Feature

Federal agencies have to shift from annual IT security assessments to continuous monitoring of their risks. Here's a framework for getting there.

Federal agencies still have a long way to go in implementing continuous monitoring. Only 29% of agencies have the tools in place to continuously monitor their IT systems ...

Smaller companies deal with enterprise-grade threats and compliance challenges, and partners are imposing requirements for sophisticated controls and audits that may be overwhelming. Here's how to cope.

Spinning up VMs is easy--too easy, in fact. Fortunately, keeping virtual servers safe doesn't have to be expensive.

Banks and other financial firms learn to share sensitive cybersecurity information with federal agencies.

The industry has been slow to embrace cloud computing, but demand could grow.

The public and private sectors must collaborate in new ways to ward off dangerous threats to critical systems and IT infrastructure.

Clouds today come in two basic flavors: the private cloud (wholly behind the firewall) and the public cloud, which runs on remote hosts. The private cloud currently enjoy...

We highlight best practices for protecting VM disk files.

Employees want their own phones, and managers want them using apps for productivity. Your problem: Secure all this.

Logs are a key component of an incident response plan if your database gets attacked.

Tools are available to create word lists that can be used for brute-force attacks to nab passwords.

Weak passwords and insecure personal information could put your company's data at risk.

Small businesses must prioritize against the IT security threats they face, which are different from those at larger businesses

Firewalls and IDS aren't enough. WAN security pros must embrace data-centric protection.