Security & Business Resilience - Articles - Page 309

The Human Strategy is the Best Cyber Defense to Combat COVID-19

The pandemic has highlighted the critical need to cultivate the workforce to ensure there are highly skilled professionals to meet the new demands

Kurt John

May 7, 2020

COVID-19 has impacted every facet of life and business. Millions of people around the world have been working from home to collectively slow the spread of the coronavirus. However, as the global workforce migrates from physical corporate locations to less-secure home offices, this new reality creates increased cyber threats, as employees exchange what can be sensitive data in order to prevent business operations from coming to a standstill.

Biometric Data: Increased Security and Risks

Lenildo Morais

May 6, 2020

Biometrics has the potential to make authentication faster, easier and more secure, as long as it is handled with due care. Based on this, what can companies and governments do to offer a safer digital environment for consumers?

Chris Hallenbeck: A Path of Security Leadership and Operational Insight

Chris Hallenbeck's path to information security, including his view of the CISO role and the value of metrics.

Maria Henriquez

May 6, 2020

Chris Hallenbeck, CISO for the Americas at Tanium, has led security and IT operations, incident response, endpoint detection and built and deployed teams for incidents of national security. What initiatives has he implemented as a CISO, and how does he gauge the success of his team?

Third-Party Risk Management amid COVID-19

Brian Parks

May 5, 2020

What are some simple risk management rules that will support healthcare organizations, without significantly exposing it to major security risks as they adapt to this new and challenging COVID-19 situation?

What's Next: The Future of Big Cybersecurity Conferences

Dawn Morrissey

May 5, 2020

The old curse has come true: we are “living in interesting times.” None of us could have possibly foreseen the way that 2020 has evolved, least of all, conference professionals. Gartner says it’s taking a $158 million hit in its Q2 revenues; O’Reilly went one huge step further, permanently shuttering its in-person events business. Aside from those gatherings, an entire slew of security meetings has moved into the virtual realm. In-person conferences during the pandemic are seen as being too hazardous and unsafe. It's now better to meet online than to risk spreading the virus.

Preventing Scripting Attacks on Powershell with Identity-Based Zero Trust

Peter Smith

May 4, 2020

The best way to prevent scripting attacks, such as those that implement Python back doors or compromise PowerShell, is to implement identity-based zero trust. In a zero trust environment, IT treats the internal network as if it were the public internet, a place where nothing can be trusted, and anything can be a threat.

Security Talk

Goodbye and Good Luck, Laura

Diane Ritchey

May 4, 2020

Laura Stepanek, Editor-in-Chief of SDM Magazine has retired. For 36 years, she was the face of SDM, and she has witnessed how new technology has changed the security industry. We wish the best for Laura in her well-deserved retirement.

Senators to Introduce COVID-19 Consumer Data Protection Act

Although it is unclear whether the forthcoming bill has any chance of becoming law, it is further evidence that companies need to consider the significant privacy issues and risks associated with implementing COVID-19-related technology.

David M. Stauss

May 1, 2020

On April 30, 2020, a group of four Republican Senators announced their plan to introduce federal privacy legislation that would regulate the collection and use of personal information relating to the fight against the Coronavirus pandemic. How would the proposed bill, COVID-19 Consumer Data Protection Act, attempt to solve privacy concerns?

War at Home: How U.S. Corporations are on the Front Lines of the Silent War on Privacy

Jarrett Kolthoff

May 1, 2020

The four individuals who were identified and indicted by the Trump Administration in relation to the Equifax breach from 2017 is yet another example of the overt collection efforts by the Chinese government to steal Americans’ sensitive personal information. The openness of the U.S. government to share these examples should help bring the reality of cyber threats to the forefront in corporate board rooms and research universities. I would like to highlight that these particular attacks were conducted for a different goal – espionage.

COVID-19 and Enterprise Security's Response

What challenges has COVID-19 presented to enterprise security?

Diane Ritchey

May 1, 2020

What challenges has COVID-19 presented to enterprise security, how did business continuity plans evolve and what lessons have enterprise security learned?