Risk Management - Security Ticks

Using AI to drive cybersecurity risk scoring systems

Artificial Intelligence, cyber risk, cybersecurity, Don't miss, Hot stuff, Microsoft, Risk Management, Video / SecurityTicks

Using AI to drive cybersecurity risk scoring systems 2024-11-15 at 07:18 By Help Net Security In this Help Net Security video, Venkat Gopalakrishnan, Principal Data Science Manager at Microsoft, discusses the development of AI-driven risk scoring models tailored for cybersecurity threats, and how AI is revolutionizing risk assessment and management in cybersecurity. The post Using […]

React to this headline:

Using AI to drive cybersecurity risk scoring systems Read More »

Evaluating your organization’s application risk management journey

Application Security, automation, CISO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, supply chain, Veracode / SecurityTicks

Evaluating your organization’s application risk management journey 2024-11-12 at 07:33 By Mirko Zorz In this Help Net Security interview, Chris Wysopal, Chief Security Evangelist at Veracode, discusses strategies for CISOs to quantify application risk in financial terms. Wysopal outlines the need for continuous risk management practices and robust strategies to manage third-party software dependencies, ensuring

React to this headline:

Evaluating your organization’s application risk management journey Read More »

Setting a security standard: From vulnerability to exposure management

cybersecurity, CyCognito, Don't miss, Hot stuff, Risk Management, security standard, Video / SecurityTicks

Setting a security standard: From vulnerability to exposure management 2024-11-11 at 06:36 By Help Net Security Vulnerability management has been the standard approach to fending off cyber threats for years. Still, it falls short by focusing on a limited number of vulnerabilities, often resolving only 1% to 20% of issues. In 2024, with the average

React to this headline:

Setting a security standard: From vulnerability to exposure management Read More »

Risk hunting: A proactive approach to cyber threats

cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, risk, Risk Management, vulnerability management, Zscaler / SecurityTicks

Risk hunting: A proactive approach to cyber threats 2024-10-30 at 07:34 By Help Net Security Cybersecurity is an overly reactive industry. Too often we act like firefighters, rushing from blaze to blaze, extinguishing flames hoping to keep the damage to a minimum, rather than fire suppression experts designing environments that refuse to burn. Just consider

React to this headline:

Risk hunting: A proactive approach to cyber threats Read More »

How NIS2 will impact sectors from healthcare to energy

CISO, Compliance, cybersecurity, Don't miss, EU, Features, framework, Hot stuff, News, opinion, Risk Management, security standard, Splunk, strategy / SecurityTicks

How NIS2 will impact sectors from healthcare to energy 2024-10-17 at 07:02 By Mirko Zorz In this Help Net Security interview, Mick Baccio, Global Security Advisor at Splunk SURGe, discusses the far-reaching implications of the NIS2 Directive beyond traditional IT security. He explains how NIS2 will fundamentally change cybersecurity governance, making it a core aspect

React to this headline:

How NIS2 will impact sectors from healthcare to energy Read More »

Resilience over reliance: Preparing for IT failures in an unpredictable digital world

cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, monitoring, News, opinion, resilience, Risk Management, strategy, Tanium / SecurityTicks

Resilience over reliance: Preparing for IT failures in an unpredictable digital world 2024-10-16 at 07:31 By Help Net Security No IT system — no matter how advanced – is completely immune to failure. The promise of a digital ring of steel may sound attractive, but can it protect you against hardware malfunctions? Software bugs? Unexpected

React to this headline:

Resilience over reliance: Preparing for IT failures in an unpredictable digital world Read More »

Best practices for implementing threat exposure management, reducing cyber risk exposure

CISO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, vulnerability management, Zafran / SecurityTicks

Best practices for implementing threat exposure management, reducing cyber risk exposure 2024-10-04 at 07:16 By Mirko Zorz In this Help Net Security interview, Sanaz Yashar, CEO at Zafran, discusses the role of threat exposure management (TEM) in modern cybersecurity strategies. As traditional vulnerability management evolves, TEM addresses the overwhelming risks arising from expanded attack surfaces

