Page 386 - White Papers - bank information security

Risk Management Framework: Assessing and Monitoring NIST 800-53 Controls for DoD

In 2014, the Department of Defense (DoD) issued instructions that replaced DoD Information Assurance Certification and Accreditation Process (DIACAP) with the Risk Management Framework (RMF). The RMF is designed to be managed as a continual process as the risk posture evolves over time for each information...

Federal Agencies Tech Brief: Security Investigation, Detection and Rapid Response

The fact that Federal agencies are prime targets for the most sophisticated cyber threats is undeniable. If cyberattacks are inevitable, then robust capabilities for security investigation, threat hunting, and rapid response are essential. Government cybersecurity professionals require visibility across their silos of...

The Evolving MECA Cybersecurity Landscape

Organizations in the Middle East and Central Asia are beginning to respond to the nuances of the evolving threat landscape in the region due to an explosion in its information and communications technology infrastructure, and this is changing the risk profile. when addressing the advanced capabilities required to...

Recent Changes in DDoS Attack Strategies

DDoS has undergone a serious change in attack strategy. In previous years it was used a means of gaining hacking credibility in the underground, taking out competitors or just disrupting business normality or the industry. However, a recent string of attacks has not followed convention, and is forcing security...

The DMARC Challenge for Federal Agencies

While many .gov domains have attempted DMARC, few have succeeded in using it to stop fraud. In fact, an exclusive analysis shows that 96 percent of government domains are easy to impersonate with fake emails that appear to come from their domains. Download this whitepaper on DMARC and learn why: Half of the...

An Insider's Guide to Email Authentication Through DMARC

Despite DMARC's enormous advantages, an analysis has found that 77 percent of organizations that attempt to implement it aren't getting it right. The vast majority of domains either had configuration errors or hadn't set it to enforce the whitelist. Large enterprises with big IT departments had approximately the...

The Email Authentication Revolution

An analysis of the most popular 1 million global domains shows that most domain owners have not attempted to implement fraud protection through the latest and most complete form of protection, DMARC. Of those that have attempted DMARC, only 23 percent are actually achieving protection from fraud. Download this...

The Five Essential Elements of Next-Generation Endpoint Protection

The endpoint security market continues to expand with vendors old and new marketing their solutions as "next-generation" game-changers. However, closer inspection reveals that many new solutions have been built on old platforms, many of which still rely heavily on signature-based detection and obsolete architecture....

A SANS Product Review of the CrowdStrike Falcon® Platform

You won't want to miss this report, "A New Era in Endpoint Protection: A SANS Product Review of CrowdStrike Falcon Endpoint Protection," where SANS reveals the results of their evaluation of the CrowdStrike Falcon® platform. To conduct their evaluation, SANS security analysts ran Falcon through a wide range of...

Sponsored by Venafi

Are You Vulnerable to an SSH Compromise?

Is your organization exposed to an attack that misuses SSH keys? You know that your organization is using SSH to safeguard privileged access. But you may not realize that your SSH keys could be vulnerable to insider and cyber threats. The majority of those we surveyed didn't. Results from a 2017 study show that...

Sponsored by Venafi

SSH Study: U.S., U.K. and Germany Executive Summary

A recently published 2017 survey of over 400 security professionals in the U.S., U.K. and Germany measured how well their organizations implemented security controls for SSH keys. The results show that most organizations are underprepared to protect against SSH-based attacks, with fewer than half following industry...

Sponsored by Venafi

4 Steps to Protect SSH Keys: Stop Abuse of Privileged Access

SSH keys provide the highest level of access rights and privileges for servers, applications and virtual instances. Cyber criminals want this trusted status and invest considerable resources into acquiring and using SSH keys in their attacks. Even though SSH keys are the credentials that provide the most privileged...

Sponsored by Venafi

Physical and Virtual Devices: How Cybercriminals are Exploiting Machine-to-Machine Communications

"Machines" as we know them are going through an identity crisis. Our increased dependence on them is so profound that even the definition of machine is undergoing radical change. The number and type of physical devices on enterprise networks has been rising rapidly, but this is outstripped by the number of...

Mandatory and Opportunistic Transport Layer Security: Which One is Right For Your Company?

Transport Layer Security (TLS), if implemented correctly, can ensure that no third party will tamper with a sensitive email message. The Challenge? Mandatory TLS is cumbersome, costly, and time consuming. Opportunistic TLS cannot ensure the sensitive email is actually sent securely. Read more in our e-Book about the...

Threat Protection and Data Loss Prevention: Strengthening Office 365 Email Security

Today, email is a critical component of any business and must be protected with proper security. Microsoft has become the vendor of choice for email, but many customers find the security capabilities provided do not meet their full requirements. Zix provides a broad portfolio of email security solutions that can be...