Risk Management - Security Ticks

The CISO’s approach to AI: Balancing transformation with trust

access control, Artificial Intelligence, CISO, cybersecurity, Devo Technology, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, policy, risk, Risk Management / SecurityTicks

The CISO’s approach to AI: Balancing transformation with trust 2024-07-23 at 07:31 By Help Net Security As organizations increasingly adopt third-party AI tools to streamline operations and gain a competitive edge, they also invite a host of new risks. Many companies are unprepared, lacking clear policies and adequate employee training to mitigate these new dangers. […]

React to this headline:

The CISO’s approach to AI: Balancing transformation with trust Read More »

How to design a third-party risk management framework

Beaconer, Compliance, cybersecurity, Don't miss, Expert analysis, Expert corner, framework, Hot stuff, Incident Response, News, opinion, Risk Management, security controls / SecurityTicks

How to design a third-party risk management framework 2024-07-12 at 07:31 By Help Net Security Most organizations focus on securing routers, servers, firewalls, and other endpoints, but threats can also arise from unfamiliar sources such as third-party networks, which can be used by hackers to attack an organization. Through a strong TPRM framework, companies gain

React to this headline:

How to design a third-party risk management framework Read More »

Managing cyberattack fallout: Financial and operational damage

access management, Aspida, cyberattacks, cybersecurity, Data Protection, digital transformation, disaster recovery, Don't miss, Features, Hot stuff, News, opinion, penetration testing, Risk Management, strategy / SecurityTicks

Managing cyberattack fallout: Financial and operational damage 2024-07-12 at 07:01 By Mirko Zorz In this Help Net Security, Ashley Harrington, Director of Cybersecurity at Aspida, discusses the impact of cyberattack on business operations and financial health. Beyond immediate disruptions and financial burdens, cyber incident can severely damage a company’s reputation among customers and partners. Can

React to this headline:

Managing cyberattack fallout: Financial and operational damage Read More »

It’s Time to Reassess Your Cybersecurity Priorities

resilience, Risk Management / SecurityTicks

It’s Time to Reassess Your Cybersecurity Priorities 2024-07-10 at 15:01 By Torsten George A cyber resilience strategy is vital for business continuity and can provide a range of benefits before, during, and after a cyberattack. The post It’s Time to Reassess Your Cybersecurity Priorities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

It’s Time to Reassess Your Cybersecurity Priorities Read More »

Six months of SEC’s cyber disclosure rules

boardroom, CISO, cybersecurity, Don't miss, Government, Hot stuff, regulation, Risk Management, Tanium, Video / SecurityTicks

Six months of SEC’s cyber disclosure rules 2024-06-12 at 06:02 By Help Net Security In this Help Net Security video, Mark Millender, Senior Advisor of Global Executive Engagement at Tanium, discusses the overall sentiment from CISOs of large, public companies on the effectiveness and understanding of SEC’s cyber disclosure rules and common misconceptions and gray

React to this headline:

Six months of SEC’s cyber disclosure rules Read More »

Cloud migration expands the CISO role yet again

CISO, Cloud, Compliance, cybersecurity, Don't miss, Expert analysis, Expert corner, framework, Hot stuff, News, opinion, RegScale, Risk Management / SecurityTicks

Cloud migration expands the CISO role yet again 2024-06-11 at 07:31 By Help Net Security The CISO role used to be focused primarily on information security — creating and implementing policies to safeguard an organization’s data and IT infrastructure from cybersecurity threats. However, as organizations rapidly migrate to cloud environments, the responsibilities and challenges for

React to this headline:

Cloud migration expands the CISO role yet again Read More »

AI’s role in accelerating vulnerability management

Artificial Intelligence, automation, cybersecurity, data analysis, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, Risk Management, Seemplicity, threats, vulnerability management / SecurityTicks

