Collaborate Disseminate
Together with the National Cybersecurity Center of Excellence (NCCoE), the National Institute of Standards and Technology (NIST) has released a series of practice guides that focuses on data integrity: the property that data has not been altered in an … Continue reading How to Leverage NIST Cybersecurity Framework for Data Integrity
As recently as 2017, security and compliance professionals at many of Tripwire’s large enterprise and government customers were talking about migration to the cloud as a possibility to be considered and cautiously explored in the coming years. Wi… Continue reading Letting Go While Holding On: Managing Cyber Risk in Cloud Environments
Every organization is led by people who are responsible for setting the overall direction, establishing priorities, maintaining influence over organizational functions and mitigating risks. Given the wide range of organizational types across industry s… Continue reading Cybersecurity Is Every Leader’s Job
As noted previously—and as we all know—an organization cannot be secure until the entire workforce is engaged in reducing cyber risks. Each member of the group has the power to harm or to help, since each one has access to information syste… Continue reading Cybersecurity Is (Still) Everyone’s Job
As we all know by now, the human factor is crucial to enterprise security. Cyber attacks routinely exploit vulnerable human behaviors to gain entry, since organizations must trust their own people—or at least some of them—with access to cri… Continue reading Cybersecurity Is Everyone’s Job
Amidst the volatility, uncertainty and noise of the cybersecurity field, few best practice frameworks have emerged as consistently reliable and useful as the Center for Internet Security (CIS) Security Controls. Recently updated as version 7.0, the CIS… Continue reading Jumpstarting Your Cyberdefense Machine with CIS Controls V7
Navigating the noise, complexity and uncertainties of the cybersecurity landscape demands clear thinking. But that’s no easy task. The security professional today has to be knowledgeable about the organization’s own environment, business ne… Continue reading Security Mindset: Balancing Firmness and Flexibility
“Cyber” is not an appropriate category of risk. Often cited in 10-K reports, discussed by board directors and C-suite executives, and referenced by Enterprise Risk Management (ERM) or Governance, Risk and Compliance (GRC) professionals, the category merely perpetuates ambiguity and lack of understanding related to all things “cyber.” Because of this (and other reasons, of […]… Read More
The post “Cyber” Is Not an Appropriate Risk Category appeared first on The State of Security.
Continue reading “Cyber” Is Not an Appropriate Risk Category