Risk Management July 28, 2022

NIST Supply Chain Security Guidelines: 10 Key Takeaways

3 min read - The U.S. Department of Commerce’s National Institute of Standards and Technology (NIST) recently published updated guidance for reducing cybersecurity risks in supply chains. Titled “Software Supply Chain Security Guidance,” the update is NIST’s response to directives issued by an executive…

Software Vulnerabilities November 9, 2021

A New Cybersecurity Executive Order Puts the Heat on Critical Infrastructure Suppliers

3 min read - Ransomware. Five years ago, the cybersecurity community knew that term well, although among others it was far from dinner table conversation. Times have changed. Since early 2020, ransomware has hit a slew of headlines. People inside and outside of the…

Government September 2, 2021

What Biden’s Cybersecurity Executive Order Means for Supply Chain Attacks

5 min read - With cybersecurity guidelines coming down from the executive branch, industry and policymakers clearly both see the extent of the cyberattack problem. Take a look at the contents of the Biden administration’s May executive order and what it means for people…

CISO May 18, 2021

Using FAIR and NIST CSF for Security Risk Management

4 min read - Risk management and risk assessments go hand in hand, and most organizations have completed a security assessment based on maturity models at some point in their existence. However, more companies are realizing the need to complement maturity models with a…

CISO May 13, 2021

Security by Design and NIST 800-160, Part 2: Life Cycle Processes

4 min read - NIST 800-160 Volume 1 features many guidelines of interest to cybersecurity experts looking to boost their defenses through security by design. As we saw in the first post in this series, the key principles of this document provide a good…

CISO May 6, 2021

Security by Design and NIST 800-160, Part 1: Managing Change

5 min read - Building a house requires a blueprint. When it comes to building systems, National Institute of Standards and Technology’s (NIST) documents about security by design are some of the most reliable blueprints. As systems become more complex, they’re also more likely…

CISO July 22, 2020

4 Steps to Help You Plan a Cyber Resilience Roadmap

5 min read - What is cyber resilience?  According to IBM Security’s 2020 Cyber Resilient Organization Report, a cyber resilient organization is one that “more effectively prevents, detects, contains and responds to a myriad of serious threats against data, applications and IT infrastructure.”  In…

Endpoint March 4, 2020

Modernizing Threat Management for the Evolving Attack Surfaces of OT, IoT and IoMT

5 min read - The combination of digital transformation and the "Internet of Everything" is reshaping the modern landscape of OT, IoT and IoMT, meaning threat management must evolve in response.

Risk Management December 12, 2019

Achieve Your Business Goals by Seamlessly Integrating Cyber Risk Management

3 min read - Cyber risk management ensures that risks are considered and mitigated to protect the organization without losing sight of primary goals or blocking any digital transformation and innovation projects.

Incident Response November 6, 2019

Measure and Improve the Maturity of Your Incident Response Team

5 min read - Incident response and management requires continual growth. Your team will not become proficient overnight.