Security Operations

Business Operations | News, how-tos, features, reviews, and videos

So, you don’t have a chief information security officer? 9 signs your company needs one

Many companies have yet to embrace the role of CISO, but with the ever-expanding threat landscape there are growing reasons to consider adding the ultimate cyber boss to the management mix.

Nov 18, 2024 10 mins

CSO and CISO Human Resources Security Practices

Five-country attack on cybercrooks welcomed by security expert

Arrest of 41 suspects more important than takedown of 22,000 malicious IP addresses, he argues.

Nov 6, 2024 6 mins

Cybercrime Legal

Kicking dependency: Why cybersecurity needs a better model for handling OSS vulnerabilities

Most organizations are still immature when it comes to identifying open-source dependencies that can usher in a host of problems when dealing with vulnerabilities.

Nov 6, 2024 11 mins

Security Software Supply Chain Threat and Vulnerability Management

Delta gets serious and sues CrowdStrike

After CrowdStrike’s software glitch caused massive cancellations and delays in air traffic worldwide, the US airline is now going to court.

Oct 28, 2024 2 mins

Legal Security

CISOs grapple with a growing concern: Stress-related substance abuse

The constant pressure of the CISO role can lead to burnout and in some cases drinking or drug abuse, compounding isolation and stress. Some are speaking out and calling for change.

Oct 16, 2024 8 mins

CSO and CISO Human Resources IT Leadership

US DoD finalizes CMMC cyber rules for suppliers

The Cybersecurity Maturity Model Certification (CMMC) is a US Department of Defense program outlining tough requirements for Defense Industrial Base contractors to ensure the protection of sensitive data. It is expected to take effect by year-end.

Oct 15, 2024 5 mins

Compliance Government IT Laws and Regulations

Do the Marriott cybersecurity settlements send the wrong message to CISOs, CFOs?

To partially close the loop on the fallout from three major data breaches between 2014 and 2020 impacting more than 344 million customers, Marriott has settled both with the Federal Trade Commission and almost every American state. But the terms of t

Oct 10, 2024 10 mins

Cyberattacks Data Breach Legal

CrowdStrike failure: the beginning of the end of software without guarantees?

CrowdStrike’s crash-inducing security software update raises concerns about suppliers’ responsibility to offer quality guarantees for their products.

Aug 1, 2024 8 mins

Legal Security Software

Internships can be a gold mine for cybersecurity hiring

Security leaders looking for bright new talent can benefit from a well-run internship program.

Jul 22, 2024 9 mins

CSO and CISO Human Resources IT Skills and Training

Federal judge greenlights securities fraud charges against SolarWinds and its CISO

Although the court dismissed most of the SEC’s charges in its lawsuit against SolarWinds, the by far most serious charge – securities fraud by both the company and its CISO – survived. CISOs have little reason to celebrate.

Jul 19, 2024 6 mins

CSO and CISO Legal Vulnerabilities