SC Magazine

APRIL 26, 2021

Kristin Sanders, CISO for the Albuquerque Bernalillo County Water Utility Authority, revealed how New Mexico’s largest water and wastewater utility has been addressing the security challenge. The same philosophy applies to ABCWUA’s installation of its cloud-based enterprise network security software.

CISO 82

CISO IoT VPN InfoSec 82

SC Magazine

APRIL 30, 2021

Gregory Touhill, former federal chief information security officer and deputy assistant Homeland Security secretary for cyber security operations, seen here at a House Foreign Affairs Committee hearing in 2015 in Washington, DC. chief information security officer. Photo by Mark Wilson/Getty Images).

CISO 109

CISO Cybersecurity Artificial Intelligence Government 109

The Last Watchdog

JULY 29, 2021

The good news is that there is a very powerful, proven tool that can help companies decipher complex networking security relationships. With Black Hat USA 2021 just around the corner, I had a deep discussion about this with Eric Kedrosky, CISO and Director of Cloud Research at Sonrai Security.

Risk 214

Risk Cloud Migration Digital transformation Software 214

SC Magazine

JANUARY 29, 2021

For example, companies with exposed IoT are more than 50% more likely to have email security issues, according to a new report and blog post from the Cyentia Institute and RiskRecon. But what does that correlation mean for chief information security officers? So, how can CISOs operationalize that kind of information?

IoT 98

IoT Internet Internet CISO 98

Security Boulevard

OCTOBER 25, 2021

Wouldn’t it be great if you had enough confidence in your information security program that if a criminal gang attacked you, you would be able to defend yourself, keep your business going and notify the appropriate legal authorities and any vendor partners that might be impacted? The post Can you Become Ransomware-Proof?

Ransomware 131

Ransomware Information Security Cyber Risk CISO 131

SC Magazine

MAY 17, 2021

Senior security and IT leaders point to employees and their companies’ own supply chains as the source of constant risk of malicious and unintentional vulnerabilities, exacerbated by remote work and cloud-based environments. . Click here to download the full report, “Are people missing from your cybersecurity strategy?”

Cybersecurity 96

Cybersecurity Social Engineering Risk CISO 96

Security Boulevard

NOVEMBER 15, 2022

The post BSidesKC 2022 – Joshua Brown’s ‘So, You Want To Be A CISO…?’ ’ appeared first on Security Boulevard. Our sincere thanks to [BSidesKC 2022][1] for publishing their [outstanding conference videos][2] on the organization's [YouTube][3] channel.

CISO 40

CISO Education Information Security Cybersecurity 40

Security Boulevard

JULY 20, 2022

Our sincere thanks to Security BSides San Francisco for publishing their outstanding conference videos on the organization's YouTube channel. The post BSidesSF 2022 – Tom Alcock’s, Caleb Sima’s, Fermin Serna’s, Jessica Ferguson’s ‘CISO Panel Discussion’ appeared first on Security Boulevard.

CISO 40

CISO Education Information Security Cybersecurity 40

SC Magazine

FEBRUARY 8, 2021

discussion… The key is how remote access can be implemented securely – with strong authentication mechanisms, access controls, auditing, and session recording.”. There is a justifiable reason for providing remote access,” agreed Mike Hamilton, president and chief information security officer at CI Security and former CISO of Seattle.

Internet 144

Internet Internet CISO Media 144

Lenny Zeltser

MAY 11, 2023

Becoming a chief information security officer (CISO) might not make sense for everyone in the field, and that’s okay. How might a person with a network security background get into incident response? What awaits those who get tired of working in a security operations center (SOC)?

Cybersecurity 113

Cybersecurity Education CISO Information Security 113

Cisco Security

JUNE 15, 2022

That doesn’t mean the risk is zero, noted Christos Sarris , a longtime information security analyst. He shared an anecdote in Cisco Secure’s recent e-book, “ Building Security Resilience ,” about finding malware on an intensive care unit device that compromised a pump used to deliver precise doses of medicine.

Internet 145

Internet Internet Manufacturing IoT 145

SC Magazine

JANUARY 29, 2021

. “Companies large and small alike are going back and looking through their environments and their processes,” said Jerry Davis, founder of risk management firm Gryphon X, LLC and former chief information security officer at NASA and the U.S. Department of Education. “No No one wants to be patient zero.”.

