Feature

Federal agencies have to shift from annual IT security assessments to continuous monitoring of their risks. Here's a framework for getting there.

Federal agencies still have a long way to go in implementing continuous monitoring. Only 29% of agencies have the tools in place to continuously monitor their IT systems ...

Smaller companies deal with enterprise-grade threats and compliance challenges, and partners are imposing requirements for sophisticated controls and audits that may be overwhelming. Here's how to cope.

Spinning up VMs is easy--too easy, in fact. Fortunately, keeping virtual servers safe doesn't have to be expensive.

The industry has been slow to embrace cloud computing, but demand could grow.

Clouds today come in two basic flavors: the private cloud (wholly behind the firewall) and the public cloud, which runs on remote hosts. The private cloud currently enjoy...

We highlight best practices for protecting VM disk files.

Tools are available to create word lists that can be used for brute-force attacks to nab passwords.

Small businesses must prioritize against the IT security threats they face, which are different from those at larger businesses

Firewalls and IDS aren't enough. WAN security pros must embrace data-centric protection.

Database security is a growing concern.

Think you can't afford BC/DR to rival enterprise-class systems? If you have x86 virtualization installed, you might be surprised.

Federal IT and security pros have a role in the development of an "identity ecosystem" in cyberspace that spans the government and business sectors.

Cybersecurity certifications from organizations provide important benchmarks that are often a requirement for government jobs.

In the face of unrelenting threats to systems and networks, federal agencies must find ways to attract qualified workers and develop new skills internally.