Manage

Manage

Learn to apply best practices and optimize your operations.

• Automated patch management: 9 best practices for success

  Automating the patching process is almost a necessity, especially in large organizations. Here's why, plus pros and cons, tips and best practices for keeping systems up to date. Continue Reading

• Key software patch testing best practices

  Every company has to update and patch its software, but without careful testing, serious problems can occur. Here's how to make sure you're following the right steps. Continue Reading

• identity management (ID management)

  Identity management (ID management) is the organizational process for ensuring individuals have the appropriate access to technology resources. Continue Reading

• Cloud database security: Best practices, challenges and threats

  If your company is using a cloud database, it's critical to stay on top of security. Review the security features offered by top cloud providers, plus some best practices. Continue Reading

• 5 top OT threats and security challenges

  Securing operational technology is particularly critical but also especially challenging. Consider these top OT threats and how to manage them. Continue Reading

• 10 enterprise patch management best practices

  It might not be the most exciting responsibility, but the value of a well-executed patch management strategy can't be denied. Use these best practices to build a smooth process.Continue Reading

• Cloud computing forensics techniques for evidence acquisition

  With the proper tools and methodologies, security teams can provide analysts with the critical pieces required to complete cloud computing forensics investigations.Continue Reading

• 5 tips for building a cybersecurity culture at your company

  As a company's cyber-risks evolve, so must its culture. Here are five tips for creating a cybersecurity culture that protects the business and is meaningful for employees.Continue Reading

• Microsoft Teams phishing attacks and how to prevent them

  Users who think phishing happens only over email should think again. Learn about recent Microsoft Teams phishing attacks and how to defend against them.Continue Reading

• Use sudo insults to add spice to incorrect password attempts

  The life of an admin doesn't have to be dry. When a user enters a wrong password, for example, why not respond with a message that says, 'You're fired!' With sudo insults, you can.Continue Reading

• Agent vs. agentless security: Learn the differences

  Enterprises can either use an agent or agentless approach to monitor and secure their networks. Each approach has benefits and drawbacks.Continue Reading

• 10 remote work cybersecurity risks and how to prevent them

  Larger attack surfaces, limited oversight of data use and more vulnerable technologies are among the security risks faced in remote work environments.Continue Reading

• How to manage third-party risk in the cloud

  Third parties, including CSPs, remain a weak point in the supply chain. Adding CSPs into your organization's third-party risk management processes is crucial.Continue Reading

• EDR vs. antivirus: What's the difference?

  Endpoint detection and response and antivirus tools both protect enterprise networks, and both have distinct advantages. Which is better for your organization?Continue Reading

• How to craft a generative AI security policy that works

  The advent of generative AI threatens to poke additional holes in your cybersecurity strategy. Compiling a GenAI-based security policy to guide your responses can help.Continue Reading

• 4 types of prompt injection attacks and how they work

  Compromised LLMs can expose sensitive corporate data and put organizations' reputations at risk. Learn about four types of prompt injection attacks and how they work.Continue Reading

• 5 PaaS security best practices to safeguard the app layer

  Underlying APIs, language choice and cybersecurity features can vary widely across PaaS providers. These five security best practices can help in almost any PaaS scenario.Continue Reading

• 5-step IaaS security checklist for cloud customers

  Get expert advice on patching, data encryption, and identity and access management responsibilities in this enterprise IaaS security checklist.Continue Reading

• How dynamic malware analysis works

  Security teams use dynamic malware analysis to uncover how malware works -- and thereby improve threat hunting and incident detection capabilities.Continue Reading

• Multi-cloud security challenges and best practices

  Where multi-cloud goes, security complexity follows. From configuration to visibility, organizations must be aware of these main challenges and how to overcome them.Continue Reading

• How to use a jump server to link security zones

  Jump servers are a perfect example of less is more. By using these slimmed-down boxes, administrators can connect to multiple resources securely.Continue Reading

• Use cloud threat intelligence to protect critical data and assets

  Cloud threat intelligence helps identify and analyze cloud-based threats, enabling security teams to better understand attacks and more proactively defend against them.Continue Reading

• How to craft cyber-risk statements that work, with examples

  A cyber-risk statement should be clear, concise and simple -- but that doesn't mean it's easy to write. Get tips and read our cyber-risk statement examples.Continue Reading

• Ransomware preparedness kicks off 2024 summit series

  BrightTALK commenced the new year with ransomware readiness, giving viewers workable tips to prevent and recover from a devastating attack. Check out some highlights here.Continue Reading

• Understand the pros and cons of enterprise password managers

  Almost half of breaches occur because of compromised credentials. Using a password manager to control how users create their IDs may be a good step to protect enterprise assets.Continue Reading

