Welcome to InfoRiskToday's Security Intelligence!

Managing security data in the modern enterprise has been complicated by increases in types, volume and speed of information combined with constantly evolving internal & external threats. We explore these issues from the front lines with our practitioner faculty and partners to provide you, our information security audience with improved Security Intelligence and ammunition to secure your companies resources.

Matthieu Grall, CISO and DPO at SodiFrance

Analysis: New ISO Privacy Standard

Suparna Goswami • October 15, 2019

What's the purpose of ISO 27701, the new privacy extension to the ISO 27001 information security management standard? Matthieu Grall, CISO and DPO at SodiFrance, a French IT services company, who participated in development of 27701, explains the standard and discusses "privacy by design" compliance issues.

Governance

OnDemand Webinar | Post-GDPR and CCPA: What Must Security Leaders Know about Privacy?

Governance

OnDemand Webinar | How to Mitigate Insider Data Breaches

Active Defense & Deception

Deception Technology: Making the Case

Security Operations

SecOps Is Broken. What Can We Do About It?

Latest

Making the Most of a 'Zero Trust' Security Approach

Tom Field • August 28, 2019

What's the best way to define a "zero trust" approach to security? And what are the potential benefits? M.K. Palmore of Palo Alto Networks, a former FBI agent, offers insights on making the most of the approach.

Security Operations

Sorting Through 'Zero Trust' Misconceptions

Tom Field • August 27, 2019

F. Ward Holloway of Forescout Technologies sorts through what he sees as common misconceptions about the "zero trust" approach to security, including the assumption that it can prove to be too costly and complex to implement.

Active Defense & Deception

Operation Soft Cell

Cybereason • August 23, 2019

In 2018, the Cybereason Research team identified a series of attacks targeting telecommunications companies. These attacks shared the same TTPs and consisted of a webshell execution followed by the deployment of Poison Ivy, a well-known RAT attributed to Chinese APT groups.

Cloud Access Security Brokers (CASB)

Cloud Security Solutions for Government: Recorded at AWS Public Sector Summit

Information Security Media Group • July 31, 2019

FireEye and AWS hosted a Cloud Security Breakfast Briefing summer of 2019. During this briefing Stephen Alexander, AWS National Security Senior Solutions Architect and FireEye's Martin Holste, Cloud Security CTO, and Tim Appleby, Director of Federal Programs, addressed how organizations can achieve the security needed...

Cybercrime

Code Triage: Why Healthcare is Facing More Cyber Attacks and How to Protect Your Organization

Information Security Media Group • July 31, 2019

Healthcare organizations face a number of unique security concerns, including the increasingly interconnected systems between doctors' offices, hospitals, insurance companies and suppliers.

Governance

Tackling the IAM Modernization Journey: Insights from CISO Sam Massiello

Ping Identity • July 31, 2019

Gates Corporation CISO Sam Masiello on how they brought their vision of a global authentication authority to life with advisory, configuration, deployment, and employee training.

Network Firewalls, Network Access Control

Spotlight on Zero Trust Network Access

Information Security Media Group • July 30, 2019

The promise of cloud and mobility is to provide access to key services quickly and from anywhere at any time from any device. Zscaler's Lisa Lorenzin opens up on zero trust network access technologies, which provide a secure alternative to legacy methods.

Governance

OnDemand Webinar | Integrating Information Risk Management into Business Risk Management

Information Security Media Group • July 26, 2019

This webinar explores communication challenges around information security, the typical journey organizations are taking to bring information risk management into the broader umbrella of business risk management, and the advantages accruing to organizations as they mature their information risk management programs.

Application Security

Secure the Core | Creating Resilient Business Applications

Onapsis • July 26, 2019

Did you know that public exploits for business applications have increased 100 percent since 2015? Today, over 77 percent of the world's transactional revenue touches an ERP system, making these applications an attractive target for cyber criminals looking to profit from the highly-sensitive and regulated data that...

Governance

Mitigating the Security Skills Crisis

Information Security Media Group • July 24, 2019

Security leaders for a decade now have been discussing the profession's growing skills gap. But what is its true business impact, and what are some near- and long-term strategies to mitigate it? FireEye's Gareth Maclachlan shares insight.

Fraud Management & Cybercrime

Security as a Catalyst for Digital Transformation

Information Security Media Group • July 24, 2019

Digital transformation: It's the present and future of business, as enterprises adapt to work at the speed and convenience of new demands. But amidst this transformation, how can security leaders avoid being obstacles and actually become catalysts for change? Alex Teteris of Zscaler shares insight.

3rd Party Risk Management

Rethinking Supply Chain Security

Information Security Media Group • July 23, 2019

When it comes to supply chain risk, many organizations overlook how dependent they are on those critical relationships, says Matt Kraning of Expanse. As a result, they are minimizing serious security vulnerabilities. Kraning offers insights on rethinking that dynamic.