Notice Bored

JUNE 25, 2021

begging questions about which infosec-related matters are particularly important, and how they stack up in relation to other business priorities, issues, pressures etc. begging questions about which infosec-related matters are particularly important, and how they stack up in relation to other business priorities, issues, pressures etc.

InfoSec 63

InfoSec Risk Information Security Government 63

Notice Bored

JUNE 21, 2022

Thinking about the principles underpinning information risk and security, here's a tidy little stack of "Hinson tips" - one-liners to set the old brain cells working this chilly mid-Winter morning: Address information confidentiality, integrity and availability, broadly Address internal and external threats, both deliberate and accidental/natural Celebrate (..)

InfoSec 63

InfoSec Risk Engineering Accountability 63

Security Boulevard

JULY 7, 2022

Risks to Your Network from Insecure Code Signing Processes. However, this practice puts these critical resources at risk for being misused or compromised. Many InfoSec teams don’t have the visibility into what their software development teams are doing. In years past, InfoSec may have been the central keeper of code signing.

Risk 98

Risk InfoSec Software Digital transformation 98

Notice Bored

JUNE 20, 2022

The SecAware corporate information security policy template incorporates a set of generic principles for information risk and security such as " Our Information Security Management System conforms to generally accepted good security practices as described in the ISO/IEC 27000-series information security standards. "

InfoSec 60

InfoSec Information Security Risk Government 60

Cisco Security

SEPTEMBER 26, 2022

As Technology Audit Director at Cisco, Jacob Bolotin focuses on assessing Cisco’s technology, business, and strategic risk. Risk Management and Formula One. Meanwhile, InfoSec is the designer and implementor of risk management capabilities (for instance, ensuring the latest technology is deployed and within expected specifications).

Risk 118

Risk Cybersecurity Technology InfoSec 118

SecureWorld News

APRIL 28, 2023

Glanden is a specialized security systems consultant focused on risk management for breakthroughs and vulnerabilities, a senior security architect for Sayers, and the founder of BarCode Security. The 40-minute episode is packed with insights on the latest and greatest in cybersecurity.

InfoSec 101

InfoSec CISO Ransomware Information Security 101

Notice Bored

APRIL 4, 2022

Control attributes are a powerful and flexible tool for information security management purposes, a novel way to design, manage and improve an organisation’s approach to mitigating unacceptable information risks, supplementing more traditional or conventional methods.

InfoSec 72

InfoSec Information Security Risk 72

Krebs on Security

JUNE 15, 2023

Mandiant said the attackers will continue to change their tactics and malware, “especially as network defenders continue to take action against this adversary and their activity is further exposed by the infosec community.”

Risk 210

Risk VPN Internet Internet 210

Dark Reading

AUGUST 10, 2020

A security leader shares tips for adopting a CISO mindset, creating risk management strategies, and "selling infosec" to IT and executives.

CISO 101

CISO InfoSec Hacking Risk 101

Notice Bored

MARCH 14, 2022

It also occurs to me that, aside from structuring the reports according to the information security controls and incidents , you could use the information risks in a similar way. How does one write an information security report? What should be reported?"

Risk 76

Risk InfoSec Information Security Government 76

Notice Bored

APRIL 10, 2021

We're currently preparing some new information risk and security policies for SecAware.com. This policy will outline the associated information risks, mitigating controls and other relevant approaches. It's hard to find gaps in the suite of 81 policy templates already on sale (!)

InfoSec 60

InfoSec Penetration Testing Information Security Risk 60

The Security Ledger

APRIL 2, 2021

The post Episode 209: Fortinet’s Renee Tarun on Scaling InfoSec To Meet Tomorrow’s Challenges appeared first on The. Fixing InfoSec Demands Scale, Diversity. Read the whole entry. » The information security industry is simultaneously robust and beset by problems and challenges.

InfoSec 52

InfoSec CISO Information Security Cyber Risk 52

Jane Frankland

JUNE 20, 2023

In this blog, and ahead of my talk at Infosec this week , I’m delving into this, and giving you tips for recognising its signs and preventing it as a leader. And these changes increase the risk of developing anxiety, depression, and other mental health issues. The stakes are simply too high to neglect this.

Cybersecurity 130

Cybersecurity Risk InfoSec CISO 130

CyberSecurity Insiders

MAY 27, 2021

Next-Gen in Third-Party Risk Management (TPRM). We knew the competition would be tough and with top judges who are leading infosec experts from around the globe, we couldn’t be more pleased,” said Gene Yoo, CEO of Resecurity. Join a webinar at [link] and realize that infosec knowledge is power. About Resecurity, Inc.

