Risk Management

Your facilities run on fragile supply chains and nobody wants to admit it

cyber risk, cybersecurity, Don't miss, Features, Hot stuff, IFMA, News, resilience, Risk Management, supply chain /

Your facilities run on fragile supply chains and nobody wants to admit it 2026-03-26 at 12:32 By Mirko Zorz In this Help Net Security interview, Christa Dodoo, Global Chair at IFMA, discusses how facility managers are managing supply chain risk in critical building systems. She explains how sourcing, localized redundancy, and flexible infrastructure design are […]

Your facilities run on fragile supply chains and nobody wants to admit it Read More »

FCC Bans New Routers Made Outside the US Over National Security Risks

Ban, fcc, Network Security, Risk Management, router, router ban /

FCC Bans New Routers Made Outside the US Over National Security Risks 2026-03-25 at 15:07 By Ionut Arghire The ban aligns with a White House determination that all routers produced abroad are a threat to national security. The post FCC Bans New Routers Made Outside the US Over National Security Risks appeared first on SecurityWeek. […]

FCC Bans New Routers Made Outside the US Over National Security Risks Read More »

Why your phishing simulations aren’t building a security culture

cyber resilience, cyber risk, cybersecurity, Don't miss, Immersive, News, phishing, Risk Management, security culture, skill development, strategy, tips, Video /

Why your phishing simulations aren’t building a security culture 2026-03-25 at 08:07 By Help Net Security Security culture isn’t built by phishing simulations. In this Help Net Security video, Dan Potter, VP of Cyber Resilience at Immersive, argues that annual training videos and quarterly phishing tests happen in calm, controlled settings that tell us nothing […]

Why your phishing simulations aren’t building a security culture Read More »

Your security stack looks fine from the dashboard and that’s the problem

Absolute, CISO, cyber resilience, cyber risk, cybersecurity, Don't miss, endpoint management, enterprise, generative AI, News, report, Risk Management, RSAC 2026 /

Your security stack looks fine from the dashboard and that’s the problem 2026-03-25 at 08:07 By Anamarija Pogorelec One in five enterprise endpoints is operating outside a protected and enforceable state on any given day, according to device telemetry collected across tens of millions of corporate PCs. That figure, drawn from Absolute Security’s 2026 Resilience […]

Your security stack looks fine from the dashboard and that’s the problem Read More »

Stop building security goals around controls

CISO, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, security metrics, security ROI, strategy /

Stop building security goals around controls 2026-03-18 at 09:27 By Mirko Zorz In this Help Net Security interview, Devin Rudnicki, CISO at Fitch Group, argues that security strategy fails when it loses its connection to business outcomes. Rudnicki walks through how to align security goals with corporate priorities, why CISOs must present risk in terms […]

Stop building security goals around controls Read More »

Airbus CSO on supply chain blind spots, space threats, and the limits of AI red-teaming

CISO, Compliance, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, travel industry /

Airbus CSO on supply chain blind spots, space threats, and the limits of AI red-teaming 2026-03-10 at 08:30 By Mirko Zorz Pascal Andrei, CSO at Airbus, knows that the aerospace and defense sector is facing a threat environment that is evolving faster than most organizations can track. From sub-tier suppliers quietly becoming entry points for […]

Airbus CSO on supply chain blind spots, space threats, and the limits of AI red-teaming Read More »

ArmorCode Raises $16 Million for Exposure Management Platform

ArmorCode, Cybersecurity Funding, exposure management, funding, Risk Management /

ArmorCode Raises $16 Million for Exposure Management Platform 2026-03-06 at 18:14 By Ionut Arghire The company will accelerate platform development, expand go-to-market efforts, and invest in product innovation. The post ArmorCode Raises $16 Million for Exposure Management Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

ArmorCode Raises $16 Million for Exposure Management Platform Read More »

Security debt is becoming a governance issue for CISOs

CISO, cyber risk, cybersecurity, Don't miss, News, report, Risk Management, Veracode /

Security debt is becoming a governance issue for CISOs 2026-03-02 at 08:30 By Mirko Zorz Application security backlogs keep expanding across large development portfolios. Veracode’s 2026 State of Software Security Report puts numbers behind a familiar operational pattern, fixes lag discovery, and older weaknesses stay open across release cycles. 2026 findings against the 2025 baseline […]

Security debt is becoming a governance issue for CISOs Read More »

Four Risks Boards Cannot Treat as Background Noise

CISO, CISO Strategy, Management & Strategy, Risk Management /

Four Risks Boards Cannot Treat as Background Noise 2026-02-26 at 19:30 By Steve Durbin The goal isn’t about preventing every attack but about keeping the business running when attacks succeed. The post Four Risks Boards Cannot Treat as Background Noise appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Four Risks Boards Cannot Treat as Background Noise Read More »

The $19.5 million insider risk problem

agentic AI, Artificial Intelligence, CISO, cyber risk, cybersecurity, Don't miss, Dtex Systems, Insider Threat, News, Ponemon Institute, report, Risk Management, survey /

The $19.5 million insider risk problem 2026-02-26 at 09:09 By Mirko Zorz Routine employee activity across corporate systems carries an average annual cost of $19.5 million per organization. That figure comes from the 2026 Cost of Insider Risks Global Report, conducted by the Ponemon Institute and based on data from 354 organizations that experienced one […]