• Cybersecurity governance: A path to cyber maturity

  Organizations need cybersecurity governance programs that make every employee aware of the cybersecurity mitigation efforts required to reduce cyber-risks.Continue Reading

• Close security gaps with attack path analysis and management

  Traditional cybersecurity approaches alone can fall short. Comprehensive attack path analysis and management map out vulnerabilities and help organizations protect key assets.Continue Reading

• 6 multi-cloud identity management tips and best practices

  The more cloud services organizations adopt, the more identity challenges they face. Follow these five tips to improve multi-cloud identity management.Continue Reading

• Top 8 cloud IAM best practices to implement

  Cloud adds a level of complexity to identity and access management. Be sure to follow these cloud IAM best practices to prevent identity-related security issues.Continue Reading

• 10 cybersecurity best practices and tips for businesses

  Looking to improve your business's cybersecurity program? Study these 10 cybersecurity best practices and tips.Continue Reading

• Top 15 email security best practices for 2024

  Attackers exploit email every day to break into corporate networks, but the risk can be reduced by adhering to these 15 email security best practices.Continue Reading

• What is incident response? A complete guide

  Incident response is an organized, strategic approach to detecting and managing cyberattacks in ways that minimize damage, recovery time and total costs.Continue Reading

• Top 10 types of information security threats for IT teams

  Know thine enemy -- and the common security threats that can bring an unprepared organization to its knees. Learn what these threats are and how to prevent them.Continue Reading

• Cybersecurity skills gap: Why it exists and how to address it

  The cybersecurity skills shortage is putting enterprises at risk. Worse, it shows no sign of abating. Here is why it's happening and what employers can do to mitigate the problem.Continue Reading

• The 9 best incident response metrics and how to use them

  To solve a problem, one first has to know it exists. In incident response, that means knowing how long it takes to respond to and remediate threats, using these key metrics.Continue Reading

• Building an incident response framework for your enterprise

  Understanding incident response framework standards and how to build the best framework for your organization is essential to prevent threats and mitigate cyber incidents.Continue Reading

• How to build an incident response plan, with examples, template

  With cyberthreats and security incidents growing by the day, every organization needs a solid incident response plan. Learn how to create one for your company.Continue Reading

• 13 incident response best practices for your organization

  An incident response program ensures security events are addressed quickly and effectively as soon as they occur. These best practices can help get your organization on track fast.Continue Reading

• Cloud incident response: Frameworks and best practices

  Cloud incident response, like it sounds, involves responding to incidents in the cloud. But there are nuances to be aware of and unique best practices to follow.Continue Reading

• Web fuzzing: Everything you need to know

  Web fuzzing provides automated web application testing, which enables security teams to discover vulnerabilities within web apps before attackers do.Continue Reading

• Generative AI is making phishing attacks more dangerous

  Cybercriminals are using AI chatbots such as ChatGPT to launch sophisticated business email compromise attacks. Cybersecurity practitioners must fight fire with fire.Continue Reading

• How CISOs can manage multiprovider cybersecurity portfolios

  In today's cybersecurity market, the as-a-service model reigns. That means, as they increasingly rely on outsourcing, CISOs must learn to juggle multiple third-party providers.Continue Reading

• 9 cybersecurity trends to watch in 2024

  Analysts are sharing their cybersecurity trends and predictions for 2024. From zero-day attacks to generative AI security and increased regulations, is your organization ready?Continue Reading

• 12 key cybersecurity metrics and KPIs for businesses to track

  IT security managers need to monitor cybersecurity efforts and make sure they're effective. These 12 metrics and KPIs will help show what's working -- and what isn't.Continue Reading

• The reality behind bypassing EDR attempts

  Attackers have their work cut out for them when it comes to bypassing EDR. Learn about the difficulty of EDR evasion and how to ensure EDR tools catch all threats.Continue Reading

• How EDR systems detect malicious activity

  Endpoint detection and response tools help SOCs separate benign events from malicious activity. Learn how this EDR function works.Continue Reading

• 7 key OT security best practices

  Keeping operational technology secure requires vigilance and effort, especially as OT increasingly converges with IT. These cybersecurity best practices can help.Continue Reading

• 5 MFA implementation tips for organizations

  Organizations need to protect user accounts from malicious attackers. IAM expert Marco Fanti offers tips organizations can use when implementing MFA.Continue Reading

• 15 benefits of outsourcing your cybersecurity operations

  For companies battling data breaches and cyberattacks, MSSPs can offer lower costs, better reliability, broader experience, more skills and other benefits.Continue Reading

• AI in risk management: Top benefits and challenges explained

  AI and machine learning tools can aid in risk management programs. Here are the potential benefits, use cases and challenges your organization needs to know about.Continue Reading

