Security News

Tim Bandos joins Digital Guardian as CISO
2020-10-08 22:30

Bandos will bring more than 15 years of experience to the position including his five years as VP of Cybersecurity at Digital Guardian. Prior to joining Digital Guardian, Bandos was Director of Cybersecurity for Dupont where he was responsible for overseeing internal controls, incident response and threat intelligence.

5 strategies for CISOs during a time of rapid business transformation
2020-10-07 19:07

A survey of business leaders by PwC finds the pandemic is causing rapid changes in the roles CISOs play, and offers five tips for ensuring that security remains stable as we enter a new normal. Ninety-six percent of respondents said they're adjusting their cybersecurity plans due to COVID-19, and the biggest evolution in security strategies seems to be baking security and privacy into every business decision.

The CISO’s Guide to Third-Party Security Management
2020-10-06 02:30

The CISO’s Guide to Third-Party Security Management provides the instructions you need to make your organization’s third-party security program effective and scalable. In particular, it covers how...

The state of security and the evolving role of CISOs in a pandemic
2020-09-30 15:21

Identity in a remote world has taken on added importance for cybersecurity leaders speaking in a webinar on the state of security and the evolving role of CISOs at VMworld 2020. "As security leaders, we have to make sure we don't make it a guessing game for employees, and they don't feel they have to be security experts." Sanders said his security team is building architecture and tools so that employees only need to think about whether they are doing their job.

Rinki Sethi Named CISO of Twitter
2020-09-30 12:24

Twitter's search for a new chief information security officer has come to an end. According to her LinkedIn profile, Sethi previously held management positions at eBay, Intuit, Palo Alto Networks, IBM and Rubrik.

Four ways CISOs can move enterprise security into the new normal
2020-09-22 16:37

A roundtable discussion among Cisco chief information security officer advisers Wendy Nather, Richard Archdeacon, and J. Wolfgang Goerlich outlined how the enterprise cybersecurity world is changing, and what CISOs need to do to ensure the "New normal" is a secure one. Archdeacon said that users have to be made the front line of security in this situation, which means implementing security systems that don't rely on enterprise security products connecting directly to remote user's PCs. Multifactor authentication, DNS security, VPNs, and other familiar security products that put the security onus on users will be necessary for now.

What are the traits of an effective CISO?
2020-09-22 03:30

Only 12% of CISOs excel in all four categories of the Gartner CISO Effectiveness Index. The measure of CISO effectiveness is determined by a CISO's ability to execute against a set of outcomes in the four categories of functional leadership, information security service delivery, scaled governance and enterprise responsiveness.

Week in review: Zerologon PoCs released, five steps to recover from ransomware, CISOs’ golden opportunity
2020-09-20 07:55

Attacked by ransomware? Five steps to recoveryWhile there is a lot of discussion about preventing ransomware from affecting your business, the best practices for recovering from an attack are a little harder to pin down. Justifying your 2021 cybersecurity budgetSitting in the midst of an unstable economy, a continued public health emergency, and facing an uptick in successful cyber attacks, CISOs find themselves needing to enhance their cybersecurity posture while remaining within increasingly scrutinized budgets.

CISOs top traits revealed in report: Improvement needed
2020-09-17 18:47

Gartner defines "Effective CISOs" as those who scored in the top one-third of the CISO effectiveness measure. "As the push to digital deepens, CISOs are responsible for supporting a rapidly evolving set of information risk decisions, while also facing greater oversight from regulators, executive teams and boards of directors. These challenges are further compounded by the pressure that COVID-19 has put on the information security function to be more agile and flexible."