InfoSec 52

InfoSec B2C B2B Media 52

SecureWorld News

AUGUST 13, 2023

Whatever the reason, shadow IT can pose a serious security risk to organizations. This means that they are more vulnerable to attack, and any data stored on them is at risk. This means that they are more vulnerable to attack, and any data stored on them is at risk. What can organizations do mitigate the risks of shadow IT?

Risk 72

Risk Cybersecurity Education Technology 72

The Security Ledger

MAY 4, 2021

In this episode of the podcast (#213): Molly Jahn of DARPA and University of Wisconsin joins us to talk about the growing cyber risk to the Food and Agriculture sector, as industry consolidation and precision agriculture combine to increase the chances of cyber disruption of food production. Read the whole entry. »

Cyber Risk 98

Cyber Risk Risk Digital transformation InfoSec 98

Herjavec Group

MAY 17, 2021

Quickly detect risks and amend access entitlement issues associated with privileged users. CDM’s Global Awards are reviewed by an unbiased panel of certified security professionals (CISSP, FMDHS, CEH) who vote based on their independent review of the submission package, corporate website, company product literature, and thought leadership.

InfoSec 52

InfoSec Marketing Technology B2C 52

ForAllSecure

MARCH 8, 2023

Booth babes and rampant sexism were more of a problem in infosec in the past. That is, until Chenxi Wang spoke up. Today she runs a 100% woman owned VC. I wrote two books, one on IoT Security and another with Kevin Mitnick, then jumped around a couple of different jobs. Now I’m hosting a podcast called The Hacker Mind.

InfoSec 40

InfoSec Engineering CSO Technology 40

CSO Magazine

JUNE 8, 2022

With rapidly evolving threats and increased business risk, security leaders are constantly pressed by the question: Do we have the right technology, people, and processes in place to protect the organization? For more of Goldsworthy’s insights, watch the full video of the event session embedded below.

InfoSec 97

InfoSec Technology Risk 97

NopSec

MARCH 19, 2019

This instant feedback loop enabled me align priorities across teams, and this holds true in Vulnerability Management with InfoSec and IT. Competing priorities between InfoSec and IT InfoSec teams have their own priorities often guided by overarching VM goals. This results in: Instant partnership with IT to reduce risk.

Risk 52

Risk InfoSec Marketing 52

Security Affairs

APRIL 21, 2020

The security researcher Pedro Ribeiro, Director of Research at Agile Information Security, has published details about four zero-day vulnerabilities affecting the IBM Data Risk Manager (IDRM) after the company refused to address the issues. The latest version Agile InfoSec has access to is 2.0.3, ” the expert wrote on GitHub.

Risk 102

Risk Authentication InfoSec Advertising 102

The Security Ledger

APRIL 29, 2019

Cybersecurity luminaries including Bruce Schneier, Gary McGraw, Joe Grand, Chris Wysopal and Katie Moussouris are backing securepairs.org, countering industry efforts to paint proposed right to repair laws in 20 states as a cyber security risk. Read the whole entry. »

InfoSec 40

InfoSec Digital transformation Internet Internet 40

Notice Bored

JULY 23, 2020

For the next phase of SecAware ISMS , I'm documenting the management process for determining and allocating information risk and security responsibilities. It turns out there may be several corporate functions, teams and individuals, each performing numerous activities relating to information risk and security.

InfoSec 52

InfoSec Risk Accountability Banking 52

SecureWorld News

FEBRUARY 25, 2022

It also delivers robust benchmarking and insights to help you manage and mitigate user-driven phishing risks more effectively. A commissioned survey of 600 InfoSec and IT professionals across those same seven countries. Volumes and impacts organizations dealt with related to socially engineered attacks in 2021.

Phishing 79

Phishing Risk Security Awareness Social Engineering 79

Notice Bored

SEPTEMBER 26, 2020

The decision to go for ISO/IEC 27001 certification, for instance, flows largely from management's appreciation of the business value of investing in information risk and security management good practices. A substantial part of information security expenditure is (whatever we may believe as professionals) discretionary.

