Cisco Security

JANUARY 10, 2023

As the majority of the global Covid fog finally started lifting in 2022, other events – and their associated risks – started to fill the headspace of C-level execs the world over. In my role, I regularly engage with CISOs in all kinds of sectors, representatives at industry bodies, and experts at analyst houses.

CISO 142

CISO Insurance Cyber Insurance Phishing 142

Jane Frankland

FEBRUARY 7, 2025

But as a CISO or cyber risk owner, it’s not just about locking down sensitive informationits about doing it without slowing down your people. This is where the real opportunity lies, and what Im exploring in this blog. For CISOs and cyber risk owners, this isnt just a riskits a gamble no one can afford to take.

Cyber Risk 130

Cyber Risk CISO Risk Encryption 130

Security Boulevard

MARCH 30, 2021

By now most CISOs understand that focusing your cybersecurity program on regulatory compliance is no longer sufficient. The post Developing a Risk Management Approach to Cybersecurity appeared first on Hyperproof. The post Developing a Risk Management Approach to Cybersecurity appeared first on Security Boulevard.

Risk 136

Risk Cybersecurity CISO Government 136

Security Boulevard

DECEMBER 30, 2024

In this post, we look at the enforcement actions the SEC has taken and what public company CISOs should do to stay in compliance. As part of their fiduciary duties, boards play a key role in the oversight of risks from cybersecurity threats. This pushed C-level executives and boards to adopt measures for compliance and transparency.

Cybersecurity 85

Cybersecurity Cyber Risk CISO Risk 85

Cisco Security

APRIL 26, 2021

Insights from our new Advisory CISO, Helen Patton. If there’s anyone who’s been put through their paces in the security industry, it’s Helen Patton , our new Advisory Chief Information Security Officer (CISO). Helen has come to Cisco from The Ohio State University, where she served as CISO for approximately eight years.

CISO 120

CISO Education Technology Media 120

Security Boulevard

OCTOBER 28, 2022

CVSS score does not directly relate to the risk to your organization. Please for everyone’s sake, including your developers, produce a better algorithm for managing risk in your organization. See my first insight from this week, find a better algorithm that fits your organization that mirrors your risk profile and tolerance.". .

CISO 122

CISO Cybersecurity Risk 122

Duo's Security Blog

FEBRUARY 23, 2021

Hello, I am Helen Patton, and I am the newest Advisory CISO at Duo. While I was a CISO at Ohio State we partnered with Duo to implement MFA across our organization. Talk to a Higher Education CISO (note to security product engineers – if you ever want a testbed for your ideas, partner with a university). We don’t care.

CISO 121

CISO Education Banking Retail 121

The Last Watchdog

DECEMBER 16, 2021

After all, a malicious actor only needs a few minutes of time with a privileged account to take over the entire directory, and there are volumes of exploitable identity risks at every organization. The ascendency of CISOs. In 2022 we expect to see organizations increasingly moving identity management systems into the CISO organization.

CISO 262

CISO Ransomware Risk Authentication 262

Javvad Malik

NOVEMBER 27, 2020

I saw Cygenta posted their top 5 blogs of the year on Twitter and thought that it was a wonderful idea to rip off / borrow / be inspired by. So, I proudly present, my top 5 read blogs during the course of 2020. From my blog that is. 5: Writing better risk statements Do you struggle to articulate security risks?

InfoSec 100

InfoSec CISO Risk 100

CyberSecurity Insiders

JANUARY 12, 2022

In this blog, we’ll look at the root causes of concern for today's CISO and share some practical strategies to deter cybercriminals. The CISO role can be an unenviable one. Is the cyber deck stacked against today's CISO? If you own the risks, who owns the elimination? ' is usually swift.

CISO 126

CISO Cybercrime Risk Healthcare 126

The Last Watchdog

MARCH 1, 2023

The linked white paper explains the three stages of this process: •Assessing secrets leakage risks •Establishing modern secrets management workflows •Creating a roadmap to improvement in fragile area This model emphasizes that secrets management is more than just how an organization stores and shares secrets.

Authentication 222

Authentication CISO Passwords Software 222

The Last Watchdog

JANUARY 8, 2023

Smarter security to me broadly refers to relentlessly focusing on fundamentals while maturing the program, making sure your risk posture aligns with your business strategy. When it comes down to it, C-level goals and CISO initiatives are not all that misaligned. This leads to revenue gains and positive customer outcomes.

Risk 214

Risk Cybersecurity Technology CISO 214

Anton on Security

SEPTEMBER 13, 2024

Ideally, we think this conversation should start with defining security goals framed in business outcomes like capabilities, velocity, quality, cost, and risk.”

