Incident Response April 3, 2023

The Important Role of SOAR in Cybersecurity

4 min read - Understaffed security teams need all the help they can get, and they are finding that help through SOAR. SOAR — security orchestration, automation and response — is defined by Gartner as the “technologies that enable organizations to collect inputs monitored…

Zero Trust March 7, 2023

SOAR, SIEM, SASE and Zero Trust: How They All Fit Together

4 min read - Cybersecurity in today’s climate is not a linear process. Organizations can’t simply implement a single tool or strategy to be protected from all threats and challenges. Instead, they must implement the right strategies and technologies for the organization’s specific needs…

Data Protection August 1, 2022

How to Prepare for and Respond to a Data Privacy Breach

4 min read - Before I started covering cybersecurity, I thought the term ‘breach’ had a single meaning — that an attacker stole data from a computer system. I also thought all the different versions of the word meant the same thing. However, I’ve…

Intelligence & Analytics October 12, 2021

What Is Extended Detection and Response (XDR)?

6 min read - Extended detection and response (XDR) is a security solution that delivers end-to-end visibility, detection, investigation and response across multiple security layers. Core components of an XDR architecture include federation of security signals, higher-level behavioral and cross-correlated analytics, and closed-loop and…

Intelligence & Analytics September 14, 2021

Privileged Access Management: The Future of Cyber Resilience

2 min read - Attacks against critical infrastructure and government agencies have been surging. Some attackers want to extort money; others intend to steal data. But the victims all have one thing in common: they need to be able to fend off attacks and…

Zero Trust August 17, 2021

Zero Trust or Bust: What It Is and Why It Matters to Data Security

4 min read - How many different ways can data be compromised? First, both external and internal threats can target it. External threats can come in the form of malware or ransomware. Meanwhile, internal threats can come from malicious insiders working from behind trusted…

Intelligence & Analytics July 7, 2021

What’s Next for SIEM? A View From the 2021 Gartner SIEM Magic Quadrant

4 min read - Security information and event management (SIEM) solutions continue to evolve, as shown in the 2021 Gartner Magic Quadrant for SIEM, which is a great representation of the changing security landscape and the evolution of key capabilities and experiences that are…

Intelligence & Analytics May 3, 2021

Alert Fatigue: How AI Can Help You Address Your Most Important Alerts

3 min read - When someone says the word hurricane, I hear the shrill weather-alert warning sound in my head. Having grown up in Florida and now living in North Carolina, I’ve been through many hurricanes and have the routine down — stock up…

Intelligence & Analytics December 1, 2020

SIEM Trends: What to Look for in a Security Analytics Provider

3 min read - The authors of The Forrester Wave™ turn to a quote from ‘The Empire Strikes Back’ to sum up the direction of SIEM: “You truly belong here with us among the clouds.” Sticking with ‘Star Wars’ for guidance, we might also…

Intelligence & Analytics October 23, 2020

What’s New in 2020: Gartner Market Guide for SOAR Solutions

3 min read - In a security environment burdened by too many tools, a shortage of skilled staff and an increasing number of cyberattacks, automation benefits that help bring efficiency and prioritization to the security operations center (SOC) are primarily delivered through security orchestration,…