By far the best way to prevent a security incident is to prevent the initial access from being obtained in the first place. This is why organizations....

This series is focused on the risk associated with attacks which leverage vulnerabilities that could have been mitigated through the implementation of....

Test the overall strength of an organization’s defenses (the technology, the process and the people) by simulating the objectives and actions of an....

The processes and tools used to track/control/prevent/correct secure access to critical assets (e.g., information, resources, and systems) according....

Detect/prevent/correct the flow of information transferring networks of different trust levels with a focus on security-damaging data.

Detect/prevent/correct the flow of information transferring networks of different trust levels with a focus on security-damaging data.

Control the installation, spread, and execution of malicious code at multiple points in the enterprise, while optimizing the use of automation to....

Minimize the attack surface and the opportunities for attackers to manipulate human behavior through their interaction with web browsers and email....

Collect, manage, and analyze audit logs of events that could help detect, understand, or recover from an attack.

The processes and tools used to track/control/prevent/correct the use, assignment, and configuration of administrative privileges on computers....

Continuously acquire, assess, and take action on new information in order to identify vulnerabilities, remediate, and minimize the window of....

Actively manage (inventory, track, and correct) all software on the network so that only authorized software is installed and can execute, and that....