Page 103 - White Papers in Governance & Risk Management

Secure Document Sharing Across Multiple Networks

Government and defence are facing an unprecedented threat from cyber-attack. In the communication infrastructure, files or documents are an essential tool for citizen-to-government and real-time information sharing between networks of varying security classifications and enclaves. Weaponised files embedded with...

Is Your Whole Company On Board With Application Security?

Application Security is much different than other security domains, so applying the standard methods does not necessarily address the unique challenges that AppSec can bring. Network security is everywhere so naturally, we understand the need for securing the perimeter. However, application vulnerabilities, which...

Application Security: Why the Whole Company Needs to be on Board

While board level executives understand the concepts and terms used in network security and perimeter security, application security, as a concept and discipline, is not quite firmly defined. AppSec is much different than other security domains, so applying the standard methods does not necessarily address the unique...

Ironclad APIs: An Approach for Application Security Testing

Application Programming Interfaces (APIs) are a set of operations used for accessing a web application. Today, the "API economy" is quickly changing how the world interacts. Everything from photo sharing, to online shopping, to hailing a cab is happening through APIs. Because of APIs, technical innovation is...

The Security Operations Lifecycle & Why Proactive Security Needs to Be Top of Mind

Every security organisation endeavors to shift from a reactive state of constant busy work towards a state of proactive security. This whitepaper reviews how organisations can work towards this proactive state by integrating the entire security operations lifecycle, from assessing, preparing for, detecting,...

2018 Report: The Evolution of Cyberattacks on Detection and Prevention Controls

In this report, we explore some longer-term trends, many of which have evolved. We look at organisations that have been targeted or re-compromised after remediating a previous attack. We also examine the widening cyber security skills gap and the rising demand for skilled personnel capable of meeting the challenges...

Uncovering the Harsh Realities of Endpoint Management

One of the largest IT security trends that defined 2017 and is expected to continue growing in importance in 2018 is endpoint management. Endpoint management is an essential IT management process that allows a company to centrally manage, update and troubleshoot all its devices including desktops, laptops, servers,...

Conquering Complexity in Endpoint Management

As your endpoint infrastructure becomes increasingly complex, maintaining patch deployments and policies that cover vulnerabilities needs to be a top priority for IT professionals. A recent analysis by Aberdeen Group shows that the volume of critical endpoint vulnerabilities, and the percentage of vulnerabilities...

Oracle & KPMG Cloud Threat Report 2018

Oracle and KPMGs annual report examines 450 global security practitioners and decision-makers to highlight how the rapid pace and agility of the cloud has created a strategic imperative for security to keep pace at scale. The adoption of cloud is undeniably accelerating with 87% of organisations reporting a...

Sponsored by Wombat

The State of Security Education: Healthcare

This report uses healthcare-specific data to explore how medical staff and other end users in this industry are performing on cybersecurity assessments. We analyze responses gathered via nearly 85 million questions asked and answered in our Security Education Platform, as well as data culled from tens of millions of...

Sponsored by Wombat

The International Cybersecurity Awareness Survey: Implications of End-User-Driven Risks

We surveyed more than 2,000 working adults - 1,000 in the US and 1,000 in the UK - about cybersecurity topics and best practices that are fundamental to data and network security. What we found out about the personal habits of these individuals was sometimes heartening, occasionally perplexing, and frequently...

Sponsored by Wombat

2018 State of The Phish Report ®

The 2018 State of the Phish Report presents analysis of data from tens of millions of simulated phishing attacks sent through our Security Education Platform. The report captures and delivers the types of data infosec professionals are seeking as they develop their own security awareness training programs. These...

Sponsored by Wombat

2018 Beyond The Phish Report

Anti-phishing training should be the foundation of any security awareness training program - but it's critical to think beyond email (in more ways than one) in order to effectively strengthen end-user defenses. Simulated phishing attacks - that is, email tests designed to mimic real-world social engineering attacks...

Utilizing Deception Technology To Protect ATM Networks

Distributed deception technology does not provide a viable solution for defending ATM machines against attacks executed physically on the machines themselves. But it is arguably the most effective means of stopping the most damaging attacks - the ones executed against the larger ATM network or those enabled by...

Does Your Incident Response Plan Measure Up?

In many instances, we learn that companies have an incident response plan that looks good on paper but not in practice. The plan cannot just live in a manual that sits on a shelf. It needs to be a strategy that everyone agrees to, can evolve over time, is rehearsed often and can be carried out immediately when the...