Security controls - Articles | Security Magazine

Dept of Energy releases C2M2 version 2.1 for energy cybersecurity

July 12, 2022

The U.S. Department of Energy (DOE) Office of Cybersecurity, Energy Security and Emergency Response (CESER) has released version 2.1 of the Cybersecurity Capability Maturity Model (C2M2).

Passwordless made simple with user empowerment

Bassam Al-Khalidi

November 22, 2021

While relying on passwordless authentication is both easier and safer for IT and end users, the transitional period is everything but.

70% of security pros find security hygiene and posture more challenging

November 19, 2021

JupiterOne announced the findings of a new survey by Enterprise Strategy Group (ESG), which warns of inadequate security hygiene and posture management practices at many organizations.

Multi-cloud adoption will be strong in 2022 but key security gaps and challenges remain

November 18, 2021

While 95% of businesses are making multi-cloud a strategic priority in 2022 with security being top of mind (96%), only 54% feel highly confident that they have the tools or skills they need to execute, Valtix research reveals.

Why cyber risk assessments should be a part of your business strategy

Baan Alsinawi

November 5, 2021

It’s vital for C-suites to include cybersecurity as part of their capital planning. And the key to that is determining what “just enough security” is for the organization to meet its business goals. What’s the best way to determine how much security is “just enough”?

80% of organizations report employee abuse of access to business applications

November 3, 2021

New research released by CyberArk reveals that organizations continue to operate with limited visibility into user activity and sessions associated with web applications, despite the ever-present risk of insider threats and credential theft.

Dell BIOSConnect vulnerabilities affect 30 million devices

June 25, 2021

Eclypsium has discovered four vulnerabilities that impact 128 Dell device models, and an estimated 30 million individual devices, that allow threat actors to remotely execute code in a pre-boot environment, according to new research released today.

Cloud security priorities of “pandemic-evolved” businesses

High-performing security organizations driving dramatic and substantive change, and reaping the benefits of going “all in” on cloud

June 11, 2021

Devo Technology announced the results of a report assessing the current state and pace of change with regards to enterprise cloud transformation initiatives and the ramifications on teams running a Security Operations Center (SOC).

5 ways IT departments can build trust among their business partners

John Roman

March 24, 2021

We have come to a point in the world where IT is being called upon more than ever due to the surge in remote work and technology’s increasingly significant role in driving business direction. The pandemic disruption has increased internal-control risks, leaving every business to adapt and have an increased focus on the overall technology vulnerabilities. To accomplish all they need to keep their organization secure, IT departments have been brought to the realization that they must prioritize building trust among their business partners – but that trust doesn’t happen in a flip of a switch, there’s a variety of steps both parties have to take in order to reach the light at the end of the tunnel.

Tinder achieves certification for its information security management system

Tinder becomes first dating app to be recognized for comprehensive information security practices in accordance with internationally accepted standards

February 9, 2021

Tinder, the world’s most popular app for meeting new people, has achieved certification for its Information Security Management System (ISMS) under the ISO/IEC 27001:2013 standard following an extensive impartial external audit — becoming the first app in its category to achieve a certification decision for this globally recognized security standard.