Risk Management - Security Ticks

Lawmaker Wants Federal Contractors to Have Vulnerability Disclosure Policies

Laws, Management & Strategy, Risk Management, VDP, vulnerability / SecurityTicks

Lawmaker Wants Federal Contractors to Have Vulnerability Disclosure Policies 25/08/2023 at 14:48 By Eduard Kovacs Congresswoman Nancy Mace has introduced a bill that would require federal contractors to have a Vulnerability Disclosure Policy (VDP). The post Lawmaker Wants Federal Contractors to Have Vulnerability Disclosure Policies appeared first on SecurityWeek. This article is an excerpt from […]

React to this headline:

Lawmaker Wants Federal Contractors to Have Vulnerability Disclosure Policies Read More »

Reinventing OT security for dynamic landscapes

asvin, authentication, CISO, critical infrastructure, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, opinion, regulation, Risk Management, strategy, tips, zero trust / SecurityTicks

Reinventing OT security for dynamic landscapes 18/08/2023 at 07:05 By Mirko Zorz From understanding the challenges of disparate OT protocols and the increasing convergence with IT to grappling with the monumental role of human error, our latest interview with Rohit Bohara, CTO at asvin, delves deep into the landscape of OT security. As cloud solutions

React to this headline:

Reinventing OT security for dynamic landscapes Read More »

How CISOs break down complex security challenges

CISO, cyber resilience, cyber risk, cybersecurity, digital transformation, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, tips, Uptycs / SecurityTicks

How CISOs break down complex security challenges 16/08/2023 at 07:33 By Mirko Zorz The role of the CISO has evolved into a critical position that encompasses many responsibilities aimed at safeguarding digital assets, preserving data integrity, and mitigating cyber threats. In essence, the role of the CISO is a complex and ever-evolving one that demands

React to this headline:

How CISOs break down complex security challenges Read More »

Navigating generative AI risks and regulatory challenges

Artificial Intelligence, cyber risk, cybersecurity, Gartner, generative AI, News, Privacy, regulation, report, Risk Management, survey / SecurityTicks

Navigating generative AI risks and regulatory challenges 14/08/2023 at 06:33 By Help Net Security The mass availability of generative AI, such as OpenAI’s ChatGPT and Google Bard, became a top concern for enterprise risk executives in the second quarter of 2023, according to Gartner. A benchmarked view of emerging risks “Generative AI was the second

React to this headline:

Navigating generative AI risks and regulatory challenges Read More »

What to know about FedRAMP Rev. 5 Baselines

CISO, Compliance, cyber risk, cybersecurity, Don't miss, Government, Hot stuff, risk assessment, Risk Management, strategy, tips, USA, Video / SecurityTicks

What to know about FedRAMP Rev. 5 Baselines 10/08/2023 at 06:31 By Help Net Security In this Help Net Security video, Kaus Phaltankar, CEO at Caveonix, discusses how the recent approval of the FedRAMP Rev. 5 Baselines is a significant step forward in the cloud security and compliance domain. The implications for CSPs and third-party

React to this headline:

What to know about FedRAMP Rev. 5 Baselines Read More »

These Are the Top Five Cloud Security Risks, Qualys Says

Cloud, cloud security, Risk Management, Vulnerabilities / SecurityTicks

These Are the Top Five Cloud Security Risks, Qualys Says 03/08/2023 at 17:47 By Kevin Townsend Cloud security specialist Qualys has provided its view of the top five cloud security risks, drawing insights and data from its own platform and third parties. The post These Are the Top Five Cloud Security Risks, Qualys Says appeared

React to this headline:

These Are the Top Five Cloud Security Risks, Qualys Says Read More »

US companies commit to safe, transparent AI development

Abnormal Security, Artificial Intelligence, Cado Security, Don't miss, generative AI, Government, Hot stuff, News, research, Risk Management, USA / SecurityTicks

US companies commit to safe, transparent AI development 24/07/2023 at 16:30 By Helga Labus Seven US artificial intelligence (AI) giants – Amazon, Anthropic, Google, Inflection, Meta, Microsoft, and OpenAI – have publicly committed to “help move toward safe, secure, and transparent development of AI technology.” The commitments “Companies that are developing these emerging technologies have

React to this headline:

US companies commit to safe, transparent AI development Read More »

MOVEit: Testing the Limits of Supply Chain Security

Endpoint Security, MOVEit, Risk Management / SecurityTicks

MOVEit: Testing the Limits of Supply Chain Security 12/07/2023 at 14:54 By Torsten George The need for cyber resilience arises from the growing realization that traditional security measures are no longer enough to protect systems, data, and the network from compromise. The post MOVEit: Testing the Limits of Supply Chain Security appeared first on SecurityWeek.

