Heath Anderson, Director of Information Security and Technology at LogicGate, discusses how to build business and operational resiliency with a governance, risk management and compliance (GRC) program.
Lone wolf actors often leave clues about their intentions through several stages of the attack cycle. For corporate security executives, using data and protective intelligence to identify these clues is crucial for mitigation and prevention.
Listen to Dana Keys, Intelligence & Support Lead at Sony Electronics sit down with Security in our latest Women in Security Edition of The Security Podcasts.
A useful GSOC is one that understands the problem a company wants to solve so that the data collection requirements and analytics are relevant and staff with the right expertise are in place. If you think that establishing a GSOC is the next step for your enterprise, three key elements will determine its success.
Awards season is upon us. Next month, this very magazine will present its Most Influential People in Security. Later in September of this year, at GSX in Orlando, U.S. security managers, consultants, officers, manufacturers and others will learn whether OSPA's judges have tapped them for an Outstanding Security Performance Award.
Calculating your worth during a job search should be an informed exercise done before interviews start. While a good understanding of the value of your background and experience is critical, it is also important to have some knowledge of the compensation structure of any companies you would like to work for.
A critical part of ensuring adequate, safe and reliable operations amid a crisis includes comprehensive tabletop exercises to demonstrate and assess capabilities before an event occurs.
In a survey of enterprise IT security executives conducted by Vulcan Cyber, 76% of respondents indicated that a security vulnerability had impacted their business in the last year.
SonarSource cybersecurity researchers have discovered multiple security vulnerabilities in Zimbra - email collaboration software used by global enterprises - that could be potentially exploited to compromise email accounts by sending a malicious message and even achieve a full takeover of the mail server when hosted on a cloud infrastructure.
