Optiv Blog

In this post, we will look at ATT&CK’s Impact Phase as it affects availability and integrity. There are several different techniques adversaries can....

What technology should you look at investing in? Endpoint? Zero Trust Architecture? Security Awareness Training? SOAR? Digital transformation, which....

October is National Cybersecurity Awareness Month – NCSAM. Security awareness programs are designed to educate end-users about cyber threats and what....

Keeping up with and evaluating cybersecurity technologies can be a continuous and ongoing challenge for organizations. To make this effort easier....

In this post, we will address some of the MITRE ATT&CK’s Collection techniques and tactics, from an attacker’s point of view to harvest organizational....

With mounting regulations, connectivity, and an explosion in data, privacy management programs are critical components of an overall security program....

Optiv acknowledges the extraordinary need for security professionals, which is why we’ve decided to create Associate level positions. These roles....

This post is the first in a three-part series dedicated to companies working with service providers relating to PCI compliance. Part 1 below focuses....

From time to time we all lose our keys. The solution for physical keys is simple – find the spare set and head down to your local hardware store so....

Accepted risk is all too often the result of a lack of priorities around managing risk. It’s all too easy to say “We don’t want to spend $50,000 USD....

Most major organizations are already fully compliant with GDPR. However, some may just now be launching into European markets, and others may have....

In this post, we will review ATT&CK’s Command and Control techniques from an attacker’s point of view. The techniques covered here are not inclusive....