Page 8 - White Papers in Governance & Risk Management > Business Continuity Management / Disaster Recovery

Improve Efficiency, Reduce Complexity: Firewall Cleanup Recommendations

Poor firewall management defeats the firewall's intended purpose of access control by becoming ineffective and limiting visibility into what access is actually permitted. Poor management also increases the cost associated with security management. The results of poor firewall policy management include unnecessary...

Is the Promise of Behavioral Biometrics Worth the Investment?

Behavioral biometrics has been getting a lot of attention recently due to its ability to uniquely address the challenges posed by social engineering, account takeovers and malware. It is already considered the third most popular biometric technology (after finger and face) and tied with iris. Nonetheless, as an...

Drowning in Data, Starving for Actionable Intelligence

Today's threat landscape constantly throws new problems at organizations already struggling to keep up with yesterday's issues. New malware, ransomware, botnets, and fileless attacks target a growing list of enterprise vulnerabilities with clever new exploits and social engineering tactics, and these attacks are...

Empowering the Overwhelmed SOC: Creating an Effective Security Operations Center

While security teams continue to add to their threat protection arsenal, they are struggling to keep up with the threats. Security information and event management (SIEM) products, threat analytics platforms, advanced endpoint protection (AEP) products, user entity behavior analytics (UEBA) tools, and incident...

The Top Four Firewall Security Gaps to Fix and Secure Your Organization

Firewall complexity is leaving companies exposed. The technology to keep company networks safe exists, but it isn't being managed properly. Firewall technology has come a long way since its initial, most rudimentary forms. Next-Generation Firewalls (NGFW) are the latest development, and organizations are accelerating...

Data-driven Security Meets the 21st Century

As cyber threats become more complex in nature and the attack surface grows, enterprises are shifting to a risk-centric threat identification, containment, and remediation security strategy, prioritizing investments in tools and capabilities to detect threats and respond to incidents faster and more...

9 Steps to Building an Insider Threat Defense Program

Insider threats pose high risks to all enterprises. No organization, regardless of size, industry or region, is immune. With all the advantages that the digital age has brought us (and they are many) it has also brought a rise of highly damaging data breaches, from both internal and external sources. Regardless of...

From C&A to A&A: The RMF Shoe Has Dropped

Certification and accreditation (C&A) has been like alphabet soup. As it transitions to assessment and authorization (A&A), it's time to sort through the confusion and identify which terms and processes apply in any given situation. This paper sorts through the confusion to identify which terms, approaches, and...

The Vendor Risk Management Solution Guide

As enterprises continue to outsource more aspects of their operations to third parties, they expose themselves to more shared risk. It can be a staggering responsibility. Most organizations understand the need to automate vendor risk management activities to keep up with increasing scope and scrutiny. Yet they...

Fraud in The Mobile Era: A Hacker's Delight

As mobile devices eclipse computers and laptops as the preferred method of going online, fraudsters have followed users, porting their modus operandi -account takeover, social engineering, and malware based remote control attacks - to the mobile arena. Thus, hackers have many more opportunities to perpetrate fraud and...

Oh, RATs! Current Fraud Detection Doesn't Catch Remote Access Trojans

Many IT professionals use remote administration tools to troubleshoot and fix PC problems remotely, just as if they were sitting behind the keyboard themselves. But these tools are also used for different purposes today. Both nation states and hacktivists use modified these tools, creating Remote Access Trojan's...

A Guide to Surviving a Cyber Breach

The importance of data security is no secret, so you've thought ahead and taken steps to safeguard sensitive information. But then it happens; you discover a cyber breach. It's no time to panic. What steps do you follow in this time of crisis? Your first step should be to consult your incident response plan (IRP)....

Top 11 Automated Malware Analysis Providers Ranked by Forrester

Despite significant investments in the signature-based defenses of today's network, email and endpoint security solutions, since 2010, these solutions have been ineffective against the sheer volume of evolving malware. Security and risk professionals have turned to automated malware analysis (AMA) for help. These...

Using Threat Intelligence to Get the Upper Hand on Cybercriminals

Understanding your adversaries' tools, techniques, and processes (TTPs) that they're likely to weaponize is the best way to anticipate and combat threats. This whitepaper shares research on the latest attacker tools, provides architecture recommendations for organizations looking to strengthen security controls, and...

Global Adoption of Encryption; Is it Inevitable?

Encryption keeps data confidential, but we're left unprotected from threats that may be embedded in the data. In fact, encryption actually conceals these threats and adds network performance burdens for organizations that wish to inspect encrypted traffic. The first in a series on encryption, this technical brief...