Government September 2, 2021

What Biden’s Cybersecurity Executive Order Means for Supply Chain Attacks

5 min read - With cybersecurity guidelines coming down from the executive branch, industry and policymakers clearly both see the extent of the cyberattack problem. Take a look at the contents of the Biden administration’s May executive order and what it means for people…

Fraud Protection July 30, 2021

5 Ways to Increase Password Safety

3 min read - You make password decisions every week. Maybe you create a new account, reset a password or respond to a password change prompt. And each time you make a seemingly small or insignificant mistake in regard to password safety, such as…

CISO May 27, 2021

Security by Design and NIST 800-160, Part 4: Technical Processes From ‘Go’ to Disposal

4 min read - Even if you are not an engineer, NIST 800-160 Volume 1 could help you in your work to understand security by design. It shows what you need to secure your information system. In the other blogs in this series, we’ve summarized…

Risk Management May 20, 2021

Security by Design and NIST 800-160, Part 3: Technical Processes

3 min read - Picking up where we left off on the security-by-design thinking offered by NIST 800-160 Volume 1, we move onward in Chapter 3, focusing on the technical management processes. Let’s look at some security design principles at the technical processes level.…

CISO May 18, 2021

Using FAIR and NIST CSF for Security Risk Management

4 min read - Risk management and risk assessments go hand in hand, and most organizations have completed a security assessment based on maturity models at some point in their existence. However, more companies are realizing the need to complement maturity models with a…

CISO May 13, 2021

Security by Design and NIST 800-160, Part 2: Life Cycle Processes

4 min read - NIST 800-160 Volume 1 features many guidelines of interest to cybersecurity experts looking to boost their defenses through security by design. As we saw in the first post in this series, the key principles of this document provide a good…

CISO May 6, 2021

Security by Design and NIST 800-160, Part 1: Managing Change

5 min read - Building a house requires a blueprint. When it comes to building systems, National Institute of Standards and Technology’s (NIST) documents about security by design are some of the most reliable blueprints. As systems become more complex, they’re also more likely…

Intelligence & Analytics January 29, 2021

Space Cybersecurity: How Lessons Learned on Earth Apply in Orbit

6 min read - The universe is getting smaller, and space cybersecurity is keeping up. On May 30, 2020, nearly a decade after the Space Shuttle program ended, people witnessed a first: a vehicle built as part of a public-private partnership (between SpaceX and…

CISO July 22, 2020

4 Steps to Help You Plan a Cyber Resilience Roadmap

5 min read - What is cyber resilience?  According to IBM Security’s 2020 Cyber Resilient Organization Report, a cyber resilient organization is one that “more effectively prevents, detects, contains and responds to a myriad of serious threats against data, applications and IT infrastructure.”  In…

Cloud Security May 21, 2020

The Connection Between Cloud Service Providers and Cyber Resilience

3 min read - Cloud service providers offer great performance and resilience, but ultimately it is up to individual organizations to determine whether these long-known advantages outweigh the possible downsides.