• SBOM formats compared: CycloneDX vs. SPDX vs. SWID Tags

  Organizations can choose between three SBOM formats: CycloneDX, SPDX and SWID Tags. Learn more about them to determine which fits your organization best.Continue Reading

• How to protect your organization from IoT malware

  IoT devices are attractive targets to attackers, but keeping them secure isn't easy. Still, there are steps to take to minimize risk and protect networks from attacks.Continue Reading

• 7 useful hardware pen testing tools

  Penetration testers use a variety of hardware to conduct security assessments, including a powerful laptop, Raspberry Pi, Rubber Ducky and more.Continue Reading

• How to create a cybersecurity awareness training program

  Cybersecurity awareness training often misses the mark, leaving employees undereducated and organizations vulnerable to attack. Here's how to succeed where too many fail.Continue Reading

• Use these 6 user authentication types to secure networks

  One layer of security that all networks and applications need is authentication. Read up on six authentication types, from 2FA to biometrics to certificates.Continue Reading

• Best practices to conduct a user access review

  User entitlement reviews ensure only authorized users have access to essential systems and data. Uncover the steps of a user access review and helpful best practices.Continue Reading

• Build a strong cyber-resilience strategy with existing tools

  Existing security protocols and processes can be combined to build a cyber-resilience framework, but understanding how these components relate to each other is key.Continue Reading

• Why fourth-party risk management is a must-have

  It's not just third-party vendors that pose a security risk. Organizations should also keep an eye on their suppliers' suppliers with a fourth-party risk management strategy.Continue Reading

• Top 6 password hygiene tips and best practices

  Passwords enable users to access important accounts and data, making them attractive targets to attackers, too. Follow these password hygiene tips to keep your organization safe.Continue Reading

• Security log management and logging best practices

  Learn how to conduct security log management that provides visibility into IT infrastructure activities and traffic, improves troubleshooting and prevents service disruptions.Continue Reading

• Using the FAIR model to quantify cyber-risk

  The Factor Analysis of Information Risk methodology helps organizations frame their cyber-risk exposure as a business issue and quantify it in financial terms. Learn how FAIR works.Continue Reading

• 3 phases of the third-party risk management lifecycle

  Contractors and other third parties can make systems more vulnerable to cyber attacks. The third-party risk management lifecycle helps ensure outside vendors protect your data.Continue Reading

• How to disable removable media access with Group Policy

  Removable media can pose serious security problems. But there is a way to control who has access to optical disks and USB drives through Windows' Active Directory.Continue Reading

• How to train employees to avoid ransomware

  Do your employees know what to do if ransomware strikes? As your organization's first line of defense, they should receive regular trainings on ransomware prevention and detection.Continue Reading

• What to consider when creating a SaaS security strategy

  Securing SaaS applications is more important and confusing than ever. Consider visibility, UX and workflow when creating a SaaS security strategy and adopting tools.Continue Reading

• How to use dynamic reverse engineering for embedded devices

  In this excerpt from 'Practical Hardware Pentesting,' read step-by-step instructions on how to find vulnerabilities on IoT devices using dynamic reverse engineering.Continue Reading

• How honey tokens support cyber deception strategies

  Learn how to flip the script on malicious hackers with honey tokens, which act like tripwires to reveal an attacker's presence.Continue Reading

• Improve IAM with identity threat detection and response

  Attackers increasingly target user accounts to gain access. Identity threat detection and response offers organizations a way to improve security for identity-based systems.Continue Reading

• Security hygiene and posture management: A work in progress

  Security hygiene and posture management may be the bedrock of cybersecurity, but new research shows it is still decentralized and complex in most organizations.Continue Reading

• 5 steps to approach BYOD compliance policies

  It can be difficult to ensure BYOD endpoints are compliant because IT can't configure them before they ship to users. Admins must enforce specific policies to make up for this.Continue Reading

• API keys: Weaknesses and security best practices

  API keys are not a replacement for API security. They only offer a first step in authentication -- and they require additional security measures to keep them protected.Continue Reading

• Rein in cybersecurity tool sprawl with a portfolio approach

  Market consolidation can counterintuitively exacerbate cybersecurity tool sprawl, with many products offering overlapping features. A portfolio approach brings clarity to chaos.Continue Reading

• IaC security scanning tools, features and use cases

  Infrastructure-as-code templates help organizations track cloud assets and other important items. Proper IaC scanning can help companies avoid potential security pitfalls.Continue Reading

• Wi-Fi AP placement best practices and security policies

  From a security standpoint, Wi-Fi network designers should consider the physical and logical placement of APs, as well as management, segmentation and rogue devices.Continue Reading

• Enterprise risk management should inform cyber-risk strategies

  Cyber-risk doesn't exist in a vacuum. By understanding the broader enterprise risk management landscape, CISOs can make decisions that best serve the business.Continue Reading

