Intelligence & Analytics March 7, 2019

Comprehensive Vulnerability Management in Connected Security Solutions

5 min read - To stay ahead of attackers, organizations should consider vulnerability management solutions that integrate with SIEM tools, network and threat modeling capabilities, and patch management systems.

Identity & Access January 17, 2018

The Risk Modeling Gotcha: Roles Are Like Hammers to Screws

2 min read - Roles are meant to drive efficiencies in provisioning, user management and recertifications, but many organizations still use them in risk modeling, impeding maturity and productivity.

Intelligence & Analytics March 23, 2017

Virtual Reality, Augmented Reality and Futuristic Threat Modeling

4 min read - Augmented and virtual reality can be invaluable tools for threat modeling in all sectors, but the emerging technologies also introduce new vulnerabilities.

Data Protection December 2, 2016

The Threat Model of 2017

3 min read - If a threat model assumes a system is operating within certain parameters, changes in the threat environment could trigger unintended second-order effects.

CISO August 22, 2016

Threat Modeling in the Enterprise, Part 3: Understanding the Context

3 min read - When evaluating overall risk in the context of threat modeling, it is important to identify the threat actors, their motivations and their capabilities.

CISO August 15, 2016

Threat Modeling in the Enterprise, Part 2: Understanding the Process

3 min read - The output of a carefully executed threat modeling exercise can be extremely valuable when informing your security control selection process.

CISO August 8, 2016

Threat Modeling in the Enterprise, Part 1: Understanding the Basics

5 min read - Threat modeling allows enterprises to manage risk more effectively and build a better understanding of the possible attack vectors.