Cybersecurity experts weigh in on the National Institute of Standards and Technology (NIST)'s updated guidelines for maintaining software supply chain security.

Bonnie Michelman, Executive Director of Police, Security and Outside Services at Mass General and winner of the 2021 SIA Insightful Practitioner Award, spoke about the hospital's response to COVID-19 and the lessons she and the security team learned from the pandemic during a talk at the Security Industry Association (SIA) Securing New Ground conference.

When it comes to cyber incident management of third-party risks, enterprise security professionals can follow a simplified task list to cover their bases by answering the questions "who, what, where, when, why and how."

5G, as often happens with new technologies, will likely introduce both digital and business revolution along with a plethora of new threat vectors. In particular with the exposure of new connected devices, industries and services, and sensitive assets will undoubtedly be affected by new cyber threat agents; the EU, however, is ready to mitigate these potential threats.

Any server connected to the internet is at risk of getting attacked by hackers. Penetration testing or pentesting simulates a DDoS attack in a controlled environment with ethical hackers to assess the risk exposure of the servers. Organizations can use pentesting to identify vulnerabilities in the system and work to resolve any risks. Let's discuss how to design and build a robust and comprehensive pentesting program.

With today’s threat landscape, security and SAM teams need to work together to understand what is installed across network devices and how those are being used for the best asset protection. 

Metrics for security are in wide use in organizations today, with more than 80 percent of respondents to a new SANS Institute survey claiming some level of maturity on their effective use of security metrics.