network was to invest in a packet capture system. That's so yesterday. Full packet capture systems were never designed to facilitate the detection or investigation of advanced threat actors....

The First 72-Hours: How to Approach the Initial Hours of a Security Incident

In this white paper, Fidelis Cybersecurity will outline key steps to take in the first 72 hours of detecting an alert, how to distinguish what type of incident you are facing and the key differences on how to respond. Based on our firsthand experience, we provide lessons learned from the front lines to explain why it...

A New Approach to Endpoint Security Software Testing

Security product testers have architectured their test suites to adhere to the technologies of the past 10 years. However, as endpoint security and the threat landscape continue to evolve, so must testing suites evolve as well. Advanced methodologies and a more robust testing criteria are essential to keep...

The Top Four Firewall Security Gaps to Fix and Secure Your Organization

Firewall complexity is leaving companies exposed. The technology to keep company networks safe exists, but it isn't being managed properly. Firewall technology has come a long way since its initial, most rudimentary forms. Next-Generation Firewalls (NGFW) are the latest development, and organizations are accelerating...

Data-driven Security Meets the 21st Century

As cyber threats become more complex in nature and the attack surface grows, enterprises are shifting to a risk-centric threat identification, containment, and remediation security strategy, prioritizing investments in tools and capabilities to detect threats and respond to incidents faster and more...

From C&A to A&A: The RMF Shoe Has Dropped

Certification and accreditation (C&A) has been like alphabet soup. As it transitions to assessment and authorization (A&A), it's time to sort through the confusion and identify which terms and processes apply in any given situation. This paper sorts through the confusion to identify which terms, approaches, and...

The Vendor Risk Management Solution Guide

As enterprises continue to outsource more aspects of their operations to third parties, they expose themselves to more shared risk. It can be a staggering responsibility. Most organizations understand the need to automate vendor risk management activities to keep up with increasing scope and scrutiny. Yet they...

Making the Case for Continuous Authentication: Why 2FA is Not Secure Enough to Combat Online Fraud

Most organizations that enable users to perform online transactions have implemented security measures to address fraud. Currently, one of the most common safeguards used in a wide array of products/services is two-factor authentication (2FA). In recent years, 2FA has become employed by global tech leaders like...

Oh, RATs! Current Fraud Detection Doesn't Catch Remote Access Trojans

Many IT professionals use remote administration tools to troubleshoot and fix PC problems remotely, just as if they were sitting behind the keyboard themselves. But these tools are also used for different purposes today. Both nation states and hacktivists use modified these tools, creating Remote Access Trojan's...

The DIY Guide to PCI: Implementing PCI Compliance in the Cloud

Looking to go at it alone when securing your public cloud environment? Without a clear understanding of its nuances, even the most state-of-the-art solution won't make it past an annual compliance audit. This detailed guide is for those pursuing PCI DSS compliance on their DIY cloud security environment. Download...

Testing the Top 9 Market Leaders in Breach Detection: How They Measure Up

As the New Year unfolds, finding a breach prevention provider will be critical in order to safeguard an organization's assets. NSS Labs subjected nine cybersecurity market leaders to comprehensive, rigorous testing to determine how well each product handled current advanced threats and attack methods. All vendor...

Aim Small, Miss Small: Producing a World-Class Threat Intelligence Capability

Building a threat intelligence team from the ground up can be riddled with political inertia. This whitepaper details how to merge operational and strategic capabilities to automate and analyze external attack data to identify current and future security threats. Discover the six core competencies that comprise a...

Cybersecurity: The New Metrics

"How secure are we?" That's one of the most common questions asked by boards and senior managers. But security and technology leaders do not always have ready answers, says Jacob Olcott of BitSight Technologies. Are they even using the right security metrics? In an interview about cybersecurity metrics, Olcott...

How to Establish Your Cybersecurity Benchmarking Plan

Do your competitors and peers have a better cybersecurity game plan than you? If simply answering that question seems exhausting, this eBook is here to help. Today's chief information officer knows they can't outsource risk. Yet every year, cyber risk demands more and more time from the already-busy CIO. This...