Security Experts:

long dotted

NEWS & INDUSTRY UPDATES

RSA unveiled new products to help address many of the challenges related to compliance with data protection regulations like the European Union's General Data Protection Regulation (GDPR). [Read More]
DHS issues binding operational directive requiring all federal agencies to use HTTPS, DMARC and STARTTLS [Read More]
ShiftLeft emerges from stealth mode with new solution designed to protect cloud applications and microservices, and with over $9 million in funding [Read More]
UpGuard launches CyberRisk, a new product designed to help organizations automate third-party vendor risk management [Read More]
In 2015 and 2016, the U.S. Federal Deposit Insurance Corporation (FDIC) may have suffered as many as 54 data breaches involving personal information [Read More]
Oracle announces new cloud security services and improvements to existing products at company’s OpenWorld convention [Read More]
Appthority report reveals which iOS and Android apps are the most blacklisted by security teams [Read More]
Federal judge allows the FBI to keep secret the details of a hacking tool used to access the iPhone of the San Bernardino terrorist [Read More]
DNSSEC key rollover delayed by at least one quarter as millions of users could go offline due to the failure of some network operators to install the new key [Read More]
An unprotected AWS S3 bucket operated by a Verizon engineer leaked details on the telecoms giant’s internal systems [Read More]

FEATURES, INSIGHTS // Compliance

rss icon

Steven Grossman's picture
Why do we seem to need layer upon layer of regulation and guidance to try to ensure a more secure business world? Is it working?
Travis Greene's picture
Reducing the amount of personal data subject to GDPR is a critical step towards minimizing the amount of risk that GDPR will expose.
Steven Grossman's picture
The PCI DSS 3.2 should greatly help companies reduce third party vendor risk, and is starting to shift from just a check-the-compliance-box activity to a more continuous compliance model.
Travis Greene's picture
To understand why return on Access Governance is lower versus other security technologies, we first need to understand why Access Governance is implemented in the first place.
Torsten George's picture
To achieve continuous compliance and monitoring, organizations are forced to automate many otherwise manual, labor-intensive tasks.
Torsten George's picture
The NIST Cybersecurity Framework is an important building block, but still just the first step towards implementing operationalized defenses against cyber security risks.
James McFarlin's picture
U.S tech giants are playing a game of high-stakes global brinksmanship around who has rights to control their data, which impacts their European growth prospects, business models, and ultimately stock valuations.
Mark Hatton's picture
The oversight for the protection of healthcare information is only getting tighter, and it is incumbent upon the security teams to ensure healthcare professionals have all the tools necessary to improve patient outcomes, while we worry about keeping the bad guys away.
Nimmy Reichenberg's picture
With the release of PCI-DSS 3.0, organizations have a framework for payment security as part of their business-as-usual activities by introducing more flexibility, and an increased focus on education, awareness and security as a shared responsibility.
Mark Hatton's picture
Complacency is never a good thing, but in security it can have devastating effects. While it’s good to acknowledge progress, that should never stand in the way of staying ahead of the next potential threat.