Everything in security boils down to data. Often, you are protecting private, sensitive or valuable data. You use data about data (Metadata). You monitor data about how people use your data (Security Events). You gather data on data in order...

In 2020, it will be critical for organizations to understand their third parties’ ability to protect against new threats. It used to be that regulations forced Financial Services sector to care the most about third party cybersecurity risks. Now, evolving...

The recent surge in ransomware attacks on U.S. cities and companies has data security and privacy professionals as well as third party information security leaders scrambling for better defenses and responses. This need is focusing more attention on cybersecurity insurance...

On Thursday morning, February 20, 2020, people in tune with cybersecurity news woke to read that the private information of almost 11 million guests that stayed at the MGM Grand hotel and casino was posted publicly on a hacking forum. ...

Cybersecurity’s emergence as a strategic risk has instilled the relationship between chief information security officers (CISOs) and board members with greater importance -- and higher stakes. Fostering a stronger cybersecurity capability requires directors to take their relationship with CISOs (and...

When we asked Santa Fe Group Vice President and CISO Tom Garrubba to gaze into his crystal ball last month, he identified several events related to Third Party Risk Management that he thinks may materialize this year, including: Privacy breaches...