Cyber Risk Information Security Penetration Testing 
Krebs on Security
DECEMBER 12, 2018
Is it fair to judge an organization’s information security posture simply by looking at its Internet-facing assets for weaknesses commonly sought after and exploited by attackers, such as outdated software or accidentally exposed data and devices? the security posture of vendor partners). How useful is such a score?
CyberSecurity Insiders
MARCH 7, 2021
These third parties aren’t typically under your organization’s control and its unlikely that they provide complete transparency into their information security controls. Some vendors can have robust security standards and good risk management practices, while others may not.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Centraleyes
DECEMBER 11, 2024
Implementation of Security Controls: Controls based on standards such as ISO 27001 or NIST Cybersecurity Framework 2.0 Governance and Accountability: Organizations must establish governance structures, including appointing a Chief Information Security Officer (CISO) or equivalent roles, to oversee cybersecurity initiatives.
BH Consulting
JUNE 22, 2021
Also known as cyber risk insurance, it’s now a prerequisite in some public sector tenders. Are there policies and procedures in place to ensure good governance of information security? It’s common for multinationals to ask potential suppliers to answer questionnaires about security. Questions to ask your insurer.
NopSec
JANUARY 4, 2017
Although this is by no means a comprehensive guide to the regulations, our aim is to provide you with direction for solid starting points for your information security organization. Area #3: Appointing a Chief Information Security Officer The shortage of good security talent in the market does not make this an easy requirement to meet.
Centraleyes
MARCH 13, 2025
Enhanced Governance Requirements Entities must appoint a qualified Chief Information Security Officer (CISO) with a direct reporting line to the board of directors. New Risk Assessment Standards New updates mandate independent third-party risk assessments. These changes took effect in 2024. Here are the highlights: 1.
BH Consulting
SEPTEMBER 24, 2024
NIS2 in the nick of time The Irish Government has published the Heads of Bill for the NIS2 Directive (the Network and Information Security Directive EU 2022/2555, to give its full name). The National Cyber Security Bill 2024 is the legislative vehicle for transposing NIS2 into Irish law.
Expert insights. Personalized for you.
250 
Let's personalize your content