This expert opinion article offers five tactical best practices for organizations struggling to achieve and/or maintain SOC 2 compliance.

The Internet Security Alliance (ISA) and the ecoDa released a handbook on cyber-risk management for corporate boards of directors in Europe.

Here is an excellent collection of resources by Cygenta that clearly explain the perils and pitfalls of phishing scams, and more importantly, what you can do.

A wealth of free cybersecurity leadership webcasts are available on our new @SANSInstitute Cybersecurity Management landing page! Check it out here! https://t.co/jKXtGZrfpO

ENISA offers some practical advice to SMEs with regard to the security and privacy aspects that should be considered upon the selection and use of online communication tools.

Now in its fourth year, Cyber Trends draws on the experience of industry practitioners, government representatives, and researchers to examine the current trends and what is on the horizon for the cybersecurity ecosystem, across the UK and the world.

In today’s cloud data centers and edge computing, attack surfaces have significantly increased, hacking has become industrialized, and most security control implementations are not coherent or consistent. The foundation of any data center or edge computing…

The NISTIR 8011 capability-specific volumes focus on the automation of security control assessment within each individual information security capability. They add tangible detail to the more general overview given in NISTIR 8011 Volume 1, providing a template…

In an effort to further enhance the cooperation between CSIRTs and law enforcement (LE), and their interaction with the judiciary, ENISA has developed some additional training material addressing the cooperation across these communities.

Electric vehicles are becoming common on the Nation’s roads, and the electric vehicle supply equipment infrastructure (EVSE) is being created to support that growth. The NIST Information Technology Lab (ITL) hosted a one-day symposium to showcase federally…

В ходе вебинара рассмотрены:
- нормативные требования и область их действия
- исходные данные для проведения анализа уязвимостей
- основные этапы и методы оценки
- описание результатов проведения оценки

A growing number of public companies have started listing ransomware as a forward-looking risk factor in their SEC documents.

What are some common security misconceptions in 2020? What are we doing wrong, and how can we improve? This talk will not be technical, but instead set the precedence on how to work security challenges in the future. The talk will cover thought provoking…

Gartner analyst @raddisco shares 7 security areas to focus on during #COVID19. Read more. #GartnerSEC #Security #SecurityandRisk @Gartner_IT