The $19.5 million insider risk problem Read More »

Lema AI Emerges From Stealth With $24 Million to Tackle Third-Party Risk 

AI, Cybersecurity Funding, emerge from stealth, funding, Lema AI, Risk Management, third-party risk management /

Lema AI Emerges From Stealth With $24 Million to Tackle Third-Party Risk  2026-02-09 at 19:42 By Eduard Kovacs The funding was raised over Series A and seed funding rounds for its supply chain security solution. The post Lema AI Emerges From Stealth With $24 Million to Tackle Third-Party Risk  appeared first on SecurityWeek. This article […]

Lema AI Emerges From Stealth With $24 Million to Tackle Third-Party Risk  Read More »

New Paper and Tool Help Security Teams Move Beyond Blind Reliance on CISA’s KEV Catalog

CISA KEV, KEVology, Risk Management, Vulnerabilities, vulnerability /

New Paper and Tool Help Security Teams Move Beyond Blind Reliance on CISA’s KEV Catalog 2026-02-09 at 11:10 By Kevin Townsend The KEV list is useful but largely misunderstood. KEVology explains what it is, and how best to use it. The post New Paper and Tool Help Security Teams Move Beyond Blind Reliance on CISA’s […]

New Paper and Tool Help Security Teams Move Beyond Blind Reliance on CISA’s KEV Catalog Read More »

United Airlines CISO on building resilience when disruption is inevitable

CISO, critical infrastructure, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, travel industry, United Airlines /

United Airlines CISO on building resilience when disruption is inevitable 2026-02-09 at 09:09 By Mirko Zorz Aviation runs on complex digital systems built for stability, safety, and long lifecycles. That reality creates a unique cybersecurity challenge for airlines, where disruption can quickly become an operational and public trust crisis. In this Help Net Security interview, […]

United Airlines CISO on building resilience when disruption is inevitable Read More »

Organizations Urged to Replace Discontinued Edge Devices

CISA, edge device, Government, Network Security, Risk Management /

Organizations Urged to Replace Discontinued Edge Devices 2026-02-07 at 17:41 By Ionut Arghire Edge devices that are no longer supported have been targeted in attacks by state-sponsored hackers, the US says. The post Organizations Urged to Replace Discontinued Edge Devices appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Organizations Urged to Replace Discontinued Edge Devices Read More »

Cybersecurity planning keeps moving toward whole-of-society models

CISO, cyber risk, Don't miss, Government, how-to, News, Risk Management, strategy, tips /

Cybersecurity planning keeps moving toward whole-of-society models 2026-02-05 at 09:11 By Sinisa Markovic National governments already run cybersecurity through a mix of ministries, regulators, law enforcement, and private operators that own most critical systems. In that environment, guidance circulating among policymakers outlines how national cybersecurity strategies increasingly tie together risk management, workforce planning, technology standards, […]

Cybersecurity planning keeps moving toward whole-of-society models Read More »

What boards need to hear about cyber risk, and what they don’t

access controls, automation, boardroom, CIO, cyber risk, cybersecurity, Don't miss, Entrust, News, Risk Management, Video /

What boards need to hear about cyber risk, and what they don’t 2026-02-02 at 09:10 By Help Net Security In this Help Net Security video, Rishi Kaushal, CIO at Entrust, explains how security leaders should talk to the board about cyber risk. He focuses on what matters to board members and what does not. He […]

What boards need to hear about cyber risk, and what they don’t Read More »

TikTok Finalizes a Deal to Form a New American Entity

ByteDance, China, Compliance, deal, National Security, Privacy, Risk Management, TikTok, US /

TikTok Finalizes a Deal to Form a New American Entity 2026-01-26 at 14:37 By Associated Press TikTok has finalized a deal to create a new American entity, avoiding the looming threat of a ban in the United States. The post TikTok Finalizes a Deal to Form a New American Entity appeared first on SecurityWeek. This […]

TikTok Finalizes a Deal to Form a New American Entity Read More »

A new framework helps banks sort urgent post-quantum crypto work from the rest

CISO, Encryption, EU, Europe, Europol, finance, financial industry, News, Post-Quantum, quantum computing, Risk Management, strategy, tips /

A new framework helps banks sort urgent post-quantum crypto work from the rest 2026-01-22 at 04:57 By Sinisa Markovic Financial institutions now have a concrete method for deciding where post-quantum cryptography belongs on their security roadmaps. New research coordinated by Europol sets out a scoring framework that helps banks rank systems and business use cases […]

A new framework helps banks sort urgent post-quantum crypto work from the rest Read More »

Cyber risk keeps winning, even as AI takes over

Allianz, Artificial Intelligence, cyber risk, cybersecurity, News, report, Risk Management, supply chain /

Cyber risk keeps winning, even as AI takes over 2026-01-19 at 07:00 By Anamarija Pogorelec Cyber risk continues to dominate global business concerns, with AI rising quickly alongside it. According to a new risk survey from Allianz, both are influencing how organizations plan for disruption, resilience, and recovery across regions and industries. Cyber incidents stay […]

Cyber risk keeps winning, even as AI takes over Read More »

Scroll to Top