Page 2 - White Papers in Governance & Risk Management

SANS Buyer Guide

Vulnerability assessment has been a security requirement for every major regulatory agency over the last 15 years. Yet, time and again, after-incident reports reveal that costly breaches, causing millions of dollars in damage, are a result of known vulnerabilities that went unpatched due to a lack of connection to...

Mitigating Consumer Privacy Risks: A Glimpse Into The Minds of Ten Data Visionaries

Global Data Visionaries are making waves in the digital world. They are championing privacy-led approaches to data usage, which enable organizations to realize the full value of their data, bespoke to their contextual needs. These ‘Data Visionaries’ comprise of individuals who have disrupted industries or...

The CISO's Guide to Third-Party Security Management

Managing the security of your third parties is crucial, but security assessments are riddled with problems, including a lack of context, scalability and relevance. How can you build an effective process? In this comprehensive guide, we provide the guidance you need to make your organization’s third-party security...

Regulation Cheat Sheet

Since the EU's enactment of General Data Privacy Regulation (GDPR) in 2018, the stage has been set for more regulations worldwide, as legislators seek to protect the private data of their constituents. Third-party vendors are cost efficient and help organizations' productivity, but they also present risk. It is...

The CISO’s Guide to Choosing an Automated Security Questionnaire Platform

In this day and age of cyber risk and data privacy regulations, automated third-party questionnaires are a must. Organizations can no longer simply hire vendors without proof of a strong cyber posture, and a comprehensive questionnaire can demonstrate that vendors’ internal security policies are up to par. Yet not...

Boost Hybrid Cloud Security

No matter where you are in your hybrid cloud journey, security is a big concern. Hybrid cloud security vulnerabilities typically take the form of loss of resource oversight and control, including unsanctioned public cloud use, lack of visibility into resources, inadequate change control, poor configuration management,...

Cloud Security Blind Spots: Detecting and Fixing Cloud Misconfigurations

Identifying and fixing security gaps in a cloud architecture may not appear very different from doing the same for on-premises environments. But there are a variety of nuanced differences that can be easy to overlook. If you fail to appreciate and account for them, these misconfigurations can cause security blind...

The Essential Guide to Digital Risk Protection

Within the last few years, digital transformation and Cloud services have increased the complexity of IT infrastructure, making you reliant on multiple third parties to keep your data safe. The threat landscape has also increased in breadth and depth with more attacks, more kinds of attacks and more targeted...

How to Reduce Digital Risk in a Post-COVID World

Businesses that have had to support virtual services and remote workers have taken bold digital transformation steps during the pandemic. The momentum they’ve achieved, as a result, will be difficult to let go. Securing the changes already implemented as well as the changes yet to come in the ‘next normal’ is...

The Evolution of Email Security

Ransomware, phishing, extortion scams - they all are using COVID-19 themes. But socially engineered attacks were already on the rise before the pandemic, say Olesia Klevchuk and Nishant Taneja of Barracuda, who share insights on the evolution of cloud-based email defences. Download this eBook to learn more...

Critical Capabilities for IT Vendor Risk Management Tools

The market for IT vendor risk management tools includes products and services that automate processes in the vendor risk management life cycle. CyberGRX has received the highest score for the second year in a row from Gartner for their VRM Solution with rich assessment data. Don't just take our word for it, read...

CyberGRX Exchange Insights

With over 85,000 third parties ingested and nearly 4,000 third parties assessed, CyberGRX is using this important data to inform the industry and organizations around the world of third-party risk insights and trends. This white paper gives invaluable insight into topics such as: Which industries are the most...

5 Ways to Improve Asset Inventory and Management Using Ordr

You can’t secure what you can’t see. In fact, gaining visibility and control over all your devices is one of the most important, yet challenging tasks for IT and security teams. The number of connected devices has exploded. At the same time, there are more diverse devices – IoT, IoMT and OT—that are sometimes...

TLS Versions: North-South and East-West Web Traffic Analysis

Shocking but true: 44 percent of East-West traffic is not encrypted. If you ever needed a reason to evaluate your own network, our new TLS research report is jammed with more numbers that will motivate you to do so. Researchers studied 275 billion data flows to reveal real-world metrics of SSL/TLS protocol usage, and...

Forrester Best Practices: Identity Management And Governance

The Forrester Report outlines 10 core functional areas of identity management and governance (IMG) and provides the best practices for building and operationalizing an effective IMG program across each functional area. Key Findings of the report: Rightsize user roles to overcome overprovisioned group...