A new research study, Cybersecurity: Perceptions & Practices, found that less than half of all organizations were able to detect a major cybersecurity incident within one hour. Even more concerning, less than one-third said that even if they detected a major incident, they would be unable to contain it within an hour.

There’s a C- on your report card, but you’re not alone: The 2017 Global Cybersecurity Assurance Report Card found that the world’s information security practitioners gave global cybersecurity readiness an overall score of 70 percent – a six-point drop over 2016.

In response to new emerging threats targeted at ‘‘smart’’ airports, the European Union Agency for Network and Information Security (ENISA) published a report for airport decision makers.

Bletchley Park, the site famed for breaking the German Enigma encryption system during World War Two, is to become a training academy for the next generation of cyber defense forces.

One hundred billion spam emails are sent out each day. With such daunting numbers, what can businesses do to protect themselves, and their customers' data, from hackers? 

The NIST Framework lists “awareness and training” as a key component of network protection. But how do you go about it? 

Mention cybersecurity and immediate thoughts turn to technical controls such as firewalls, endpoint detection and patching systems. While these and other technical controls certainly are necessary, they must work in tandem with administrative and physical controls in order to form a mature risk mitigation program. This month, we will explore some of the physical aspects of cyber risk management, which inherently relies upon on-site security personnel and employee training for proper execution.