Page 5 - White Papers in Governance & Risk Management

Rise Above the Risk: Privileged Users in the Federal Sector

Privileged users can be an agency's riskiest employees, as many have access beyond their roles or responsibilities. Moreover, current security platforms often fail to provide the necessary context to show if an incident is caused by an insider. What is your agency doing to address potentially high-risk employees and...

Does Your NGFW Block 99.9% of Attacks, including AETs?

Forcepoint�� Stonesoft® NGFW earned a "Recommended" rating in the NSS Labs Next Generation Intrusion Prevention System (NGIPS) Comparative Report for overall security effectiveness, performance and TCO. Stonesoft outperformed IPS-only products while also providing next-gen/cloud-based firewalling, VPN connectivity,...

The Six Core Competencies of a Successful Threat Intelligence Program

Building a threat intelligence team from the ground up can be riddled with political inertia. This whitepaper details how to merge operational and strategic capabilities to automate and analyze external attack data to identify current and future security threats. Discover the six core competencies that comprise a...

Would You Re-Hire Your IPS Today? What's Required in a Next-Gen Solution

The threat landscape certainly has changed in recent years. But can you say the same about the traditional intrusion prevention system."The biggest problem with IPSs today is that organizations are trying to fight today's threats with yesterday's solutions," says Bertone, who serves as CTO of Fidelis Cybersecurity....

Don't Gamble on Staying Safe from Ransomware; You Can't Afford it!

If ransomware has not already had a significant impact on your organization, it is most likely because you have simply been lucky...so far. Almost half of entities in the U.S. have been hit this past year alone and have lost not only money, but also reputation, IT hours and in some cases, total business functionality....

How to Talk to Your Boss About Cybersecurity (Even if They Don't Know What That Means)

Talking to your boss about cybersecurity is vital, yet we often get sidetracked by day-to-day activities and never take the time to sit down and get on the same page...or simply because it can be very daunting to try to make a case for something that your boss doesn't really understand. Where do you even begin and...

Prescription for Savings: Pharmaceutical Innovator Trusts the Cloud to Make Medicine Affordable

The rising cost of pharmaceuticals is an unfortunate reality that can render patients unable to afford medication. This struggle was evident to Dr. Michael Rae who created the Rx Savings Solutions app that helps consumers save on prescription costs. Dr. Rae is a medical expert, but since technology is not his forte,...

'But I Was Compliant...' - Investing in Security for a Compliant Business

It's a story you'll watch unfold time and time again. The breach. The headlines. The confusion. The public apologies. The finger-pointing. And it's often followed by some form of the following statement: "But I was compliant." Compliance is never enough. The challenges are understandable, but taking the path of least...

Case Study: HITRUST for HIPAA Compliance

The Health Information Trust Alliance (HITRUST) began a search for a secure cloud solution for their Common Security Framework (CSF) application. CSF gives businesses the structure, detail and clarity needed to more efficiently and effectively meet healthcare regulatory compliance standards, including HIPAA. The...

Case Study: FORTUNE 50 Company Dramatically Simplifies Vendor Risk Management

A Fortune 50 Healthcare Company is under constant scrutiny from about the safety and security of their products, data and services. The company relies on more than 5,000 suppliers to conduct operations. Existing vendor assessment and tracking methods and tools could not keep up. They implemented Rsam's Vendor Risk...

Oracle Database 12c Security and Compliance

Security and compliance requires a defense in depth, multi-layered, security model that includes preventive, detective, and administrative controls. Controls should be aligned with the sensitivity of the data, its location, its environment, and applicable regulations. Additional consideration should be given to the...

Sponsored by Tenable Network Security, Inc.

Real-Time Compliance Monitoring

Leveraging Asset-Based Configuration and Vulnerability Analysis with Real-Time Event Management It is crucial to monitor for compliance in a manner as close to real time as possible to ensure the organization does not drift out of compliance over time. The greater the gap between monitoring cycles, the more likely...

Five Ways to Reduce Your IT Audit Tax

Most organizations spend 30-50% more on compliance than they should 1. No matter the industry, with regulations such as GLBA, PCI, FISMA, SOX, and other regulations and mandates, it seems nobody is immune to scrutiny - but why spend so much more than what is necessary? In order to reduce the burden of an IT audit,...

Filling the Compliance Gap in Your Microsoft Environment

Is your Microsoft environment compliant? In his new Quest white paper "Filling the Compliance Gap in Your Microsoft Environment," Windows Security expert Randy Franklin Smith examines the importance of compliance in today's business world. Learn how you can ensure your data will be trusted in a court of law and...