Page 30 - White Papers - FFIEC bank information security

The Intersection of DevOps and InfoSec: Why Security Benefits from Combining the Two

While the DevOps model drives digital transformation and the rapid delivery of new software products and services, security teams struggle to keep pace. DevOps processes largely take place outside the purview of information security (InfoSec) and often without their involvement. This whitepaper explores the...

The Perimeter Has Left the Premises: Securing Today's Attack Surface

Today's attack surface presents a growing challenge to CISOs looking to understand and reduce their cyber risk. When it comes to IT infrastructure, it's fair to say the perimeter has left the premises. Whether it's discovering short-lived assets (e.g., containers), assessing cloud environments or maintaining web...

AI and Machine Learning in Regulated Industries

The hype around artificial intelligence (AI) and machine learning (ML) has exploded, sometimes overshadowing the real uses and innovations happening every day at organizations across the globe. The reality is that applying AI and ML to data-dependent challenges presents the opportunity for better security, faster...

A New Look at Vulnerability Management

For too many organisations, software vulnerability management is just about "patch Tuesday." Vulnerability management has evolved significantly in the past few years. Organisations need to adopt a new strategy focusing on visibility, prioritised response, and mitigation. When you look back at the wave of...

Sponsored by Darktrace

Cyber AI & Darktrace Cloud: Securing New Computing Models, Applications, Users, and Devices

With 90% of organizations expected to have hybrid cloud infrastructure by 2020, the migration to the cloud is here to stay. Yet the reality is that digital environments can be a security blind spot for many organizations who struggle with the limited visibility and control, especially as their existing security tools...

Sponsored by Darktrace

Machine Learning in the Era of Cyber AI

Amidst an era of evolving cyber-threats, legacy security approaches are being replaced by applications of machine learning and AI. While machine learning has the power to transform cyber defense, the challenge of getting it to work at scale, in a variety of dynamic data environments, without human intervention, is not...

Sponsored by Darktrace

The Future of AI-Powered Autonomous Response

With stretched security teams struggling to keep up with evolving cyber-threats, autonomous response technologies leveraging AI are transforming how quickly and effectively human security teams respond to emerging threats. Download this whitepaper to learn: Why legacy incident response strategies are...

Sponsored by Darktrace

Darktrace Discoveries 2018: From the Latest Ransomware to IoT Attacks

From never-before-seen ransomware to industrial IoT hacks, attackers are increasingly employing new attack methods and exploiting every entry point to infiltrate corporate networks. Moreover, insiders bring another layer of uncertainty to every organization - so how do security teams catch what's lurking within their...

10 Things You Ought to Know Before You Benchmark Your Software Security Program

Benchmarking your software security initiative can tell you if you are keeping pace with your peers, or if you should accelerate your efforts to rise above the competition. The results of a benchmarking assessment can help you identify new security strategies and prioritize scarce resources to be most effective....

Assess Your Software Security Initiative with Advice from Global FIs

Building Security in Maturity Model, BSIMM: What is it and How Your Organization Can Leverage the Data Do you ever wonder whether your software security program is the correct one for your organization? You spend time and money on processes, technology, and people. But how do you know whether the security efforts...

The Hijacking of Smartphone Cameras and Microphones

Smartphone cameras and microphones act as the eyes and ears of the digital age, capable of capturing the smallest audio and visual details in high-definition clarity. Unfortunately, threat actors have demonstrated the ability to hijack these smartphone components, using them to gain valuable insights about targeted...

Rethinking Mobile Trust

Smartphones present a uniquely large attack surface that has been repeatedly exploited by threat actors, making it risky to trust these devices with important data. Inherent limitations in the mobile architectures of these devices - especially in a world of chip-based attacks - mean that organizations must find new...

The Risk of Leaving Smartphone Sensors Unprotected

If you hold, share or have access to important information, you should assume your smartphone has already been hacked. Unprotected smartphones could pose the greatest security risks to governments, enterprises and individuals. Consider what's at stake and prevent hackers from capitalizing on your...

Threat Intelligence Playbook

A new era of cyber threats has dawned. Ransomware has advanced significantly and is now capable of taking out infrastructure and operations across the globe, weaponizing known vulnerabilities such as EternalBlue and crippling businesses for months or more. WannaCry marked the start of these techniques and was one of...

2018 Cybersecurity Report Card

Like it or not, good grades matter. As organizations become increasingly focused on benchmarking internal groups for their ability to run efficiently and add business value, cybersecurity teams must be positioned to measure their programs' effectiveness and sophistication against industry standards. In this second...