The key to any vulnerability management program is the IT organization’s ability to assess the level of risk that vulnerabilities pose to the business. The better the assessment, the better able the organization will be to prioritize...

Vendors are beginning to incorporate artificial intelligence (AI) and machine learning (ML) capabilities into their cybersecurity tools, enabling those tools to do everything, from automating aspects of penetration testing to monitoring...

The most effective penetration testing methods combine threat intelligence, vulnerability scanning, and human expertise to validate the criticality of vulnerabilities through simulated attacks on an IT environment. Security professionals are now...

Cyber-risk assessment is an essential part of any security strategy, and increasingly, it plays a key role in risk-based business decisions. In addition to helping evaluate the security posture within an established IT environment, risk...

To prioritize risk-remediation efforts properly, you must have a system for quantifying cyber risk. Risk-scoring metrics can vary depending on the type of business, the threat landscape in which it operates, and its appetite for risk. Do you...

In retail, protecting customer data is more than a regulatory requirement: It is good business. Research shows that customers are willing to spend more money, and experience greater satisfaction, with retailers they believe do a good job of...

There is an inherent divide between IT security and IT operations, and it has deep roots.IT operations focuses on building and implementing systems that make business possible. IT’s job is to keep the business running while building out systems...