Application Security July 17, 2023

The top 10 API security risks OWASP list for 2023

5 min read - As more organizations rely on the automation and scale that web applications and connected services provide, application programming interface (API) security has become imperative. In just the last year alone, unique attackers targeting customer APIs grew by 400%, proving that…

Risk Management October 6, 2022

Digital transformation and risk management must go together

4 min read - The recent PwC 2022 Global Risk Survey gives a glimpse into what senior leaders think about their business efforts. The report opens with some expected highlights worth repeating: Change is increasingly fast and disruptive The COVID-19 pandemic caused disturbances in…

CISO December 28, 2021

Changing the Conversation with Risk Quantification

4 min read - “Quantitative risk analysis is the single most effective way to align security with business priorities and establish credibility with teams.” — U.S.-based CISO As organizations continue to leverage the latest technologies and move toward even greater interconnectivity in the pursuit…

Mobile Security September 10, 2021

Private 5G Security: Consider Security Risks Before Investing

3 min read - So, 5G is one of those once-in-a-generation types of leaps that will alter how we operate. However, 5G security comes with a lot of challenges. Private 5G networks require us to look at attack surface management in a different way.…

CISO August 25, 2021

How to Quantify the Actual Cost of a Data Breach for Your Own Organization

4 min read - As business leaders, we need to know what the biggest risks to our organizations are. All organizations face numerous disruptive challenges in today’s business environment that can create significant new business opportunities, but also can increase potential cybersecurity risks to…

Intelligence & Analytics June 7, 2021

Driving the Desire for FAIR: What Is Your ‘Why’ for Security Risk Quantification?

2 min read - One of the first questions I ask when working with an organization is “Why are you interested in making FAIR (Factor Analysis of Information Risk) a part of your standard risk management practice?” The answer is different for every client,…

CISO May 18, 2021

Using FAIR and NIST CSF for Security Risk Management

4 min read - Risk management and risk assessments go hand in hand, and most organizations have completed a security assessment based on maturity models at some point in their existence. However, more companies are realizing the need to complement maturity models with a…

Risk Management May 24, 2017

Don’t Sit Back and Wait for Security Risks to Disappear

3 min read - Many IT leaders and executives simply accept security risks as a result of poor decisions based on fear, misinformation and flawed insights.

CISO January 16, 2017

The Most Unnerving Security Trends to Prepare for in 2017

2 min read - To stay ahead of increasingly sophisticated cyberthreats, CISOs and IT professionals must pay attention to the top security trends emerging in 2017.

August 22, 2016

Attitude Adjustment: Cloud Security Risks Losing Steam as Top Worry

2 min read - Companies are still worried about cloud security risks, but many are more concerned about the resources required to integrate existing infrastructure.