Security Management Strategies for the CIO-
Leveraging IT asset management to reduce infosec risk
IT asset management expert Barb Rembiesa explains how ITAM best practices like IT asset standardization and rationalization reduce IT security risk.
-
Vendor-specific information security certifications
Updated for 2013, experts Ed Tittel and Mary Lemons guide you through the crowded field of vendor-specific information security certifications.
-
Intro to vendor-neutral security certifications
Ed Tittel and Mary Lemons offer the definitive primer for vendor-neutral security certifications in 2013.
-
SearchSecurity.com IT security certifications guide
Afraid of making a wrong turn in your career? Our newly updated 2013 guide to information security certifications maps out all your options.
-
Network flow analysis for network security visibility
To overcome network security issues from advanced attackers and BYOD, security professionals are turning to network flow analysis to gain improved network security visibility.
-
Exploit toolkits explained: How they aid cyberattacks
Expert Nick Lewis details how automated exploit kits are evolving and offers mitigations for the latest methods employed by these attack toolkits.
-
An M&A HIPAA compliance checklist
Learn about the important HIPAA compliance best practices that can help maintain compliance before and after a corporate merger or acquisition.
-
How to prevent the top five most common Web app flaws
Expert Michael Cobb details the five most common Web application vulnerabilities and provides methods to help enterprises to secure them.
-
SIEM best practices for advanced attack detection
SIEM struggles are common, but Mike Rothman explains why SIEM products are critical for advanced attack detection, and offers a SIEM tuning step-by-step.
-
Reducing compliance risk through compliance automation
Tony UcedaVelez offers tips for automating compliance tasks to reduce IT security and compliance risk while easing the pain of arduous compliance audits.
-
The evolution of threat detection and management
Enterprises must understand the latest threat detection options to keep up with advanced cybercriminals who can bypass enterprise security defenses.
-
Choosing among antimalware tools: Final considerations
Mike Rothman discusses important last-minute considerations when choosing among antimalware products from finalist antimalware vendors.
-
Selecting antimalware products: Key vendor questions
Mike Rothman offers 10 critical questions to ask antimalware vendors when seeking out the best antimalware products for enterprise use.
-
Choosing the best antimalware: Technical considerations
Mike Rothman discusses the evolution of malware and how today's antimalware products should handle detection and remediation.
-
Antimalware software: Business benefits and drawbacks
Mike Rothman discusses how antimalware software has evolved to develop various business and technology issues, but also still holds many benefits.
-
Red October deconstructed: What enterprises can learn
Expert Nick Lewis details the recently uncovered Red October malware campaign, plus the new and existing controls needed to thwart cyberespionage.
-
How to retain good infosec employees
Expert Ernie Hayden offers employee retention strategies. Learn how to keep good enterprise infosec staff for the long haul.
-
How CISOs can fill security positions
Expert Ernie Hayden advises CISOs on best practices for filling security positions within the enterprise when faced with a lack of talent.
-
Defining the benefits of a securely configured VLAN
Expert Brad Casey explains how to configure a VLAN in order to achieve the benefits of VLAN security, including protection against insider attacks.
-
Is security an issue for the Ruby on Rails framework?
The recent Ruby on Rails security vulnerabilities can be patched. Expert Michael Cobb discusses the fallout and offers help with remediation planning.
-
PCI compliance and third-party payment processors
Expert Mike Chapple details the PCI SSC's third-party processor rules and how to outsource card processing and stay PCI DSS compliant.
-
MDM 2.0: Aligning products with mobile policy
As MDM features become more robust, enterprises must not only look for mature products, but also evolve mobile security policies accordingly.
-
Getting started with Web-based 2FA
The Web's top brands are implementing two-factor authentication for consumer Web authentication. Learn 2FA benefits, burdens and how to get started.
-
South Carolina breach: A lesson in security alignment
Ernie Hayden details how South Carolina's Department of Revenue breach proves business and IT security are often out of alignment, and how to fix it.