Ideally a penetration test should simulate a real world attack; in the real world, the attacker will always have some objective beyond “get into the network.”  No matter who the attacker is, they are motivated by something that they are trying to accomplish – and getting into the network is only one step in that process for the attacker.

This article is the twelfth in our ongoing series exploring the NIST Cybersecurity Framework. 

Network security practitioners often look to solve technical problems with technical solutions: “The engineers got us into this mess; they can get us out of it.”

More than nine in 10 manufacturers (92 percent) cite cybersecurity concerns in their SEC disclosures this year.

The risks associated with cyberattacks have now become the topic of discussion at the senior most levels within organizations for many reasons.

The big news at this year’s RSA show was big data and the Cloud.

Tell somebody that you’re planning to make a plan, and you’ll get some snide looks. But tell somebody that you have a good plan in place, and it instills a sense of preparation and confidence.