InfoSec 52

InfoSec Information Security Manufacturing Risk 52

The Falcon's View

JANUARY 3, 2019

Consider, if you will, that fundamentally we in infosec want people to make better decisions. That's right, it's infosec. From a functional perspective, this means a few very specific things for infosec: 1) We must continue to work in a collaborative and consultative manner with everyone else in the organization.

InfoSec 40

InfoSec Engineering Digital transformation CISO 40

The Last Watchdog

OCTOBER 3, 2019

Started by infosec professionals, Peerlyst takes the characteristics of B2B communications we’ve become accustomed to on Twitter and LinkedIn and directs it toward cybersecurity. Sharing intelligence for the greater good is an essential component of making Internet-centric commerce as safe and as private as it needs to be. Talk more soon.

InfoSec 37

InfoSec B2B Cybersecurity Cyber Risk 37

Security Boulevard

JUNE 9, 2022

How to Overcome Common SSH Machine Identity Risks with Automation. Collecting Risk Intelligence. Prevent breaches by automating the collection of risk intelligence required to quickly identify and respond to SSH machine identity risks, weaknesses or security events. Better visibility for InfoSec teams. UTM Medium.

Risk 52

Risk Digital transformation InfoSec System Administration 52

SC Magazine

JANUARY 29, 2021

If or when more attacks are uncovered, end-user organizations will need to apply the lessons learned from SolarWinds and prepare to take swift and decisive action, infosec experts agreed in a series of interviews with SC Media. Hard reality check. Of course, there can also be unexpected repercussions from performing these threat assessments.

InfoSec 97

InfoSec CISO Media Software 97

Security Boulevard

JANUARY 6, 2023

Introduction By reducing information risks and vulnerabilities, a process called information security, also referred to as infosec, protects electronic data. InfoSec […]. Data collection, organization, processing, and deletion are all included in the definition of data management.

Computers and Electronics 52

Computers and Electronics InfoSec Data collection Mobile 52

The Security Ledger

FEBRUARY 26, 2021

We know that the shortage of infosec pros poses a cybersecurity risk. Episode 148: Joseph Menn on Cult of the Dead Cow also Veracode CEO Sam King on InfoSec’s Leaky Talent Pipeline. Do infosec’s racial and gender imbalances create their own kind of security risks? But what about the lack of diversity?

Cyber Risk 52

Cyber Risk Risk InfoSec Information Security 52

Troy Hunt

MARCH 18, 2024

The linked article talks about the author verifying the data with various people he knows, as well as other well-known infosec identities verifying its accuracy. That's just an unacceptable risk for which the old adage of "you cannot lose what you do not have" provides the best possible fix.

Data breaches 346

Data breaches Encryption Identity Theft InfoSec 346

Security Boulevard

JULY 8, 2023

Our thanks to BSides Knoxville for publishing their presenter’s outstanding BSides Knoxville 2023 content on the organizations’ YouTube channel. Permalink The post BSides Knoxville 2023 – Rob Fry – Security As A Video Game appeared first on Security Boulevard.

CISO 105

CISO Education Risk InfoSec 105

Notice Bored

MAY 24, 2021

T he recently-published ISO/IEC TS 27570 " Privacy guidelines for smart cities" neatly illustrates the creativity required to tackle new information risks arising from innovation in the realm of IoT, AI and short range data communications between the proliferating portable, wearable and mobile IT devices now roaming our city streets.

InfoSec 98

InfoSec Risk IoT Information Security 98

Malwarebytes

JULY 10, 2023

could be at risk. There is a possibility that any security issue on such a platform could lead to specific forms of targeted harassment of at-risk communities. Unfortunately for the good folks of Infosec Exchange, the vulnerability happened to affect the Glitch fork being used by…you’ve guessed it…Infosec Exchange.

InfoSec 80

InfoSec Penetration Testing Media Risk 80

SecureWorld News

DECEMBER 16, 2022

Here are three key takeaways to keep in mind when researching for a new role in InfoSec in 2023. With 94 percent of bigger organizations looking to maximize their multi-cloud approach in the new year, there is a growing need for cloud experts to help companies adapt securely or risk being a prime target for attackers.

Information Security 74

Information Security InfoSec Marketing Cybersecurity 74

SC Magazine

APRIL 7, 2021

As defenders, we need to decide which chat applications are allowed and why, while clearly communicating to management the risks associated with each,” the researchers wrote. It leads to lower awareness of risks in sharing across communication tools. Collaborative tools proved an easy target for hackers during the pandemic.

InfoSec 71

InfoSec Risk Technology Malware 71