Page 25 - White Papers - information risk management

What's Your Data Really Worth

Everyone tells you your data has value, but ... how much? New research from ESG analyzed 1,350 organizations worldwide to discover a three-stage maturity curve for data utilization, and put a dollar value on moving up that curve. Leading-edge data innovators use data to raise gross profits by 12.5%. 97% of this...

Targeted vs. Automated Account Takeover Attacks

Account Takeover is now a ubiquitous term, and ATO prevention has become a high priority for cybersecurity leaders. But most of the effort is put toward thwarting high-volume, automated credential stuffing. Less understood are "targeted ATO attacks." Highly effective and difficult to detect, they cause huge damage to...

The SOAR Buyer's Guide

Investing in a Security Orchestration, Automation and Response (SOAR) platform is a wise and highly strategic decision in combination with your Splunk deployment. But do you know what criteria you should consider when evaluating which SOAR platform to choose? Download your complimentary copy of "The SOAR Buyer's...

How to Fight Phishing, Ransomware and Malware in 2020

The rapidly evolving threat environment requires a multilayered protection strategy - one that closes the technical and human gaps - for every organization to maximize its cybersecurity performance and minimize the risk of falling victim to sophisticated attacks, including phishing, malware and ransomware which can...

Sponsored by Cymulate

451 Report: Scaling Red Teaming Activities With Continuous Attack Simulations

The security skills shortage has been well documented over the years. It remains a salient problem for most enterprises as 66% of respondents to a 451 Research 2019 survey still say they do not have enough information security personnel on staff, and 33% specifically cited pen-testing skills as not meeting their...

Sponsored by Cymulate

How to Face the Rising Tide of APT Attacks

When it comes to the cyberattacks, very few are as scary as the Advanced Persistent Threats (APTs). The National Institute to Standards and Technology (NIST) defines it as "a long-term pattern of targeted, sophisticated attacks." Threat actors are using more sophisticated attack methods which may go undetected...

Sponsored by Cymulate

Simulating the Latest Threats and Techniques with the MITRE ATT&CK Matrix

Breach and Attack (BAS) simulation enables security practitioners to think and act like an adversary. BAS that connects the MITRE ATT&CK TTPs into a full APT kill chain enables them to effectively answer the question "How would an APT attack affect our organization?" Download this eBook to learn more about: How BAS...

Sponsored by Cymulate

How Targeted Cyberattack Simulations Differ from Penetration Tests & Vulnerability Scanning

The main methods that organizations use to verify that their systems and data are protected, are vulnerability scans and penetration tests. However, these do not provide a continuous and complete evaluation of an organization's security posture; especially when it comes to more sophisticated, multi-vector...

Sponsored by Cymulate

The 3 Approaches of Breach & Attack Simulation Technologies

Testing the cybersecurity posture of an organization or its cybersecurity resilience to cyberattacks, has come a long way. The demand for the latest and most comprehensive testing solutions continues to grow to counter the ever-increasing wave of cybercrime. Until recently, the information security...

Sponsored by Cymulate

Testing for Compliance Just Became Easier

Compliance has long been a fact of life for IT and security teams. Compliance regulations originated as efforts to ensure data security and have since mushroomed into constantly changing and overwhelming challenges that consume disproportionate amounts of an organization's resources. In this whitepaper, you'll...

Gartner MQ for SIEM 2020 (Chinese Language)

For the seventh time running, Splunk was named a "Leader" in Gartner's 2020 Magic Quadrant (MQ) for Security Information and Event Management (SIEM). In the report, Splunk was recognized for the highest overall "Ability to Execute." Thousands of organizations around the world use Splunk as their SIEM for security...

Overcoming Third-Party Risk Management Challenges

Provident Finanial Group is a FTSE 250 company, and - with 5,700 employees serving 2.4 million customers - Provident understands the strong expectation to work with thirdparties who respect their customer and employee information. New frameworks such as GDPR, recent data breaches, and increased customer expectations...

Maintain a Clear Bill of (Third-Party Risk) Health

As a technology company interacting with sensitive healthcare data, ClearDATA understands the importance working with trustworthy and compliant third-parties that hold with their customers' information. With critical data housed across three major public cloud providers, ClearDATA needed a centralized software...

Restructuring Your Third-Party Risk Management Program

Percona is an industry leader in providing best-of-breed enterprise-grade support, consulting, managed services, training and software for MySQL, MariaDB, MongoDB, PostgreSQL and other open source databases in on-premises and cloud environments. After noticing gaps across their third-party security and privacy...

What Should We Fix First? Understanding How Risk-Based Vulnerability Management Can Answer That

Security teams are dealing with more vulnerabilities than they can handle. Spreading these limited resources too thin can quickly lead to inefficiency and burnout. Don't waste precious time remediating vulnerabilities that pose little to no risk. With risk-based vulnerability management, you'll know exactly which...