React to this headline:

Best practices for implementing threat exposure management, reducing cyber risk exposure Read More »

Fortifying the Weakest Link: How to Safeguard Against Supply Chain Cyberattacks

Risk Management, supply chain, Supply Chain Security / SecurityTicks

Fortifying the Weakest Link: How to Safeguard Against Supply Chain Cyberattacks 2024-09-26 at 15:01 By Torsten George As organizations have fortified their defenses against direct network attacks, hackers have shifted their focus to exploiting vulnerabilities in the supply chain to gain backdoor access to systems. The post Fortifying the Weakest Link: How to Safeguard Against

React to this headline:

Fortifying the Weakest Link: How to Safeguard Against Supply Chain Cyberattacks Read More »

Top priorities for federal cybersecurity: Infrastructure, zero trust, and AI-driven defense

Booz Allen Hamilton, Compliance, critical infrastructure, cybersecurity, Don't miss, Features, framework, Government, News, opinion, Risk Management, USA / SecurityTicks

Top priorities for federal cybersecurity: Infrastructure, zero trust, and AI-driven defense 2024-09-12 at 07:01 By Mirko Zorz In this Help Net Security, Erica Banks, VP and a leader in Booz Allen’s civilian services business, discusses the Federal Cybersecurity Strategy’s role in safeguarding national assets. Banks outlines key areas for improvement, including funding, talent retention, and

React to this headline:

Top priorities for federal cybersecurity: Infrastructure, zero trust, and AI-driven defense Read More »

How AI and zero trust are transforming resilience strategies

access control, Active Directory, Compliance, cyber resilience, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Quest Software, regulation, Risk Management, strategy, zero trust / SecurityTicks

How AI and zero trust are transforming resilience strategies 2024-09-11 at 07:01 By Mirko Zorz In this Help Net Security interview, John Hernandez, President and General Manager at Quest Software, shares practical advice for enhancing cybersecurity resilience against advanced threats. He underscores the need to focus on on-premises and cloud environments, adapt to new regulations,

React to this headline:

How AI and zero trust are transforming resilience strategies Read More »

Managing low-code/no-code security risks

cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, Nokod Security, opinion, Risk Management, strategy, vulnerability management / SecurityTicks

Managing low-code/no-code security risks 2024-09-03 at 07:31 By Help Net Security Continuous threat exposure management (CTEM) – a concept introduced by Gartner – monitors cybersecurity threats continuously rather than intermittently. This five-stage framework (scoping, discovery, prioritization, validation, and mobilization) allows organizations to constantly assess and manage their security posture, reduce exposure to threats, and integrate

React to this headline:

Managing low-code/no-code security risks Read More »

Georgia Tech Sued Over Alleged False Cybersecurity Reports to Win DoD Contracts

DoD, lawsuit, Risk Management / SecurityTicks

Georgia Tech Sued Over Alleged False Cybersecurity Reports to Win DoD Contracts 2024-08-26 at 19:16 By Ionut Arghire Complaint alleges that defendants submitted a false and fraudulent cybersecurity assessment score. The post Georgia Tech Sued Over Alleged False Cybersecurity Reports to Win DoD Contracts appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Georgia Tech Sued Over Alleged False Cybersecurity Reports to Win DoD Contracts Read More »

How NoCode and LowCode free up resources for cybersecurity

News, Risk Management, strategy, tips, Video / SecurityTicks

How NoCode and LowCode free up resources for cybersecurity 2024-08-16 at 06:31 By Help Net Security In this Help Net Security video, Frederic Najman, Executive Member of the SFPN (French Union of NoCode Professionals), discusses how NoCode and LowCode technologies enable companies to free up development resources to tackle cybersecurity issues. In a context where

React to this headline:

How NoCode and LowCode free up resources for cybersecurity Read More »

