Security Operations

4 ways to safeguard CISO communications from legal liabilities

The SEC’s lawsuit against SolarWinds’ CISO highlights the legal liabilities CISOs can face when communicating. Here are four ways CISOs can avoid the pitfalls.

Is HR running your employee security training? Here’s why that’s not always the best idea

Training employees to resist the lure of phishing, scams, and deepfakes is central to a good cybersecurity posture, but to be effective it needs to be handled with plenty of input and guidance from the security team.

Why DEI is key for a cyber safe future

Diversity, equity, and inclusion (DEI) can be a cyber superpower — not just for reducing security skills gaps but for ensuring cybersecurity teams make defenses stronger and more adaptive.

Veterans are an obvious fit for cybersecurity, but tailored support ensures they succeed

Paying attention to the specific needs of military members transitioning to civilian security positions can help organizations improve their recruitment and retention, and the process can benefit hiring programs in general.

Clearing Up Confusion on Supply Chain Attacks

How CISOs are approaching staffing diversity with DEI initiatives under pressure

Despite a seismic shift in government attitudes to diversity, equity, and inclusion policies, many cybersecurity leaders maintain that a diverse workforce comes with many benefits.

The cybersecurity product sales process is broken, but it doesn’t have to be

The relationship between CISOs and vendors is fraught with problems that result in a deeply flawed procurement process - by working together, vendors and CISOs can create a better way forward.

Strategic? Functional? Tactical? Which type of CISO are you?

Research shows various ways to classify CISOs based on role expectations, strengths and experience – distinctions that matter when it comes to ensuring that security leaders land in jobs where they will succeed.

Managing the emotional toll cybersecurity incidents can take on your team

Addressing the psychic pain suffered by cybersecurity team members during major incidents is crucial for security leaders. Experts recommend several measures that can lessen the psychological strain.

Think being CISO of a cybersecurity vendor is easy? Think again

Making the shift from a security product developer to the same role at an enterprise taught made one CISO more prepared, more aware, and more capable of tackling new challenges.