What is the best way to measure information security risk? The best way is to jump right in and look for specific vulnerabilities in your systems and applications; this is not unlike measuring the ...

Too many healthcare providers fail to conduct comprehensive, timely risk assessments, as required under HIPAA as well as the HITECH Act, says security consultant Kate Borten, president of The ...

Collects and uses customer or employee personal information. Participates in an industry sector that is considered high risk or critical infrastructure. Offers securities as a publicly traded company.

In 2017, the Security Leadership Research Institute (the Security Executive Council’s research arm) asked security practitioners to choose from a list of which risk-related activities their security ...

Everyone in IT knows it's critical to ensure system and application security, but even the most sophisticated cloud users make mistakes. Careful system design is the foundation of cloud security, but ...

Physical Security -- it's often described as the "forgotten side of security" at some financial institutions, and yet it is a key element of an overall protection strategy. And because the physical ...

Higher education institutions are in a vulnerable position when it comes to cybersecurity. In an alert issued by the FBI earlier this year, the nation’s top law enforcement agency warned that agents ...

In this Help Net Security interview, Phani Dasari, CISO at HGS, discusses key aspects of cybersecurity assessments, including effective tools and methodologies, the role of AI and automation, and ...

There are almost as many different cybersecurity assessments as there are myths about them. It’s important to know what’s true. Let’s face it: Security assessments aren’t much fun for the team on the ...

As cyber threats become increasingly sophisticated and attack methods evolve rapidly, Shun Tak Holdings Limited continues to prioritize cybersecurity and data protection across its business operations ...