• Implement zero trust to improve API security

  Not all organizations have an API security strategy in place. Using zero trust in API security is one way to protect APIs and reduce their changes of being attacked.Continue Reading

• How to secure blockchain: 10 best practices

  Blockchain has huge potential in the enterprise, but remember all emerging technologies come with their own risks. Consider these 10 best practices for securing blockchain.Continue Reading

• Attack surface reduction rules for Microsoft productivity apps

  Attack surface reduction rules in Microsoft Defender for Endpoint help prevent apps from launching executable files and scripts, running suspicious scripts and more.Continue Reading

• Manage security posture with Microsoft Defender for Endpoint

  Organizations need to implement security posture management to ensure their cybersecurity strategy can address malicious actions inside and out.Continue Reading

• Smart contract benefits and best practices for security

  While smart contracts promise enormous benefits in the enterprise, they also present opportunities for cybercriminals. Explore best practices to keep them secure.Continue Reading

• 9 smart contract vulnerabilities and how to mitigate them

  Smart contracts execute tasks automatically when specific events occur, and often handle large data and resource flows. This makes them particularly attractive to attackers.Continue Reading

• How to conduct a smart contract audit and why it's needed

  Smart contracts ensure the integrity of transactions, such as those that initiate key services. A smart contract audit is one way to ensure the programs work as designed.Continue Reading

• Follow a 6-phase roadmap to secure cyber-physical systems

  Cyber-physical systems help bridge the digital world with the physical world, but they introduce cybersecurity risks that must be addressed.Continue Reading

• How to build a better vulnerability management program

  With a vulnerability management program in place, your organization is better equipped to identify and mitigate security vulnerabilities in people, processes and technologies.Continue Reading

• How to start handling Azure network security

  Before adopting Microsoft Azure, it's important to consider how to secure the cloud network. That's where network security groups and Azure Firewall come in.Continue Reading

• Where climate change and cyber attacks intersect

  One session at RSA Conference 2023 focused on climate change -- a topic that is not commonly featured during cybersecurity conversations, but should be.Continue Reading

• How to prepare for a cybersecurity audit

  Organizations should conduct regular cybersecurity audits to determine if their networks and other assets are properly protected, as well as if they meet compliance mandates.Continue Reading

• How to use a CASB to manage shadow IT

  Shadow IT can cost organizations time, money and security. One way to combat unauthorized use of applications is to deploy a CASB.Continue Reading

• Centralized vs. decentralized identity management explained

  With decentralized identity, organizations can worry less about data security and privacy, while users get more control over their information. But it's not without challenges.Continue Reading

• How to use Azure AD Connect synchronization for hybrid IAM

  Organizations face many challenges authenticating and authorizing users in hybrid infrastructures. One way to handle hybrid IAM is with Microsoft Azure AD Connect for synchronization.Continue Reading

• ICS kill chain: Adapting the cyber kill chain to ICS environments

  As IT/OT convergence continues to gain traction, industrial control system security cannot be ignored. Performing pen tests based on the ICS Kill Chain can help.Continue Reading

• Reinforce industrial control system security with ICS monitoring

  Monitoring an industrial control system environment isn't that different from monitoring a traditional IT environment, but there are some considerations to keep in mind.Continue Reading

• 4 cloud API security best practices

  APIs make up the majority of web traffic now, but they aren't always kept as secure as needed. Consider implementing these four cloud API security best practices.Continue Reading

• 6 principles for building engaged security governance

  Security governance isn't enough. Enter engaged security governance -- an ongoing process that aligns business strategy with security across an organization.Continue Reading

• How to apply and edit Wireshark display filters

  Wireshark display filters enable users to narrow the scope of a network traffic scan. Use this tutorial to apply and edit display filters to make detailed network sniffing easier.Continue Reading

• Customize workflows with Wireshark profiles

  Wireshark has a variety of uses, which is why creating multiple personalized Wireshark profiles is important. Learn about Wireshark profiles, how to share them and more.Continue Reading

• How to build a cyber-resilience culture in the enterprise

  Discover how organizations can build a culture of cyber resilience by reducing risk, limiting damage, having a disaster recovery plan and assuming a cyber attack is coming.Continue Reading

• How to configure Windows privacy settings with Intune

  To personalize UX, Windows devices aren't shy about collecting user data. This isn't ideal for enterprise security. Discover how to lock down privacy settings with Intune.Continue Reading

• Windows security tips for the enterprise

  Securing a Windows environment is no easy feat. Read up on low-hanging fruit to quickly address, as well as top tips from two security practitioners to get started.Continue Reading

• As a new CISO, the first 100 days on the job are critical

  As a chief information security officer, you won't get a second chance to make a first impression. Learn how a CISO's first 100 days lay the foundation for a successful tenure.Continue Reading