AI’s role in accelerating vulnerability management 2024-06-10 at 08:01 By Help Net Security With its capability to analyze, predict, and automate, AI stands to reshape many corners of business, most notably cybersecurity. In the field of vulnerability management specifically, AI is poised to have a profound impact, enhancing two key areas: Providing quicker analysis and

React to this headline:

AI’s role in accelerating vulnerability management Read More »

Why CISOs need to build cyber fault tolerance into their business

Artificial Intelligence, automation, CISO, cybersecurity, Gartner, generative AI, News, report, Risk Management, tips / SecurityTicks

Why CISOs need to build cyber fault tolerance into their business 2024-06-10 at 07:01 By Help Net Security CISOs who elevate response and recovery to equal status with prevention are generating more value than those who adhere to outdated zero tolerance for failure mindsets, according to Gartner. “Each new cybersecurity disruption exposes the fact that

React to this headline:

Why CISOs need to build cyber fault tolerance into their business Read More »

Avoiding the cybersecurity blame game

cybersecurity, Data Protection, Don't miss, Expert analysis, Expert corner, Hot stuff, human error, News, opinion, policy, Praxis Security Labs, Risk Management / SecurityTicks

Avoiding the cybersecurity blame game 2024-05-29 at 07:31 By Help Net Security Cyber risk management has many components. Those who do it well will conduct comprehensive risk assessments, enact well-documented and well-communicated processes and controls, and fully implemented monitoring and review requirements. Processes and controls typically comprise policies, which will include detailed explanations of the

React to this headline:

Avoiding the cybersecurity blame game Read More »

Effective GRC programs rely on team collaboration

Artificial Intelligence, Compliance, cybersecurity, financial industry, healthcare, LogicGate, News, regulation, report, Risk Management / SecurityTicks

Effective GRC programs rely on team collaboration 2024-05-24 at 06:31 By Help Net Security One in three organizations are not currently able to proactively identify, assess, and mitigate risk with their GRC program, nor are they able to ensure compliance with regulations and frameworks – both key aspects of a mature, holistic GRC program, according

React to this headline:

Effective GRC programs rely on team collaboration Read More »

Post-FTX crypto industry needs education before regulation: Former Biden advisor

crypto exchanges, Cryptocurrency, financial literacy, FTX collapse, innovation-friendly regulations, investor education, Investor Protection, regulatory challenges, Risk Management, SEC crackdown / SecurityTicks

Post-FTX crypto industry needs education before regulation: Former Biden advisor 2024-05-15 at 15:01 By Cointelegraph by Zoltan Vardai “What I preach for is regulation that protects and prevents but does not cripple and destroy [innovation],” the senior adviser told Cointelegraph. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

React to this headline:

Post-FTX crypto industry needs education before regulation: Former Biden advisor Read More »

The complexities of third-party risk management

cybersecurity, data breach, Don't miss, Hot stuff, Prevalent, Privacy, Risk Management, third party compromise, Video / SecurityTicks

The complexities of third-party risk management 2024-05-08 at 06:31 By Help Net Security In this Help Net Security video, Brad Hibbert, Chief Strategy Officer and Chief Operating Officer for Prevalent, discusses five interesting findings from a recent industry study on third-party risk management and what he thinks they mean for cybersecurity professionals and their companies’

React to this headline:

The complexities of third-party risk management Read More »

Understanding emerging AI and data privacy regulations

Artificial Intelligence, Compliance, cybersecurity, Data Protection, Don't miss, EU, Europe, Features, Government, Hot stuff, Immuta, law, News, opinion, regulation, Risk Management, USA / SecurityTicks

Understanding emerging AI and data privacy regulations 2024-05-02 at 08:01 By Mirko Zorz In this Help Net Security interview, Sophie Stalla-Bourdillon, Senior Privacy Counsel & Legal Engineer at Immuta, discusses the AI Act, the Data Act, and the Health Data Space Regulation. Learn how these regulations interact, their implications for both public and private sectors,

React to this headline:

Understanding emerging AI and data privacy regulations Read More »