Where internal audit teams are spending most of their time

AuditBoard, auditing, Compliance, News, report, Risk Management, strategy / SecurityTicks

Where internal audit teams are spending most of their time 2024-08-09 at 06:30 By Help Net Security Over half of key stakeholders including audit committees, company boards, and chief financial officers are looking to internal audit teams to take on more risk-related work, according to AuditBoard. The study revealed that these expanding expectations are coming

React to this headline:

Where internal audit teams are spending most of their time Read More »

How network segmentation can strengthen visibility in OT networks

communication, cybersecurity, DirectDefense, Don't miss, Expert analysis, Expert corner, firewall, Hot stuff, network, News, opinion, Risk Management, strategy, vulnerability management / SecurityTicks

How network segmentation can strengthen visibility in OT networks 2024-08-08 at 07:31 By Help Net Security What role does the firewall play in the protection of operational technology (OT) networks and systems? Many would say that it’s the defensive mechanism to protect that environment from IT and the outside world. For the operators responsible for

React to this headline:

How network segmentation can strengthen visibility in OT networks Read More »

AI security 2024: Key insights for staying ahead of threats

Artificial Intelligence, cybersecurity, Don't miss, Features, generative AI, Hot stuff, News, opinion, regulation, Risk Management, Robust Intelligence / SecurityTicks

AI security 2024: Key insights for staying ahead of threats 2024-08-08 at 07:01 By Mirko Zorz In this Help Net Security interview, Kojin Oshiba, co-founder of Robust Intelligence, discusses his journey from academic research to addressing AI security challenges in the industry. Oshiba highlights vulnerabilities in technology systems and the proactive measures needed to mitigate

React to this headline:

AI security 2024: Key insights for staying ahead of threats Read More »

Secure by Default: What It Means for the Modern Enterprise

Risk Management / SecurityTicks

Secure by Default: What It Means for the Modern Enterprise 2024-08-07 at 16:01 By Matt Honea What does “secure by default” mean for the average company as you implement security systems and protocols? The post Secure by Default: What It Means for the Modern Enterprise appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Secure by Default: What It Means for the Modern Enterprise Read More »

Breaking down FCC’s proposal to strengthen BGP security

BGP, cybersecurity, Don't miss, Features, Hot stuff, ISP, Kentik, network, News, opinion, Risk Management, security standard / SecurityTicks

Breaking down FCC’s proposal to strengthen BGP security 2024-08-07 at 06:31 By Mirko Zorz In this Help Net Security interview, Doug Madory, Director of Internet Analysis at Kentik, discusses the FCC’s proposal requiring major U.S. ISPs to implement RPKI Route Origin Validation (ROV), and addresses concerns about the impact on smaller ISPs and the global

React to this headline:

Breaking down FCC’s proposal to strengthen BGP security Read More »

AI in the Enterprise: Cutting Through the Hype and Assessing Real Risks

AI, Artificial Intelligence, risk, Risk Management, Uncategorized / SecurityTicks

AI in the Enterprise: Cutting Through the Hype and Assessing Real Risks 2024-08-05 at 16:47 By Joshua Goldfarb The introduction of AI can bring benefits to the enterprise while not introducing additional risk that is beyond acceptable levels. The post AI in the Enterprise: Cutting Through the Hype and Assessing Real Risks appeared first on

React to this headline:

AI in the Enterprise: Cutting Through the Hype and Assessing Real Risks Read More »

Vanta Raises $150 Million at $2.45 Billion Valuation

Compliance, Cybersecurity Funding, funding, Risk Management / SecurityTicks

Vanta Raises $150 Million at $2.45 Billion Valuation 2024-07-24 at 15:46 By Eduard Kovacs Vanta has raised $150 million in a Series C funding round and it plans on using the money to fuel expansion and AI innovation. The post Vanta Raises $150 Million at $2.45 Billion Valuation appeared first on SecurityWeek. This article is

React to this headline:

Vanta Raises $150 Million at $2.45 Billion Valuation Read More »