Krebs on Security
DECEMBER 12, 2018
Is it fair to judge an organization’s information security posture simply by looking at its Internet-facing assets for weaknesses commonly sought after and exploited by attackers, such as outdated software or accidentally exposed data and devices? the security posture of vendor partners). How useful is such a score?
Centraleyes
FEBRUARY 13, 2024
Enter the need for a more precise and actionable approach — Cyber Risk Quantification. This blog aims to serve as a guide to navigating the intricate terrain of cyber risk quantification, providing insights into its significance, methodologies, and the transformative impact it can have on organizational cybersecurity strategies.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
CyberSecurity Insiders
MARCH 7, 2021
These third parties aren’t typically under your organization’s control and its unlikely that they provide complete transparency into their information security controls. Some vendors can have robust security standards and good risk management practices, while others may not.
Centraleyes
APRIL 18, 2024
Risk Assessments These audits identify and mitigate potential threats and vulnerabilities, ensuring organizations are well-prepared for cyber risks. Documentary Evidence: Tangible and straightforward, documentary evidence encompasses policies, procedures, and documentation related to information security controls.
NopSec
JANUARY 4, 2017
Although this is by no means a comprehensive guide to the regulations, our aim is to provide you with direction for solid starting points for your information security organization. Area #3: Appointing a Chief Information Security Officer The shortage of good security talent in the market does not make this an easy requirement to meet.
BH Consulting
JUNE 22, 2021
Also known as cyber risk insurance, it’s now a prerequisite in some public sector tenders. Are there policies and procedures in place to ensure good governance of information security? It’s common for multinationals to ask potential suppliers to answer questionnaires about security. Questions to ask your insurer.
NopSec
AUGUST 30, 2013
In our own backyard, the New York State Department of Financial Services has distributed a “Cyber-Security/Cyber-Risk Questionnaire” that covers topics such as penetration testing, vulnerability scanning tools, and emerging threats from mobile devices, social media, and Cloud computing.
Expert insights. Personalized for you.
199 
Let's personalize your content