A closer look at Apiiro’s SHINE partner program

API security, Apiiro, Application Security, cybersecurity, Don't miss, Hot stuff, Risk Management, Video / SecurityTicks

A closer look at Apiiro’s SHINE partner program 2024-05-01 at 16:46 By Help Net Security In this Help Net Security video, Adam LaGreca, Founder of 10KMedia, sat down with John Leon, VP of Partnerships at Apiiro, discusses the company’s new technology partner program SHINE. The name stands for the program’s guiding principles – Seamless, Holistic,

React to this headline:

A closer look at Apiiro’s SHINE partner program Read More »

What AI can tell organizations about their M&A risk

analytics, Artificial Intelligence, cybersecurity, Don't miss, Hot stuff, risk, Risk Management, Vectra, Video / SecurityTicks

What AI can tell organizations about their M&A risk 2024-04-26 at 07:01 By Help Net Security Following the past few years of economic turbulence, merger and acquisition (M&A) activity is on the rise in 2024, with several acquisition deals being announced in the first few months of the year valued at billions of dollars. With

React to this headline:

What AI can tell organizations about their M&A risk Read More »

How to optimize your bug bounty programs

Artificial Intelligence, bug bounty, cybersecurity, Don't miss, Features, hacker, Hot stuff, machine learning, News, opinion, policy, regulation, risk assessment, Risk Management, strategy, tips, Zoom / SecurityTicks

How to optimize your bug bounty programs 2024-04-22 at 08:02 By Mirko Zorz In this Help Net Security interview, Roy Davis, Manager – Vulnerability Management & Bug Bounty at Zoom, discusses the role bug bounty programs play in identifying security vulnerabilities and facilitating collaboration with researchers. He offers advice to organizations, stressing the importance of

React to this headline:

How to optimize your bug bounty programs Read More »

You Against the World: The Offenders Dilemma

Network Security, penetration testing, pentesting, Risk Management / SecurityTicks

You Against the World: The Offenders Dilemma 2024-04-16 at 14:46 By Tom Eston Foreign attackers have many more toolsets at their disposal, so we need to make sure we’re selective about our modeling, preparation and how we assess and fortify ourselves. The post You Against the World: The Offenders Dilemma appeared first on SecurityWeek. This

React to this headline:

You Against the World: The Offenders Dilemma Read More »

Sprinto Raises $20 Million for Automated Risk and Compliance Platform

Compliance, Cybersecurity Funding, funding, Risk Management / SecurityTicks

Sprinto Raises $20 Million for Automated Risk and Compliance Platform 2024-04-10 at 14:33 By Ionut Arghire Risk and compliance solutions provider Sprinto has raised $20 million in a Series B funding round led by Accel. The post Sprinto Raises $20 Million for Automated Risk and Compliance Platform appeared first on SecurityWeek. This article is an

React to this headline:

Sprinto Raises $20 Million for Automated Risk and Compliance Platform Read More »

Defining a holistic GRC strategy

Compliance, cybersecurity, Don't miss, Hot stuff, LogicGate, Risk Management, strategy, Video / SecurityTicks

Defining a holistic GRC strategy 2024-04-09 at 06:31 By Help Net Security End-user spending on security and risk management will total $215 billion in 2024, according to Gartner. In this Help Net Security video, Nicholas Kathmann, CISO at LogicGate, discusses why companies are turning to a holistic GRC strategy. Businesses often consider GRC a “necessary

React to this headline:

Defining a holistic GRC strategy Read More »

How much does cloud-based identity expand your attack surface?

access management, credentials, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, identity, identity management, IS Decisions, News, opinion, Risk Management / SecurityTicks

How much does cloud-based identity expand your attack surface? 2024-03-29 at 08:01 By Help Net Security We all know using a cloud-based identity provider (IdP) expands your attack surface, but just how big does that attack surface get? And can we even know for sure? As Michael Jordan once said, “Get the fundamentals down, and

React to this headline:

How much does cloud-based identity expand your attack surface? Read More »