Home
Topics
Assessing and Managing Security Risks
Risk assessments and metrics

An SMB security risk assessment in five steps

Assessing your organization's security threats and risks takes just five steps, says Robbie Higgins. Check out his quick guide to the SMB security risk assessment process.
PCI DSS 2.0 and virtualization compliance for SMBs

PCI DSS 2.0, which debuts this month, includes key changes for SMBs in the areas of virtualization and vulnerability assessments. Expert Mike Chapple details the changes and explains what midmarket...
Midsized businesses not immune to attacks, survey finds

Midsized firms are seeing increased attacks and a rise in data breaches, according to the survey conducted by London-based Bloor Research.
risk analysis

Risk analysis is the process of defining and analyzing the dangers to individuals, businesses, and government agencies posed by potential natural and human-caused adverse events... (Continued)

Risk assessments and metrics

Email Alerts

Register now to receive SearchMidmarketSecurity.com-related news, tips and more, delivered to your inbox.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Is there a way to integrate business continuity planning and operational risk management?

In this Q&A, security management expert Mike Rothman discusses the differences between business continuity planning and operational risk management. Tip
What are ways to measure security risks, threats and vulnerabilities?

In this Q&A, security management expert Mike Rothman offers advice on the most effective ways to manage and access security risks, threats and vulnerabilities within an enterprise. Tip

1
2

More from Related TechTarget Sites

Security
Cloud Security
Consumerization
Financial Security
Security AU
Security IN
Computer Weekly

Security
- Users may remain vulnerable despite Oracle Java patch release
  
  Oracle has issued a new security patch for Java, but only 7% deployed the patch before it.
- Gary McGraw: NSA data collection programs demand discussion, scrutiny
  
  Opinion: Gary McGraw details the various and sundry NSA data collection programs and explains why all its efforts demand new discussion and scrutiny.
- Enterprise BYOD offers mixed bag for enterprise endpoint security
  
  A Gartner analyst says enterprise BYOD -- specifically iOS and Android devices -- presents many pros and cons for enterprise endpoint security.
Cloud Security
- Gartner: Negotiate cloud contracts with detailed security, control
  
  When negotiating with cloud providers, enterprises must demand cloud contracts with specific security and control provisions, Gartner analysts say.
- Cloud data breach notification: Defining legal obligations
  
  Francoise Gilbert provides a cloud data breach notification overview for enterprises concerned about placing personal information in the cloud.
- Are FedRAMP security controls enough?
  
  Cloud service providers are working with authorized third-party auditors to meet FedRAMP security controls. The 3PAOs tell us how it’s going, so far.
Consumerization
- How to choose the right enterprise mobile, cloud and social tools
  
  IT departments need to evaluate vendors for social tools, such as mobile and cloud. Without a secure plan, IT risks an unsecure liability.
- Office Mobile for iPhone requires Office 365
  
  Microsoft released Office Mobile for iPhone but it requires an Office 365 subscription and isn't made for iPad.
- NSA surveillance leads to tighter data privacy policies
  
  Knowledge of the National Security Agency's surveillance has led some companies to revamp their data privacy policies.
searchFinancialSecurity
- PayPal CISO: Laws must foster better cybersecurity information sharing
  
  PayPal's Michael Barrett says many firms fear misuse of shared cybersecurity data. He also discusses the evolution of PCI DSS and mobile payment security.
- Cybergang plans to use Trojan against U.S. banks
  
  A cybergang in Eastern Europe revealed plans to attack U.S. banks with a Gozi-like Trojan, according to RSA.
- Improved Shylock Trojan targets banking users
  
  The latest variant of the banking Trojan is causing numerous problems, Symantec said.
searchSecurityAU
- Exploit kits evolved: How to defend against the latest attack toolkits
  
  Expert Nick Lewis details how automated exploit kits are evolving and offers mitigations for the latest methods employed by these attack toolkits.
- May 2013 Patch Tuesday fixes IE8 zero day; Adobe tightens ColdFusion
  
  The software giant's May 2013 Patch Tuesday update permanently fixes the IE8 zero-day flaw found in the Dept. of Labor website attack.
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
Information Security
- Security tech market set to grow 8.7% in 2013, says Gartner
  
  The worldwide security technology and services market will reach $67.2bn in 2013, up 8.7% from 2012, according to research firm Gartner
- A malicious charger could hack Apple devices easily, claim researchers
  
  A modified phone charger or battery could be used to hack Apple devices, say researchers from Georgia Tech
- How to reduce IT security risk with IT asset management
  
  IT asset management expert Barb Rembiesa explains how ITAM best practices like IT asset standardization and rationalization reduce IT security risk.
Computer Weekly
- UK mobile industry remains behind the times in digital payments technology
  
  The mobile payments industry is struggling to grow due to many convoluted payment technologies that are difficult to develop for
- Interview: John Swainson, president of Dell Software
  
  Dell Software president John Swainson's aims to make Dell Software a $5bn business
- Tech firm ditches Rackspace hosting service for ‘lack of support’
  
  Cloud sales service company Price & Quote has ditched IT hosting provider Rackspace due to “lack of support and unresponsiveness”

All Rights Reserved,Copyright 2009 - 2013, TechTarget