How do we improve the security culture in our organizations? Our security team keeps coming back to that fundamental question, and we are constantly looking for ways to help. Why? Culture change is a ...

October is Cybersecurity Awareness Month. It is also the month when we traditionally talk about things that go "boo" in the night. Unfortunately, ...

Cybersecurity Awareness Month works best as a launchpad for long-term initiatives. Learn how CISOs can use October to improve security culture year-round.

The METI SCS evaluation system aims to strengthen cybersecurity across the entire supply chain. Among its requirements, one ...

As threat actors continue to evolve, so does the tooling that protects a firm's environment. In addition to training, security advisories should be distributed on a regular basis, and security ...

As AI becomes more embedded in everyday work, organizations need to ensure their approach to human risk keeps pace with their AI governance responsibilities ...

HR departments were once blissfully divorced from cybersecurity responsibilities—but not anymore. Today, they are increasingly involved in cyber-training programs for employees. Security awareness ...

Security awareness is one of the most important steps to building a culture of security in an organization. However, finding the right approach to engage employees in security awareness programs is ...

Whenever a data breach or a ransomware attack occurs, usually there’s an unsuspecting employee who has clicked on a malicious link or not followed the correct security policies or processes. This is ...

A company once sent an email to all of its employees (about 500 of them), telling them about a holiday bonus of $650. When prompted to click on a link and fill out a form with their personal details ...

You’ve invested time and money into the security of your organization’s network. You’re protecting everything from your data to endpoints and networks. So, it’s no surprise that your IT department ...

CISOs and security leaders make a point to gather analytics and data to establish meaningful metrics for their organizations’ cybersecurity. Key performance indicators (KPIs), such as intrusion ...