opinionRisky business: 6 steps to assessing cyber risk for the enterpriseRisk is an unavoidable consequence of doing business in the digital age. These six steps for creating a risk assessment plan can help anticipate the danger.By Steve Durbin27 Mar 20246 minsBusinessBusiness IT AlignmentRisk Management news Orca to offer armor against AI adoption risksBy Shweta Sharma19 Mar 20244 minsRisk ManagementSecurity Softwarefeature 4 tabletop exercises every security team should runBy Stephen Lawton06 Mar 202410 minsDDoSRansomwareSupply Chain featureWhy governance, risk, and compliance must be integrated with cybersecurityBy Rosalyn Page 29 Feb 202410 minsComplianceRisk Management opinionA changing world requires CISOs to rethink cyber preparednessBy Christopher Whyte 13 Feb 202412 minsCSO and CISOCritical InfrastructureRisk Management feature6 best practices for third-party risk managementBy Mary Pratt 07 Feb 202411 minsThreat and Vulnerability ManagementBusiness IT AlignmentData and Information Security newsNew Israeli startup to help organizations deal with GenAI-related risksBy Shweta Sharma 31 Jan 20244 minsRisk Management news analysisTime running out to patch Jenkins CI/CD server vulnerabilityBy Lucian Constantin 30 Jan 20244 minsNetwork SecurityRisk ManagementVulnerabilities featureTop 4 LLM threats to the enterpriseBy Deb Radcliff 22 Jan 20248 minsPhishingGenerative AIRisk Management ArticlesfeatureNew risk management framework helps with SEC mandate complianceThe authors of the new Cyber Risk Management Program framework explain how it can set an organization up to better comply with SEC and other disclosure and reporting regulations.By Brian Allen and Brandon Bapst 04 Jan 2024 10 minsRegulationComplianceRisk ManagementopinionHow the new Instegogram threat creates liability for organizationsOrganizations might be at risk of liability for images containing malicious code they post on social media even if they were unaware of it.By Daniel B. Garrie, Jennifer Deutsch (contributor) and Peter Halprin 26 Dec 2023 4 minsThreat and Vulnerability ManagementLegalRisk ManagementfeatureHow cybersecurity teams should prepare for geopolitical crisis spilloverCISOs can anticipate and prepare for cyberattacks conducted by participants in geopolitical conflict such as the Israel/Hamas war by understanding the threat actors' motivations and goals.By Christopher Whyte 05 Dec 2023 12 minsAdvanced Persistent ThreatsThreat and Vulnerability ManagementRisk Managementfeature4 budget-savvy strategies for building an effective purple teamBuilding a purple team is not only for organizations with a generous budget. From the shoestring one-person operation harnessing open-source power to the well-oiled machine of a comprehensive team, organizations of all sizes have a pathway to heightened, collaborative security.By Maril Vernon 04 Dec 2023 14 minsThreat and Vulnerability ManagementIT Training Risk ManagementfeatureHow US SEC legal actions put CISOs at risk and what to do about itCISOs could find themselves in a painful Catch-22 situation when the US Securities and Exchange Commission’s new cybersecurity rules are enacted in December. By Evan Schuman 16 Nov 2023 8 minsCSO and CISOComplianceRisk ManagementnewsBigID unveils new data risk remediation guidance featureRemediation guidance will help customers accelerate data risk reduction and tackle threats such as insider and toxic/dark data hazards.By Michael Hill 09 Nov 2023 4 minsThreat and Vulnerability ManagementData and Information SecurityRisk ManagementnewsEclypsium launches supply chain security guide to track risks and incidentsThe guide offers supply chain risk intelligence for IT infrastructure including endpoints, servers, network devices, and cloud infrastructure products.By Michael Hill 07 Nov 2023 3 minsRisk ManagementSupply Chainfeature7 best practices for enterprise attack surface managementFollow this advice to minimize vulnerabilities and give threat actors fewer opportunities to compromise your organization's network and devices.By Shannon Flynn 01 Nov 2023 9 minsThreat and Vulnerability ManagementRisk ManagementfeatureHow to choose the best cloud security posture management toolsWith hybrid multicloud environments becoming prevalent across all industries, it pays to invest in the right CSPM tools to minimize risk, protect cloud assets, and manage compliance.By Linda Rosencrance 30 Oct 2023 8 minsThreat and