Creating cybersecurity assessment reports and awareness programs can help organizations mitigate the risk of data breaches and build a positive reputation.

IT auditors’ lack of hands-on skill in information technology influences data breach likelihood and technical evidence interpretation for critical infrastructure, according to The Next Generation Cybersecurity Auditor study.

Industrial control systems (ICS) have been targeted by cyberattacks, and IT/OT convergence must be secure to reduce manufacturing cyber risk.

A study from Skybox Security and conducted by ThoughtLab surveyed executives and analyzed the cybersecurity investments, practices and performance of 1,200 organizations.

As cyberattack methods evolve, so too must enterprise incident response plans. How an organization recovers from a data breach is critical to their future business success.

Cybersecurity experts weigh in on the National Institute of Standards and Technology (NIST)'s updated guidelines for maintaining software supply chain security.

Why is having a cybersecurity framework so important?  When it comes to cybersecurity, a framework serves as a system of standards, guidelines, and best practices to manage risks that arise in a digital world. A cybersecurity framework prioritizes a flexible, repeatable and cost-effective approach to promote the protection and resilience of your business; it’s also important to realize that cybersecurity helps with the growth of your business. 

The Information Security Forum (ISF), a resource for executives and board members on cybersecurity and risk management, and National Institute of Standards and Technology (NIST) are partnering to create Online Informative References (OLIRs) between information security standards and the NIST Cybersecurity Framework (CSF).