Videos

Cybersecurity engineering: CISSP demands broad IT knowledge

Boost your CISSP exam prep with this video reviewing key concepts covered in Domain 3 of the CISSP exam, Security Engineering.
Identify and maintain ownership of data: A guide for CISSPs

CISSPs must lead the way in driving good data management, which begins with defining data ownership and access policies. Learn more in this video with infosec expert Adam Gordon.

As privacy requirements evolve, CISSPs must stay informed

Just as technology constantly changes, so too do the laws and regulations that govern data privacy. CISSPs must remain aware of their organization's individual requirements.
How a threat intelligence platform can anticipate future attacks

Threat intelligence technology can analyze data to forecast future attacks and provide actionable countermeasures. Learn if it is suitable for your enterprise.
Bolster your DLP strategy with help from the cloud and CASBs

As data is increasingly stored in the cloud, it's difficult to maintain a DLP strategy if you're faced with poor data visibility. Find out how you can harness cloud to improve the process.
How big data tools and technologies can be protected from risk

Big data tools and technologies can contribute to your enterprise's overall security, but they also require protection. Find out the controls your enterprise can implement.
Privileged user access: Managing and monitoring accounts

Maintaining the security principle of least privilege can prevent abuse of privileged user accounts. Learn about the best practices for monitoring privileged access.
Preparing for new DDoS techniques: Mitigating the inevitable attack

Attackers are using DDoS techniques that focus on IoT and IPv6. Learn how to build a response plan, select mitigation solutions and recover from an attack.
Recent SSL attacks: How to protect your organization

SSL attacks such as Heartbleed, POODLE and Shellshock have placed countless enterprises at risk. Learn how these different attacks work, and how they can be prevented or mitigated.
How Android 5 security compares to other mobile OSes

Do the significant improvements made by Google to Android 5 security mean Android devices are ready for enterprise use? Learn how Android stacks up against other mobile OS.
Expanding the IAM infrastructure to meet emerging challenges

Your IAM infrastructure should cut through the 'access excess' that is plaguing most companies. Learn how to overcome the challenges posed by migration to cloud and mobility.
Dave Shackleford: Tips for IT security tools convergence

More IT security products will be purchased as part of a suite offering from a single vendor. We offer guidance on how to evaluate these products and avoid tool overlap.
Adjusting your network perimeter security

Expert Johna Till Johnson explains how the enterprise perimeter became obsolete, and how to replace network perimeter security with an approach to perimeterless security.
Learn strategies for plugging a mobile data leak

The loss of data via mobile devices employees bring into their enterprise is becoming a bigger and bigger risk. Learn leak-stopping security strategies.
Learn from the past: Ensure a secure future of information security

To ensure the future of information security, enterprises must learn from the past, launch proper training and install the right technologies.
Innovative security key to solving big picture enterprise security woes

Innovative security should be on everyone's mind according to Eric Cole Ph.D. of the SANS Institute. Learn how to look beyond only day-to-day enterprise security.
Gula talks Nessus agents and Nessus cloud

Video: SearchSecurity spoke with Tenable co-founder Ron Gula about recent additions to the Nessus feature set, including a version that lives in the cloud.
CISOs: Application security programs need improvements

An up-to-date application security program -- as well as knowing how to connect with stakeholders -- is critical to being a successful CISO today, said Renee Guttmann, vice president, Office of the CISO at Accuvant Inc.
Choosing a threat intelligence platform: What enterprises should know

Video: Threat intelligence tools are a growing market and enterprises need to be able to see through the hype to get the best product for them.
From CCSP to CISSP: A look at (ISC)2 cybersecurity certifications

Video: Cybersecurity certifications are not in short supply, but (ISC)2 still dominates the field with CISSP and the new CCSP certification from its CSA partnership.
Addressing wearables security, the next wave of BYOD concerns

Wearables are the next wave of BYO devices infiltrating the enterprise. Domingo Guerra, president and co-founder of Appthority, talked to SearchSecurity at RSA Conference 2015 about how to address the onslaught.
Emerging hacking trends worry seasoned security professionals

Video: Some new hacking trends have security professionals worried, including Robert "RSnake" Hansen, who notes the speed and motivation of today's attackers.
Emerging security trends enterprises should keep an eye on

Video: KPMG's Ronald Plesco discusses the main emerging security trends -- security analytics, the Internet of Things and virtualization -- and what else is on the horizon for the industry.
The right approach for a security vulnerability disclosure policy

Qualys CTO Wolfgang Kandek discussed the hot topic of responsible vulnerability disclosure policies, and the friction between Google and Microsoft, at RSA Conference 2015.