Page 4 - White Papers in Governance & Risk Management

What You Need to Know to Combat the Insider Threat

Download this to learn how an Insider Threat Interdisciplinary Working team can help provide a bird's-eye view of your organization

2020 Ponemon Cost of Insider Threats Global Report

The 2020 industry benchmark report independently conducted by the Ponemon Institute and sponsored by IBM Security and ObserveIT is now available. What are the findings and implications of an insider breach? Ponemon Institute's latest report is conducted to understand the direct and indirect costs that result from...

Insider Risk Management: Adapting to the Evolving Security Landscape

Download this eBook to find out how to start tackling an insider risk management problem.

2020 Ponemon Cost of Insider Threats Global Report

The 2020 industry benchmark report independently conducted by the Ponemon Institute and sponsored by IBM Security and ObserveIT is now available. What are the findings and implications of an insider breach? Ponemon Institute's latest report is conducted to understand the direct and indirect costs that result from...

Building Security into the DevOps Life Cycle

The primary goal when breaking the build in the CI/CD DevOps life cycle is to treat security issues with the same level of importance as quality and business requirements. If quality or security tests fail, the continuous integration server breaks the build. When the build breaks, the CI/CD pipeline also breaks....

The Buyer's Guide to Cyber Threat Intelligence

The Recorded Future buyer's guide will help you to answer 11 key questions at the center of deciding how to invest in a threat intelligence solution. A template is also included to help build an RFP you can use to quiz vendors on their capabilities. The guide includes: Definitions of types of threat intelligence...

Justifying Your Insider Threat Program

Security professionals have long struggled to demonstrate the return on investment of their security spend. Getting sign off for an insider threat program is no different. Advanced analytics and user and entity behavior analytics (UEBA) solutions enhance the security posture of organizations deploying them....

The Accidental Hacker

When we think of insider threats, we inevitably imagine the likes of a Julian Assange or Edward Snowden, and spectacular leaks of confidential information with vengeful or ideological motivations. But while a WikiLeaks-type threat is well understood, an intense focus on malicious threats risks missing out all the...

Threat Brief: Iranian Cyber Warfare

Most U.S. organizations have already been monitoring and defending against Iranian advanced persistent threat (APT) groups for years. With that said, this is a good opportunity to assess whether your organization is a likely target of Iranian state-sponsored cyber operations, and determine if your team is ready and...

Sponsored by Attivo Networks

Defending Against Insider Threats With Attivo Networks

Insider threats are one of the most difficult challenges an organization can face. Where a range of conventional defenses exist to thwart exterior threats, malicious actors within an organization are much more difficult to identify and contain. This paper will delve into the challenges presented by insider threats and...

Sponsored by Attivo Networks

Deception-Based Threat Detection: Shifting Power to the Defenders

Increased compute power, artificial intelligence, and tools on the Dark Web are equipping cyberattackers with the resources to launch more sophisticated and destructive attacks. Reactive defenses are no longer enough to stop attackers from infiltrating even the best security architectures. Environmental dynamics are...

Sponsored by Attivo Networks

Active Deception to Combat Advanced Threats

As cyberattacks increase in sophistication and penetrate networks with higher frequency and effectiveness, security professionals are expressing growing concerns about being able to quickly detect and stop in-network threats from both internal and external threat actors. The growing number of these cyberattacks have...

Sponsored by Attivo Networks

Case Study: A View of Deception Technology in Security Testing

Whether security testing is driven by compliance or as part of standard security resiliency testing, it is a vital component of an organization's defenses, especially in today's era of high-profile breaches. Download this whitepaper to learn more about: The role of deception in security testing Examples of Red Team...

Sponsored by Attivo Networks

Intercepting Live Attacks With The Attivo Networks AdSecure Solution

By design, Active Directory (AD) will readily exchange information with any member system it manages. Attackers can also leverage this access to extract information on the entire domain quickly. Security teams may not realize that attacks on AD are occurring because the activities will appear as if AD is providing...

Sponsored by Attivo Networks

Why Active Directory (AD) Protection Matters

Active Directory Mismanagement exposes 90% of businesses to breaches. Download this infographic to learn more about: The percentage of active directories that pentesters are able to breach How open source tools are simplifying AD exploitation Other areas of opportunity for exploitation...