Vulnerability ManagementCloud SecurityData and Information SecurityfeatureHow much cybersecurity expertise does a board need?Whether a specific requirement or not, companies must either educate their board of directors in cybersecurity and risk management or look to recruit directors with specific cybersecurity experience to improve organizations response and decision-making.By Ericka Chickowski 25 Oct 2023 12 minsCSO and CISORisk ManagementfeatureOops! When tech innovations create new security threatsThreat actors see opportunity when new technology is designed with inadequate security as these recent incidents prove.By Jon Murphy 24 Oct 2023 5 minsThreat and Vulnerability ManagementRisk ManagementVulnerabilitiesfeatureHow to ask the board and C-suite for security fundingCybersecurity funding is inextricably coupled with enterprise risk management as boards of directors take on more responsibility for purchasing decisions.By Deb Radcliff 23 Oct 2023 8 minsCSO and CISORisk Management Show more Show less View all Resources whitepaper Are You Data and AI Ready? Digital transformation creates a $100 trillion opportunity for enterprises, but also leads to infrastructure challenges with data exchange and platform growth. The post Are You Data and AI Ready? appeared first on Whitepaper Repository –. By Digital Realty Trust, L.P. 14 Mar 2024Other whitepaper ERP Modernization Maturity Assessment By Workday Inc. 26 Feb 2024Other whitepaper The Future of Passwords May Be Passwordless By LastPass 12 Feb 2024CybercrimePasswordsSecurity View all Video on demand videoWhat is the NIST Cybersecurity Framework? How risk management strategies can mitigate cyberattacksRecently, U.S. Cyber Command confirmed it has acted against ransomware groups, underscoring the importance of cybersecurity to national security. Effective risk management frameworks, such as the NIST Cybersecurity Framework, can help organizations assess risk and mitigate or protect against ransomware attacks or other cyber incidents. Cynthia Brumfield, analyst, CSO Online contributor and author of the new book, “Cybersecurity Risk Management: Mastering the Fundamentals Using the NIST Cybersecurity Framework”, joins Juliet to discuss what the NIST framework is and how IT teams can apply its advice to best protect their organizations. 21 Dec 2021 18 minsRisk ManagementSecurity How chemical manufacturer Celanese secures its IT and OT environments 17 Sep 2021 28 minsRisk ManagementSecurity Securing the software supply chain: A structured approach 18 Jun 2021 25 minsSupply ChainRisk ManagementSecurity Strategies for elevating security to an evergreen business priority 16 Apr 2021 23 minsRisk ManagementIT LeadershipSecurity See all videos Explore a topic Application Security Business Continuity Business Operations Careers Cloud Security Compliance Critical Infrastructure Cybercrime Identity and Access Management Industry IT Leadership Network Security Physical Security Privacy View all topics All topics Close Application Security Business Continuity Business Operations Careers Cloud Security Compliance Critical Infrastructure Cybercrime Identity and Access Management Industry IT Leadership Network Security Physical Security Privacy Security Security Infrastructure Software Development Vulnerabilities Generative AI Show me morePopularArticlesPodcastsVideos news AT&T suffers critical breach impacting 73 million customers By Shweta Sharma 01 Apr 20244 mins Data Breach feature Recruit for diversity: Practical ways to remove bias from the hiring process By Aimee Chanthadavong 01 Apr 20248 mins Careers feature The CSO guide to top security conferences By CSO Staff 01 Apr 202417 mins Technology IndustryIT SkillsEvents podcast CSO Executive Sessions: 2024 International Women's Day special 13 Mar 202410 mins CSO and CISO podcast CSO Executive Sessions: Former convicted hacker Hieu Minh Ngo on blindspots in data protection 20 Feb 202421 mins CSO and CISO podcast CSO Executive Sessions Australia with Sunil Sale, CISO at MinterEllison 20 Nov 202315 mins CSO and CISO video CSO Executive Sessions: Geopolitical tensions in the South China Sea – why the private sector should care 01 Apr 202416 mins CSO and CISO video CSO Executive Sessions: 2024 International Women's Day special 13 Mar 202410 mins CSO and CISO video LockBit feud with law enforcement feels like a TV drama 05 Mar 202456 mins RansomwareArtificial Intelligence