Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Risk Management

5 Cyber Governance Tips for Board Members, Inspired by New Bitsight-Google Study

Cybersecurity has become a critical part of corporate governance, with board members increasingly held accountable for the digital safety of their organizations. Amid rising breach costs, new cybersecurity regulations like those from the U.S. Securities and Exchange Commission (SEC), and new studies finding widespread cybersecurity failures, the impact of board-level cyber governance decisions is significant.

Transforming Cybersecurity Risk Assessments Into Actionable Plans With CRQ

‍Market success has often demanded that business leaders take risks. Some of the most profitable executives are those who have pursued bold initiatives, recognizing, despite the dangers, the potential rewards. However, as organizations grow and become more complex, the costs of these risks rise, demanding a more data-driven approach to its management.

Navigating the Future of AI Governance: A Guide to NIST AI RMF, ISO/IEC 42001, and the EU AI Act

In the rapidly evolving landscape of artificial intelligence (AI), governance, risk, and compliance (GRC) professionals somehow need to navigate the increasingly complex challenges of trustworthy development, deployment, and monitoring of AI systems.

National Cyber Security Centre (NCSC) Vulnerability Management Guidance Checklist

As of February 12, 2024, the National Cyber Security Centre (NCSC) has released Version 2.0 of its vulnerability management guidance. This update provides organizations with the latest strategies and practices to identify, assess, and manage cybersecurity vulnerabilities effectively. The NCSC’s updated guidance on vulnerability management outlines the importance of proactively managing vulnerabilities to secure technical estates.

What is the Zero Trust Security Model?

Traditional security paradigms are increasingly falling short against sophisticated cyber threats in the dynamic and challenging cybersecurity landscape. This has led organizations to adopt the zero-trust security model, a paradigm shift that assumes no internal or external entity is to be trusted without verification.

Applying Vulnerability Intelligence to CVSS and SSVC Frameworks

In this presentation, we explore the intersection of vulnerability intelligence and prioritization frameworks such as CVSS and SSVC as a means for strategically and rapidly prioritizing vulnerabilities to stay ahead of exploitation risks. We delve into the process of applying real-time threat intelligence tailored to the vulnerability landscape to enhance decision-making, optimize resource allocation, and ensure a precise and proactive defense against cyber threats.

Love in the Time of Cyber Threats: Romance Scams and Dating App Cybersecurity

As the digital attack surface expands, organizations and individuals worldwide face the nonstop threat of cyberattacks, phishing scams, and other cyber vulnerabilities. And with Valentine’s Day here, romance scams — especially ones originating online — are intensifying. With that in mind, SecurityScorecard’s researchers took a close look at the world of dating app security and romance scams to protect people—and their hearts—during Valentine’s Day.

Nucleus Security Raises $43 Million Series B Funding to Lead Innovation in Enterprise Risk-Based Vulnerability Management

Nucleus Security announces it has secured $43 million in Series B funding led by Arthur Ventures and Lead Edge Capital. This milestone marks a significant leap forward in the company's mission to redefine how enterprises manage risk exposure from vulnerabilities across infrastructure, cloud, and application portfolios in one unified platform.

Cyber Risk Progression Feature Empowers CISOs to Highlight Success Over Time

‍ For chief information security officers (CISOs), understanding how their organization's unique cyber risk landscape has evolved is paramount. Chronological analysis not only enables risk trends to emerge with more clarity but also provides the essential context required for more informed decision-making.