CISO April 19, 2018

As Cyber Risk Escalates, the C-Suite Must Take Action

4 min read - As long as C-suite executives believe that cybersecurity is an IT issue, they will remain disengaged from the solutions and their role in supporting a robust cyber risk management strategy.

Risk Management April 18, 2018

Lessons From the Marsh ‘Global Cyber Risk Perception Survey’: Disconnects Persist Despite Increased Executive Involvement

4 min read - Despite in increased involvement of various stakeholders in risk management, a recent risk perception survey revealed a persistent disconnect between executives and the security function.

Risk Management April 10, 2018

10 Takeaways From the ISO 31000:2018 Risk Management Guidelines

5 min read - The International Standards Organization (ISO) released an updated version of its risk management guidelines to help security leaders engage top leadership in cyber risk decision-making.

April 3, 2018

Less Than 30 Percent of IT Security Executives Can Prevent Ransomware Attacks, Survey Reveals

2 min read - According to a recent survey, less than 30 percent of IT security executives said they would be able to prevent ransomware attacks such as WannaCry and Petya.

Fraud Protection April 2, 2018

Five Steps for Investigating and Responding to Employee Fraud

4 min read - In the rush to deflect blame in the wake of an insider attack, many organizations fail to answer critical questions that could help them avoid similar cases of employee fraud in the future.

Data Protection March 29, 2018

Failure to Communicate Critical Data Risk to Business Leaders Can Have Perilous Consequences

3 min read - To avoid the disastrous consequences of a breach, security professionals must be able to effectively communicate critical data risk in a language business leaders can understand.

CISO March 28, 2018

Putting the ‘I’ in CISO: Why the Security Leader Must Become an Influencer

4 min read - To become an influencer within his or her organization, the security leader must effectively communicate with lines of business, engage with the board — and avoid abusing his or her veto power.

Incident Response March 13, 2018

Practicing Your Crisis Response: How Well Can You Handle Right of Boom?

4 min read - A data breach simulation is a great way to test your team's crisis response capabilities and prepare executives to deal with the aftermath of a cyberattack.

March 6, 2018

The Momentum Mandate: Is Cybersecurity Strategy Standing Still?

2 min read - According to recent research, many companies fail to adapt their cybersecurity strategy to the shifting cybercrime landscape, even in the wake of a major data breach.

Risk Management February 27, 2018

SEC Releases Updated Guidance For Cybersecurity Disclosure

4 min read - The SEC released updated guidance regarding cybersecurity disclosure for public companies, emphasizing the responsibility of executives to report material risks and incidents.