InfoSec 97

InfoSec CISO Media Software 97

Security Boulevard

JUNE 18, 2022

In many cases, more significant than the amount spent on combined network security, cloud security, and artificial intelligence. The chief information security officer has multiple responsibilities to the organization, including security protection of all corporate assets and resources.

Hacking 84

Hacking CISO Cybersecurity Banking 84

eSecurity Planet

FEBRUARY 21, 2023

Blue team members might be led by a chief information security officer (CISO) or director of security operations, making this team the largest among the three. Blue teams consist of security analysts, network engineers and system administrators.

Social Engineering 111

Social Engineering Penetration Testing Engineering Risk 111

Spinone

JULY 29, 2020

To automate your job and remain time-efficient, you’ll probably need specialized software that helps you with app security assessment and whitelisting/blacklisting. Network Security Engineer As the name suggests, a network security engineer’s job is to protect corporate networks from data breaches, human error, or cyberattacks.

Penetration Testing 52

Penetration Testing CISO Engineering Software 52

SC Magazine

FEBRUARY 1, 2021

Alyssa Miller, business information security officer at S&P Global Ratings, told SC Media that organizations who build out their programs from scratch tend to first stumble in two areas that underpin most threat intelligence programs: asset discovery and log management. “Any Starting from scratch.

Cyber threats 80

Cyber threats CISO Media Retail 80

Security Boulevard

NOVEMBER 15, 2022

While the majority of enterprise IT security managers rely on threat intelligence to reduce cybersecurity risk, many still lack the necessary skills and resources to carry out these initiatives fully, according to a Vulcan Cyber report on threat intelligence adoption trends and challenges.

Information Security 98

Information Security Risk Cybersecurity CISO 98

SecureWorld News

JUNE 23, 2020

I have spent a good majority of my career in accounting firms helping clients. I love this space because it's always changing and there's always something new to learn.".

Authentication 98

Authentication CISO Cybersecurity Accountability 98

Lenny Zeltser

JUNE 7, 2024

Episode 2: Adaptation In the second episode, I share the unusual path I followed to my current role as a CISO, having undertaken a variety of positions in cybersecurity. System administration, network security, penetration testing, professional services, product management. It's been quite a journey!

Penetration Testing 68

Penetration Testing System Administration CISO Firewall 68

SecureWorld News

MAY 19, 2020

When David Sherry became Chief Information Security Officer at Princeton University, he says cybersecurity was done well. "I I don't want you to think security at Princeton was some sort of vast wasteland. In many ways, leading a security mission out of a university is like securing a city.

Cybersecurity 58

Cybersecurity CISO Risk Education 58

SC Magazine

JUNE 4, 2021

Network security: Includes Direct Connect (DC) private and public interfaces; DMZ, VPC, and VNet endpoints; transit gateways; load balancers; and DNS. Data Security: Encrypt data in transit and at rest, S3 bucket data (at rest), and EBS root volume and dynamo db. Raj Badhwar, chief information security officer, Voya Financial.

Penetration Testing 78

Penetration Testing Technology DNS CISO 78

eSecurity Planet

MAY 28, 2021

Last week’s RSA Conference covered a litany of network security vulnerabilities, from developing more robust tokenization policies and to addressing UEFI-based attacks, and non-endpoint attack vectors. As of now, the information security industry is at the outset of implementing SBOM for software products.

Software 121

Software DNS Firmware VPN 121

CyberSecurity Insiders

JUNE 25, 2021

By Shay Siksik, VP Customer Operations and CISO, XM Cyber. Shay Siksik has been a cybersecurity evangelist for more than a decade, always with a passion for customer service, process improvement, and information security. There are things we know: 2 + 2 = 4, for example. We call this common knowledge.

Cyber Risk 79

Cyber Risk Risk Penetration Testing Cybersecurity 79

Responsible Cyber

JULY 14, 2024

Key Responsibilities: Leading security operations center (SOC) Developing security strategies Managing incident response efforts Chief Information Security Officer (CISO): Serves as the top executive responsible for an organization’s information security strategy and implementation.