React to this headline:

MOVEit: Testing the Limits of Supply Chain Security Read More »

Submarine Cables at Risk of Nation-State Sabotage, Spying: Report

Malware & Threats, Risk Management, submarine, Water / SecurityTicks

Submarine Cables at Risk of Nation-State Sabotage, Spying: Report 28/06/2023 at 15:04 By Ionut Arghire Recorded Future underlines threats to submarine telecommunication cables, such as the risk of intentional sabotage and spying by nation-state threat actors. The post Submarine Cables at Risk of Nation-State Sabotage, Spying: Report appeared first on SecurityWeek. This article is an

React to this headline:

Submarine Cables at Risk of Nation-State Sabotage, Spying: Report Read More »

Preparing health systems for cyber risks and insurance coverage

CISO, cyber insurance, cyber risk, cyberattack, cybersecurity, Don't miss, Features, healthcare, Hot stuff, how-to, News, opinion, Risk Management, strategy, TRIMEDX / SecurityTicks

Preparing health systems for cyber risks and insurance coverage 28/06/2023 at 07:32 By Mirko Zorz Our healthcare systems are at risk of infiltration by threat actors, potentially disrupting services, compromising sensitive data, and even jeopardizing patient outcomes. Among the people addressing these challenges is Dennis Fridrich, VP of Cybersecurity at TRIMEDX, who not only understands

React to this headline:

Preparing health systems for cyber risks and insurance coverage Read More »

Hundreds of Devices With Internet-Exposed Management Interface Found in US Agencies

BOD, CISA, Risk Management / SecurityTicks

Hundreds of Devices With Internet-Exposed Management Interface Found in US Agencies 27/06/2023 at 17:03 By Ionut Arghire Censys identified hundreds of devices within US federal agencies’ networks that expose their management interface to the internet. The post Hundreds of Devices With Internet-Exposed Management Interface Found in US Agencies appeared first on SecurityWeek. This article is

React to this headline:

Hundreds of Devices With Internet-Exposed Management Interface Found in US Agencies Read More »

Why organizations should adopt a cloud cybersecurity framework

Cloud, Don't miss, Expert analysis, Expert corner, framework, Information Security Forum, News, opinion, Risk Management / SecurityTicks

Why organizations should adopt a cloud cybersecurity framework 01/06/2023 at 08:16 By Help Net Security The cloud is the future of enterprise architecture. It’s economical (to a degree), it’s scalable, it’s flexible and – best of all – it’s someone else’s responsibility. Again, to a point. That’s because the cloud comes with its own set

React to this headline:

Why organizations should adopt a cloud cybersecurity framework Read More »

Today’s Cyber Defense Challenges: Complexity and a False Sense of Security

Risk Management / SecurityTicks

Today’s Cyber Defense Challenges: Complexity and a False Sense of Security 25/05/2023 at 16:03 By Torsten George Industry standard frameworks and guidelines often lead organizations to believe that deploying more security solutions will result in greater protection against threats. The post Today’s Cyber Defense Challenges: Complexity and a False Sense of Security appeared first on

React to this headline:

Today’s Cyber Defense Challenges: Complexity and a False Sense of Security Read More »

Organizations’ cyber resilience efforts fail to keep up with evolving threats

CISO, cyber resilience, cyber risk, cyberattacks, cybersecurity, Immersive Labs, News, report, Risk Management / SecurityTicks

Organizations’ cyber resilience efforts fail to keep up with evolving threats 18/05/2023 at 08:00 By Help Net Security A steady increase in cyberattacks and evolving threat landscape are resulting in more organizations turning their attention to building long-term cyber resilience; however, many of these programs are falling short and fail to prove teams’ real-world cyber

React to this headline:

Organizations’ cyber resilience efforts fail to keep up with evolving threats Read More »

US Probing Cybersecurity Risks of Rockwell Automation’s China Operations: Report

China, Featured, ICS/OT, Risk Management, Rockwell Automation / SecurityTicks

US Probing Cybersecurity Risks of Rockwell Automation’s China Operations: Report 11/05/2023 at 19:23 By Eduard Kovacs US government investigating whether the Chinese operations of industrial giant Rockwell Automation pose a cybersecurity risk to critical infrastructure. The post US Probing Cybersecurity Risks of Rockwell Automation’s China Operations: Report appeared first on SecurityWeek. This article is an

React to this headline:

US Probing Cybersecurity Risks of Rockwell Automation’s China Operations: Report Read More »