Page 18 - White Papers in Training & Security Leadership

Empowering the Overwhelmed SOC: Creating an Effective Security Operations Center

While security teams continue to add to their threat protection arsenal, they are struggling to keep up with the threats. Security information and event management (SIEM) products, threat analytics platforms, advanced endpoint protection (AEP) products, user entity behavior analytics (UEBA) tools, and incident...

The Rebirth of Endpoint Protection: A Guide to Finding the Right AEP Product for Your Organization

Advanced endpoint protection (AEP) shows significant promise for protecting endpoint devices. However, this emerging market is rapidly growing and is in a constant state of flux. Assessing new technologies is no small undertaking and analysts must often rely on comparing limited information from less-than-ideal...

SIEM: The New Force Multiplier Powered by Actionable Intelligence

CISOs and security analysts alike complain that security information and event management (SIEM) technology has not fully lived up to its promises. Even with SIEM systems in place, enterprises still suffer from alert fatigue, and security teams armed with SIEM event and flow data still miss untold numbers of attack...

The Dark Web: 5 Things to Know

Terbium CEO Danny Rogers on How to Search for Your Organization's Data, interviewed by ISMG's Vice President of Editorial, Tom Field What's required to access the Dark Web? And how does one separate fact from fiction? These are two of the five things Dark Web users need to know, says Danny Rogers, cofounder and CEO...

Ignoring Risks from Same-day ACH Will Cost You Big

Same-day Automated Clearing House (ACH) payment processing became a reality. While this represents a terrific opportunity for banks to be responsive to their customer's requirements for faster ACH payments, plus the ability to attract new customers from banks who choose not to offer the same level of responsiveness,...

2017 State of Malware Report: Headlines Finally Catch Up to the Hype

In 2016, cyberattacks and cybersecurity (or a lack thereof) grabbed media attention on both the corporate and consumer sides, even becoming a key issue in the US presidential election. In this respect, you could say that everyone, even those who have never logged on, was affected by cyberattacks and hacking in...

The Top Four Firewall Security Gaps to Fix and Secure Your Organization

Firewall complexity is leaving companies exposed. The technology to keep company networks safe exists, but it isn't being managed properly. Firewall technology has come a long way since its initial, most rudimentary forms. Next-Generation Firewalls (NGFW) are the latest development, and organizations are accelerating...

Data-driven Security Meets the 21st Century

As cyber threats become more complex in nature and the attack surface grows, enterprises are shifting to a risk-centric threat identification, containment, and remediation security strategy, prioritizing investments in tools and capabilities to detect threats and respond to incidents faster and more...

9 Steps to Building an Insider Threat Defense Program

Insider threats pose high risks to all enterprises. No organization, regardless of size, industry or region, is immune. With all the advantages that the digital age has brought us (and they are many) it has also brought a rise of highly damaging data breaches, from both internal and external sources. Regardless of...

From C&A to A&A: The RMF Shoe Has Dropped

Certification and accreditation (C&A) has been like alphabet soup. As it transitions to assessment and authorization (A&A), it's time to sort through the confusion and identify which terms and processes apply in any given situation. This paper sorts through the confusion to identify which terms, approaches, and...

What It Takes to Achieve Digital Trust

VASCO Data Security's Scott Clements on Aligning Security with User Experience With great efficiencies and cost savings also come great threats and fraud risks. This is today's digital reality, and it is why cybersecurity and the user experience need to be aligned to create digital trust, says Scott Clements of VASCO...

The Vendor Risk Management Solution Guide

As enterprises continue to outsource more aspects of their operations to third parties, they expose themselves to more shared risk. It can be a staggering responsibility. Most organizations understand the need to automate vendor risk management activities to keep up with increasing scope and scrutiny. Yet they...

Making the Case for Continuous Authentication: Why 2FA is Not Secure Enough to Combat Online Fraud

Most organizations that enable users to perform online transactions have implemented security measures to address fraud. Currently, one of the most common safeguards used in a wide array of products/services is two-factor authentication (2FA). In recent years, 2FA has become employed by global tech leaders like...

Fraud in The Mobile Era: A Hacker's Delight

As mobile devices eclipse computers and laptops as the preferred method of going online, fraudsters have followed users, porting their modus operandi -account takeover, social engineering, and malware based remote control attacks - to the mobile arena. Thus, hackers have many more opportunities to perpetrate fraud and...

Oh, RATs! Current Fraud Detection Doesn't Catch Remote Access Trojans

Many IT professionals use remote administration tools to troubleshoot and fix PC problems remotely, just as if they were sitting behind the keyboard themselves. But these tools are also used for different purposes today. Both nation states and hacktivists use modified these tools, creating Remote Access Trojan's...