Digital transformation 130

Digital transformation CISO Technology Cybersecurity 130

Security Boulevard

FEBRUARY 14, 2022

CISO is a high-stakes position, and possibly the most important business relationship/direct report a CEO can have. At Axio, our platform enables companies to perform cyber risk quantification (CRQ), which analyzes the unique risks to.

CISO 96

CISO Cyber Risk Risk Cyber Attacks 96

Anton on Security

JANUARY 28, 2025

In addition to publishing blogs and papers, our Cloud Security Podcast by Google episodes have featured experts discussing AIs impact on security, offering practical implementation advice, and addressing emerging challenges. A recap of our key blogs, papers and podcasts on AI security in 2024follows.

CISO 100

CISO Risk Government Artificial Intelligence 100

Security Boulevard

APRIL 23, 2024

Have you heard someone indicate they buy down risk? In today’s digital economy, cyber risk is a top concern of everyone from the Board and CEO to the CFO and ultimately the CISO. The post Seven Ways DSPM Helps CISOs Buy Down Cyber Risk appeared first on Security Boulevard.

Cyber Risk 64

Cyber Risk CISO Risk Data breaches 64

Lenny Zeltser

FEBRUARY 10, 2025

As the year 2025 rushes forward, the responsibilities of CISOs are continuing to evolve. We increasingly recognize the importance of not just identifying risks but actively addressing them through direct action and influence. The year will continue to shape the CISO role into an exciting combination of leadership and tech expertise.

CISO 56

CISO Technology Risk Data breaches 56

Duo's Security Blog

JUNE 15, 2023

Third party security risk is an issue that frequently comes up in my discussions with clients. Meanwhile, Prevalent noted that companies are currently big on exposure but small on preparation, with a staggering 45% still relying on manual spreadsheets to assess third party risk. Control the risk. How simple is the solution?

Risk 145

Risk Authentication Phishing Insurance 145

The Last Watchdog

JANUARY 17, 2022

Minimum adherence to security requirements policy, based on an application’s inherent risk profile, can lead to reduction in risk vulnerabilities. Accountability for software security often falls under the Chief Information Security Officer (CISO). Like other major changes, it’s important to set realistic expectations.

CISO 240

CISO Software B2B Marketing 240

Jane Frankland

OCTOBER 13, 2021

I went through some of them this week at the Cyber Security Virtual Conference: Celebrating Women in Cyber, and with PWC Canada when they engaged me to open their one day event – SheProtects: Future CISO Program. She sees risk everywhere, is accountable for it, and is mostly at odds with the business. Tip 2 – Believe you can do it.

CISO 100

CISO Cybersecurity Risk Marketing 100

The Last Watchdog

FEBRUARY 14, 2022

Which topics should CEOs, CIOs and CISOs have on their radar when it comes to Identity and Access Management ( IAM ) and cyber security risks in 2022? recurring re-confirmations of initially assigned rights and roles in all connected systems by the employees’ manager – to reduce the risk of abuse and accidents.

CISO 245

CISO Social Engineering Authentication Risk 245

The Last Watchdog

NOVEMBER 20, 2023

The Qualys Enterprise TruRisk Platform centers around helping customers holistically measure, effectively communicate, and proactively eliminate cyber risk, with a hyper focus on the impact of cyber risk on business risk.

Cyber Risk 100

Cyber Risk Risk CISO Insurance 100

Appknox

OCTOBER 18, 2023

Dive into Appknox's SBOM blog guide. Essential for CISOs & CTOs to elevate supply chain security with unmatched transparency & proactive risk mitigation.

CISO 111

CISO Risk Software 111

Krebs on Security

NOVEMBER 4, 2022

LinkedIn also said it is adding a warning to some LinkedIn messages that include high-risk content, or that try to entice the user into taking the conversation to another platform (like WeChat). “These warnings will also give you the choice to report the content without letting the sender know.” A follow-up story on Oct.

Scams 293

Scams Artificial Intelligence Cryptocurrency Accountability 293

Security Boulevard

MARCH 24, 2022

Identity credentials and source code are critical assets that can create major risks for your organization when exposed by breaches of third-party cloud service companies that provide identity management and software composition analysis. Know the risks of pushing your crown jewels into other services running in the cloud.

Risk 122

Risk Software Engineering Passwords 122

NetSpi Executives

JANUARY 16, 2024

You’re about to have your first Red Team experience, or maybe your first one in the CISO seat of your organization. Besides the debrief meeting and handing you deliverables, what’s next for a CISO after a Red Team exercise? The post What is the CISO Experience in a Red Team Exercise? What Happens After a Red Team Exercise?

