Risk Management May 22, 2023

NIST launches cybersecurity initiative for small businesses

4 min read - For small organizations, the current cyber threat landscape is brutal. While big-name breaches steal the headlines, small businesses suffer the most from ransomware attacks. Additionally, other studies reveal that only half of all small businesses are prepared for a cyberattack.…

Government February 15, 2023

What’s going into NIST’s new digital identity guidelines?

4 min read - One of this year’s biggest positive cybersecurity events comes from the National Institute of Standards and Technology (NIST). For the first time since 2017, NIST is updating its digital identity guidelines. These new guidelines will help set the course for…

Risk Management July 28, 2022

NIST Supply Chain Security Guidelines: 10 Key Takeaways

3 min read - The U.S. Department of Commerce’s National Institute of Standards and Technology (NIST) recently published updated guidance for reducing cybersecurity risks in supply chains. Titled “Software Supply Chain Security Guidance,” the update is NIST’s response to directives issued by an executive…

Government September 2, 2021

What Biden’s Cybersecurity Executive Order Means for Supply Chain Attacks

5 min read - With cybersecurity guidelines coming down from the executive branch, industry and policymakers clearly both see the extent of the cyberattack problem. Take a look at the contents of the Biden administration’s May executive order and what it means for people…

CISO May 18, 2021

Using FAIR and NIST CSF for Security Risk Management

4 min read - Risk management and risk assessments go hand in hand, and most organizations have completed a security assessment based on maturity models at some point in their existence. However, more companies are realizing the need to complement maturity models with a…

CISO May 13, 2021

Security by Design and NIST 800-160, Part 2: Life Cycle Processes

4 min read - NIST 800-160 Volume 1 features many guidelines of interest to cybersecurity experts looking to boost their defenses through security by design. As we saw in the first post in this series, the key principles of this document provide a good…

CISO May 6, 2021

Security by Design and NIST 800-160, Part 1: Managing Change

5 min read - Building a house requires a blueprint. When it comes to building systems, National Institute of Standards and Technology’s (NIST) documents about security by design are some of the most reliable blueprints. As systems become more complex, they’re also more likely…

CISO July 22, 2020

4 Steps to Help You Plan a Cyber Resilience Roadmap

5 min read - What is cyber resilience?  According to IBM Security’s 2020 Cyber Resilient Organization Report, a cyber resilient organization is one that “more effectively prevents, detects, contains and responds to a myriad of serious threats against data, applications and IT infrastructure.”  In…

Endpoint March 4, 2020

Modernizing Threat Management for the Evolving Attack Surfaces of OT, IoT and IoMT

5 min read - The combination of digital transformation and the "Internet of Everything" is reshaping the modern landscape of OT, IoT and IoMT, meaning threat management must evolve in response.

Risk Management December 12, 2019

Achieve Your Business Goals by Seamlessly Integrating Cyber Risk Management

3 min read - Cyber risk management ensures that risks are considered and mitigated to protect the organization without losing sight of primary goals or blocking any digital transformation and innovation projects.