What is the best way to measure information security risk? The best way is to jump right in and look for specific vulnerabilities in your systems and applications; this is not unlike measuring the ...

Too many healthcare providers fail to conduct comprehensive, timely risk assessments, as required under HIPAA as well as the HITECH Act, says security consultant Kate Borten, president of The ...

Collects and uses customer or employee personal information. Participates in an industry sector that is considered high risk or critical infrastructure. Offers securities as a publicly traded company.

Physical Security -- it's often described as the "forgotten side of security" at some financial institutions, and yet it is a key element of an overall protection strategy. And because the physical ...

In 2017, the Security Leadership Research Institute (the Security Executive Council’s research arm) asked security practitioners to choose from a list of which risk-related activities their security ...

Everyone in IT knows it's critical to ensure system and application security, but even the most sophisticated cloud users make mistakes. Careful system design is the foundation of cloud security, but ...

Higher education institutions are in a vulnerable position when it comes to cybersecurity. In an alert issued by the FBI earlier this year, the nation’s top law enforcement agency warned that agents ...

There are almost as many different cybersecurity assessments as there are myths about them. It’s important to know what’s true. Let’s face it: Security assessments aren’t much fun for the team on the ...

In this Help Net Security interview, Phani Dasari, CISO at HGS, discusses key aspects of cybersecurity assessments, including effective tools and methodologies, the role of AI and automation, and ...

Quick Summary Looking to stay ahead of emerging cyber risks as your organisation scales? Explore the top seven security risk assessment tools for CIOs of 2025 that help you uncover vulnerabilities, ...

Companies processing “core” and “important” data in the industrial and information technology sectors must comply with China data security assessment requirements introduced in 2022. A new set of ...