The ASIS SRA Standard offers an up-to-date and forward-looking comprehensive and systematic approach to identifying, analyzing, and evaluating security risks. Alexandria, VA (16 April 2024)—ASIS ...

In 2017, the Security Leadership Research Institute (the Security Executive Council’s research arm) asked security practitioners to choose from a list of which risk-related activities their security ...

Collects and uses customer or employee personal information. Participates in an industry sector that is considered high risk or critical infrastructure. Offers securities as a publicly traded company.

Security teams use plenty of frameworks, controls and scorecards, but often lack a reliable way to prove which actions cut ...

The Department of Health and Human Services is seeking comments on how it can improve its security risk assessment tool, which is designed to help smaller organizations conduct assessments as required ...

Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences.

Managing your threat landscape is essential to ensure strong security — just be sure not to fall into these all-too-common ...

There is no right and wrong way to perform a Cybersecurity Risk Assessment, however, we are going through a simple route and lay down a step-by-step guide on how to assess your environment. Follow the ...

Your sensitive customer data and intellectual property are under constant threat from cyber attackers. If they successfully manage to download their malware onto your ...

It’s easy to understand how an annual risk assessment can feel like a mundane administrative burden, especially in the fast-paced financial services sector. In an industry where the stakes are high, ...