Page 8 - White Papers in Governance & Risk Management

SANS Report: Tailoring Intelligence for Automated Response

Cyber threat intelligence (CTI), when used correctly, provides visibility into attacks and threats. However, security analysts are dealing with too many sources of intelligence. They aren't able to correlate and narrow all these sources of intelligence to those events and vulnerabilities that really matter. The...

Forrester Report: How To Reduce Your Organization's Attack Surface & Cyber Risk with Digital Risk Reconnaissance

In our modern age of digital connections and ubiquitous Internet access, both organizations and individuals face a "double-edged sword" when using web-based technologies. As we've increased our usage of the World Wide Web, our digital footprints have grown exponentially, and as a result, so has the digital attack...

Financial Services Threat Landscape Report: The Dark Web Perspective

There's no question that the threat landscape is constantly shifting for financial services companies. Throughout 2017 and the first half of 2018, we've seen a continued increase in attacks that directly target financial organizations, which comes as no surprise. However, increased access to user and account data has...

Data Security Under GDPR: How To Prepare For the Inevitable (French Language)

The European Union's (EU's) General Data Protection Regulation (GDPR), which began enforcement on May 25, 2018, dramatically increases the penalties for failing to properly protect users' personal data. The maximum fines that can be leveraged against an organization eclipse penalties that have been imposed in the...

Data Security Under GDPR: How To Prepare For The Inevitable (German Language)

The European Union's (EU's) General Protection Regulation (GDPR), which began enforcement on May 25, 2018, dramatically increases the penalties for failing to properly protect users' personal . The maximum fines that can be leveraged against an organization eclipse penalties that have been imposed in the past; they...

Financial Institutions: Is Your Organization Prepared for the FinCEN SAR Update?

Financial organizations currently subject to the FinCEN SAR eFiling will soon have to make major changes to comply with the new rules by January 1, 2019. The suspicious activity types that need reporting have been updated, new fields have been added, and the ASCII format is being updated just to mention a few things...

Financial Institutions: Step-by-Step Guidance on the FinCEN SAR Update

In January 2018, Financial Crime Enforcement Network (FinCEN) announced changes to the Suspicious Activity Report (SAR) form. Financial organizations currently subject to the FinCEN SAR eFiling will soon have to make major changes to comply with the new rules by January 1, 2019. The suspicious activity types that need...

What's Wrong With Traditional End-User Anti-Phishing Training?

Phishing remains the top attack vector, and an organization's people of course remain the top target. But how can these same people be leveraged as a key component in your anti-phishing defense? "Security professionals have to abandon any notion that phishing is solely a technology challenge", says Kurt Wescoe, Chief...

SaaS: The Solution For Closing The Skills Gap

Security leaders have been addressing the global skills gap for over a decade, with little to show for it. However, a new approach - leveraging software as a service - is making up for the staffing shortfall. The discussion really starts with software as a service. If you look at the benefits of leveraging the cloud...

The Clear Web is Darker Than You May Think: Fraud Prevails Regardless

Although some of the most prolific fraud sites exist on the clear web, the research captured in this report reveals numerous instances where data was leaked or sold for the purposes of committing fraud. Dark web vendors have thoroughly systematized the fraud trade. From basic to more sophisticated sites, hosts...

Open Banking & Other Risk Challenges For Banks

From open banking to emerging technology and the evolving needs of a new generation of on-the-go customers, financial institutions are experiencing unprecedented change. This means the use of advanced technology is on the rise as every institution searches for the next big thing to maintain a competitive edge. How...

The International Cybersecurity Awareness Survey: Implications of End-User-Driven Risks

We surveyed more than 2,000 working adults - 1,000 in the US and 1,000 in the UK - about cybersecurity topics and best practices that are fundamental to data and network security. What we found out about the personal habits of these individuals was sometimes heartening, occasionally perplexing, and frequently...

2018 Beyond The Phish Report

Anti-phishing training should be the foundation of any security awareness training program - but it's critical to think beyond email (in more ways than one) in order to effectively strengthen end-user defenses. Simulated phishing attacks - that is, email tests designed to mimic real-world social engineering attacks...

Utilizing Deception Technology To Protect ATM Networks

Distributed deception technology does not provide a viable solution for defending ATM machines against attacks executed physically on the machines themselves. But it is arguably the most effective means of stopping the most damaging attacks - the ones executed against the larger ATM network or those enabled by...

The Complexities of Vulnerability & Patch Management

There are massive amounts of vulnerabilities that companies deal with on an ongoing basis - not everything is lost though. Organizations that use unpatched software face a race against the clock, with attackers regularly beginning to hammer new vulnerabilities just hours after new fixes or security alerts get released...