Content by Tom Field

What Makes a DevSecOps Program Elite?

Tom Field  •  March 10, 2019

What's the difference between an elite and a less mature DevSecOps program? Sonatype's Derek Weeks unveils the results of the 2019 DevSecOps Community Survey.

Defending Against Malicious and Accidental Insiders

Tom Field  •  March 8, 2019

Malicious and accidental insiders alike have drawn renewed attention to the insider threat. Patrick Knight of Veriato offers new insight on the scale of the problem and how to tackle it.

The Data Challenge: Security at Unprecedented Scale

Tom Field  •  March 8, 2019

By 2025, the volume of data is projected to grow by a factor of 10. How can enterprises hope to identify and secure sensitive data at the speed of business? Stephen Cavey of Ground Labs shares insights.

Healthcare's Cyber 'Terrain Problem'

Tom Field  •  March 8, 2019

The healthcare sector has unique cybersecurity infrastructure threats as well as vulnerabilities. Dr. Abdul Rahman of Fidelis Cybersecurity describes it as a "terrain problem," and he recommends new strategies.

The Fraud-Fighting Evolution

Tom Field  •  March 7, 2019

The faces of digital fraud have changed dramatically over the past decade, and so too must our strategies for fighting it. Ricardo Villadiego of Cyxtera urges anti-fraud leaders to focus and simplify.

Visibility at a New Depth

Tom Field  •  March 6, 2019

Every security leader wants visibility into the potential attack surface. But that surface is changing in vast new ways, owing to the cloud and connected devices. Mario Vuksan of ReversingLabs defines what visibility truly means today.

Zscaler's Bil Harmer on Digital Transformation

Tom Field  •  February 11, 2019

Listen to the latest on security's role in digital transformation, as well as cultural and leadership challenges facing the security industry.

New Faces of Fraud: Survey Analysis

Tom Field  •  February 5, 2019

Fraud incidents and losses have remained steady or increased in the past year, according to ISMG's latest Faces of Fraud Survey. And the biggest fault of banking institutions' current anti-fraud controls: They rely too much on manual processes. Mike Lopez of survey sponsor Cyxtera Technologies analyzes the results and...

Cisco Studies Global Impact of GDPR

Tom Field  •  January 24, 2019

Cisco is out with findings from its 2019 Data Privacy Benchmark Study, which shows the impact of GDPR compliance as well as how customers are asking more questions about how their data is secured. Cisco Chief Privacy Officer Michelle Dennedy analyzes the survey.

Legal Lessons Learned From Breach Investigations

Tom Field  •  December 27, 2018

What not to do after a breach? Share your incident response plan with your attorney and say, "Don't pay too much attention to it; we don't follow it." Randy Sabett of Cooley LLP discusses this and other lessons learned from breach investigations.

Former Federal CISO Advocates Zero-Trust Security

Tom Field  •  December 26, 2018

Critical systems are under attack from external and insider threats. No access or transaction should go unchecked. That's why former federal CISO Gregory Touhill advocates the broad adoption of zero-trust security in the public and private sectors.

Gartner's Avivah Litan on Impact of Marriott Breach

Tom Field  •  December 17, 2018

In the aftermath of the Marriott breach, it's fair to characterize Gartner's Avivah Litan as mad as hell and not wanting the U.S. to take it anymore. Going into 2019, Litan has policy and technology recommendations for national cyber defense.

Insights on Upgrading a SOC

Tom Field  •  December 14, 2018

By building in some risk intelligence upfront, organizations can upgrade their security operations centers and reduce the noise from the sheer volume of alerts and false positives, says Ganesh Prasad of RSA, who shares insights.

Breach Response: When to Involve the Board and PR

Tom Field  •  December 14, 2018

In the wake of the recent Marriott and National Republican Congressional Committee data breaches, now is the time to get your board's attention regarding breach response and public disclosures. Attorney Mark Rasch offers insights for preparing and practicing response plans.

How to Maximize Data Used to Fight Fraud

Tom Field  •  December 14, 2018

The data being used to drive effective anti-fraud efforts can be rich in context and useful for other activities. Jim Apger of Splunk describes emerging fraud schemes and solutions, highlighting the role of machine learning.