Aligning Stakeholders, Protecting Against Malicious Insiders, and the Reality that Nothing is Purely Internal Anymore

A NetSPI director offers eight predictions for 2021: automation paired with human context, security hiring and budgets, risk-based security, insider threats, and external attack surface management.

A reflection on how organizations lean on technology products as a cure-all for security problems they don't understand, buying standardized solutions that create a false sense of security.

Security metrics fall into effort, result, and environment types—from training hours to days since the last breach. Tracking them proves program value and helps justify budgets to leadership.

I recently had the opportunity to review an article by Michael Koploy of Software Advice titled "HHS Data Tells the True Story of HIPAA Violations in the Cloud".

We held the Secure360 conference in the Twin Cities last week. Presentation topics included PCI, cloud computing, and problems within the security industry.

Preparing for an audit can be one of the best ways to fund and improve your security program, but this “stimulus package” for your compliance effort typically dwindles once an organization completes or passes an audit.