CISO 119

CISO Penetration Testing Social Engineering Engineering 119

Security Boulevard

JANUARY 24, 2025

Former Military Intelligence Agents Turned Cybersecurity Experts at CISO Global In todays high-stakes digital landscape, hiring remotely requires diligence and vigilance. Risks and Strategies for Securing Remote Workers appeared first on CISO Global. Trust is important, but verifying that trust is non-negotiable.

Risk 75

Risk CISO Cybersecurity 75

Krebs on Security

DECEMBER 1, 2022

29, roughly the same time Pyle published a blog post about his findings , ConnectWise issued an advisory warning users to be on guard against a new round email phishing attempts that mimic legitimate email alerts the company sends when it detects unusual activity on a customer account. ET: Included statement from ConnectWise CISO.

Phishing 305

Phishing Architecture Passwords Accountability 305

Security Boulevard

NOVEMBER 1, 2022

CISOs continue to face an uphill battle, and one of their biggest headaches is where to focus cyber investments. The post Cyber Risk Quantification: Three Key Use Cases appeared first on Axio. The post Cyber Risk Quantification: Three Key Use Cases appeared first on Axio.

Cyber Risk 86

Cyber Risk Risk Cyber Insurance Insurance 86

SecureWorld News

OCTOBER 5, 2023

Michael Gregg, the CISO for the State of North Dakota, speaks across the country, including keynoting at SecureWorld Detroit on Sep. A recent blog by Frank Domizio titled " The CISO Role: Beyond Technology " explores exactly what I am talking about. That's a soft skill that even the most adept CISOs are still trying to master.

CISO 112

CISO Risk Government Cybersecurity 112

Anton on Security

MAY 24, 2023

talk to us :-) These are the episodes: EP52 Securing AI with DeepMind CISO EP68 How We Attack AI? What portion of AI-related “badness” (harm, risk, etc) fits within the cybersecurity domain? BTW, if you have anything fun to say about LLM security (easy!) and you actually know what you are talking about (hard!),

Artificial Intelligence 130

Artificial Intelligence CISO Risk Marketing 130

Security Boulevard

FEBRUARY 26, 2025

When reporting to the board, a CISO must translate risk into identifiable terms to present key findings and ensure that all cybersecurity initiatives are aligned with business objectives. Cyber risk mitigation expenditures help translate risk into potential additional profit.

CISO 64

CISO Cybersecurity Cyber Risk Risk 64

Security Boulevard

JUNE 7, 2021

The post How to Relieve Vendor Risk Assessment Headaches (With a Vendor Risk Management Solution) appeared first on Hyperproof. The post How to Relieve Vendor Risk Assessment Headaches (With a Vendor Risk Management Solution) appeared first on Security Boulevard. SaaS vendors, cloud infrastructure, Read More.

Risk 104

Risk CISO Government Cybersecurity 104

BH Consulting

JANUARY 30, 2025

Cyber risk remains top of mind for business leaders A regular January fixture, the World Economic Forums Global Risk Report 2025 features two technology-related threats among the top five risks for the year ahead and beyond. The report ranks risks by severity over two-year and 10-year timeframes.

Cyber Risk 69

Cyber Risk Computers and Electronics Risk CISO 69

The Last Watchdog

APRIL 3, 2023

Related: Taking a risk-assessment approach to VM Unlike a typical cyber attack that exploits a software vulnerability, recent cyber attacks exploit other security risks, such as misconfigurations, security deviations, and posture anomalies. But VM vendors tend to focus more on software vulnerabilities and leave out everything else.

Cyber Attacks 214

Cyber Attacks Risk Software Technology 214

The Last Watchdog

MARCH 4, 2024

Assess risks. Creating a solid cybersecurity foundation begins with understanding the organization’s risks. A recent study found only 27% of charities undertook risk assessments in 2023 and only 11% said they reviewed risks posed by suppliers. Keep software updated.

Social Engineering 213

Social Engineering Risk Cybersecurity Authentication 213

SecureWorld News

MARCH 11, 2025

If I were starting over, I wouldn't spend years in school unless I had a very specific goal, like: Becoming a CISO or security executive (some companies still prefer degrees) Working in federal security or a government contractor role (many require one) Pivoting from a non-technical background (if I had zero IT/security knowledge) Otherwise?

Cybersecurity 98

Cybersecurity CISO Risk Government 98