Optiv Blog

We’ve all heard that it’s not a matter of “if,” but “when.” This statement, while becoming its own stale mantra of sorts, is still the impetus for the....

Most organizations would agree that maintaining a fast, predictable flow of planned work (e.g. projects, scheduled changes) that achieves business....

Recently, the Office of the Comptroller of the Currency (OCC), released updated guidance for bank examiners as they scrutinize third-party risk....

Building an application catalog is a critical step towards maintaining governance over a secure SDLC program. The primary purposes of the catalog are....

Once again tax season is upon us, and with it brings increased phishing attempts targeted at obtaining tax information from both for-profit and non....

In the final installment, we will again be looking at an instance of vulnerability stacking, this time, however, we’ll be focused on account....

Back in the day, cloud was the big buzzword. Are you in the cloud? Have your started to use the cloud? Every company, big or small, was offering some....

In the scenario, we focus on session management. The most common session management mechanism is a session cookie. We commonly see session cookies....

There is a growing trend in the information security and risk management world of ignoring low severity findings from security testing. Perhaps it....

“Actionability” is something we are starting to hear more and more from industry sales and marketing, but often doesn’t translate into reality for....

Traditionally, wireless networks were considered a luxury, as well as highly unreliable and unsecure. Over the past 10 years, wireless networks have....

Security OF the cloud versus security IN the cloud. This by no means is intended to be a riddle. In fact, the irony is that cloud computing has solved....