Cybersecurity 52

Cybersecurity Education Penetration Testing Engineering 52

Spinone

OCTOBER 19, 2018

The average US salary for a cybersecurity specialist is currently $82,000 and salaries for top chief information security officers (CISOs) have reached as high as $420,000 , and are expected to continue to grow.

Cybersecurity 61

Cybersecurity Engineering CISO Architecture 61

SC Magazine

JUNE 24, 2021

The following year, Ponemon research showed the majority of healthcare organizations find it difficult to recruit security staff, with nearly 50% reporting that they don’t have a chief information security officer on staff. Virtual CISOs are another option, and their use has been rapidly increasing in the health care space.

Healthcare 62

Healthcare CISO Marketing Cybersecurity 62

eSecurity Planet

SEPTEMBER 16, 2024

This safeguards sensitive information while lowering the danger of illegal data exposure. Protect sensitive information: Secures essential corporate data from unauthorized access and breaches. Keeping sensitive information secure and confidential is a top priority. What Is the ISO 27001 Cloud Security Policy?

Risk 71

Risk Policy Compliance Encryption Technology 71

eSecurity Planet

AUGUST 1, 2023

MSPs or managed IT service providers can absorb more of the IT department’s duties, from full outsourcing to focused IT services such as email, network management, cloud migration, or patch management.

Cybersecurity 98

Cybersecurity Cloud Migration Firewall Penetration Testing 98

CyberSecurity Insiders

SEPTEMBER 3, 2021

These kinds of stories are reported with so much frequency that data-rich companies – and the chief information security officers (CISOs) responsible for their IT network security – have resigned themselves to the certainty that they will become the target of a cybersecurity breach. or follow us on LinkedIn.

Cybersecurity 40

Cybersecurity Data breaches Technology Threat Detection 40

Security Boulevard

OCTOBER 4, 2021

Information security practitioners have published a lot of articles around topics like how to build and run a security operations center (SOC) and specific SOC functions such as incident response and threat hunting. The post Running Robust Managed Detection and Response Services appeared first on Security Boulevard.

Information Security 52

Information Security CISO Risk Government 52

eSecurity Planet

SEPTEMBER 23, 2022

Some of these organizations won’t even have a chief information officer (CIO) or chief information security officer (CISO) that participates in the executive suite and that would count as a participating manager.

Cybersecurity 132

Cybersecurity Risk Passwords Encryption 132

eSecurity Planet

FEBRUARY 8, 2023

They are two different tools, each essential in their own way and critical for chief information security officers (CISOs) to keep their infrastructure safe. Despite their differences, both vulnerability scans and penetration tests are part of the wider vulnerability management framework or process.

Penetration Testing 105

Penetration Testing Software IoT Policy Compliance 105

Security Boulevard

MAY 31, 2023

The task is now more challenging: According to a report by cyberinsurance provider Beazley, network attacks rose in the first quarter of 2023.

Cybersecurity 111

Cybersecurity Penetration Testing CISO Security Awareness 111

SC Magazine

MAY 13, 2021

On the flip side, just as security leaders should be scouring the open source community for talent, contributors to open source projects should be thinking about how they can use their unique skills to propel their careers forward, according to Bernard Brantley, the brand new chief information security officer at the aforementioned Corelight.

Engineering 76

Engineering Technology Media Data collection 76

SecureWorld News

MAY 29, 2020

Four expert panelists joined us to discuss data security through the lenses of insider threat, third-party risk, and remote work challenges on our series of SecureWorld Web Conferences for 90 minutes of Q&A. Who are the data security panelists? Jadee Hanson, CISO & CIO, Code42. Jake Bernstein, Esq. Arif Hameed, Sr.

Risk 53

Risk Technology Marketing Phishing 53

Spinone

DECEMBER 26, 2018

Cyber threat management , being an advanced discipline, craves analytical attention and a commander’s strategic skills of information security executives to confront and overcome the multi-dimensional cyber threats.

Security Awareness 40

Security Awareness Risk Cyber threats Cyber Risk 40

SC Magazine

APRIL 14, 2021

When we started our identity management journey… we were struggling with defining it,” admitted Greg McCarthy, chief information security officer with the city of Boston. “We Greg McCarthy, CISO of Boston. We wanted… a clear definition [so that] our users would understand what we’re doing.

Passwords 64

Passwords Architecture Password Management Government 64