Security Operations

Business Operations | News, how-tos, features, reviews, and videos

Software supply chain still dangerous despite a slew of efforts

While recent efforts promise a more secure future for software, experts say several challenges could still vex organizations as they try to improve software security.

Jul 10, 2024 10 mins

Cloud Security Security Practices Supply Chain

Tabletop exercise scenarios: 10 tips, 6 examples

A tabletop exercise is a discussion-based session to test your team on roles and responses during for emergency scenarios. Here are example scenarios and tips to help tune your team for response success.

Jul 4, 2024 16 mins

Business Continuity Phishing Ransomware

US Supreme Court ruling will likely cause cyber regulation chaos

The ruling could weaken almost all US federal cybersecurity regulations, including SEC incident reporting, FCC data breach reporting, and CISA cyber incident reporting rules.

Jul 2, 2024 9 mins

CSO and CISO Government Laws and Regulations

What is digital executive protection and how does it work?

Presidents, CEOs, and other C-suite-level leaders are attractive targets for cybercriminals. Digital executive protection is like a bodyguard service to protect them from bad actors.

Jun 26, 2024 8 mins

CSO and CISO Cyberattacks Employee Protection

Evaluating crisis experience in CISO hiring: What to look for and look out for

Here’s what psychology tells us about having crisis experience, a critical and oft-overlooked variable that shapes the cybersecurity employee supply chain — and it’s not what you might expect.

Jun 25, 2024 8 mins

CSO and CISO Hiring Human Resources

Are you a CISO who doesn’t know jack? Here’s how to bridge your own skills gap

CISOs and other cybersecurity leaders come to the profession from many different avenues, often leaving them deficient in one area or another. Don’t panic, experts say, you can fill in those blanks.

Jun 24, 2024 10 mins

CSO and CISO Human Resources IT Skills and Training

Dutch appellate court rules against Oracle and Salesforce in a GDPR-related cookie case

The ruling means the litigation — which began in 2020 — can continue. The case involves whether cookies collecting user information violates GDPR and whether the two companies are responsible for what web site operators do.

Jun 20, 2024 4 mins

Compliance Legal Privacy

The pressure on CISOs is real: fixing the hiring process would help

For CISOs facing a myriad of challenges in an ever-expanding threat environment, making the hiring process more realistic would bring some welcome relief.

Jun 12, 2024 6 mins

CSO and CISO Human Resources IT Skills and Training

Sleuthcon: Cybercrime emerges in Morocco and law enforcement gets creative

At this year’s cybercrime-oriented conference Sleuthcon, Morocco emerged as a locus of cybercrime, while UK and US law enforcement highlighted how creative they've become in shaming and disrupting criminal groups.

Jun 10, 2024 8 mins

Advanced Persistent Threats Government Hacking

Software supply chain threats continue to plague CISOs

Malware-laced libraries add a new dimension to defending the software supply chain.

May 28, 2024 8 mins

Open Source Security Software Supply Chain