Optiv Blog

t’s no secret that finding and retaining dependable, well-trained application security professionals is a serious challenge, and has been for years....

As the secure SDLC program matures, vulnerabilities should be caught and remediated earlier in the lifecycle. To know if the program is truly working....

The capability to respond effectively to cyber incidents is one of the most critical components of an enterprise security program. However, many....

In the world of third-party and vendor risk management, many new practices are being adopted. Over the past few weeks, members of Optiv’s third-party....

The term “knowledge management” (KM) refers to using vulnerability mining to turn remediation into lessons learned. Essentially this involves taking....

At a recent conference, I heard a speaker say, “Medical diagnoses will be done completely without a human doctor in the future – computers will be....

We’ve all heard that it’s not a matter of “if,” but “when.” This statement, while becoming its own stale mantra of sorts, is still the impetus for the....

Most organizations would agree that maintaining a fast, predictable flow of planned work (e.g. projects, scheduled changes) that achieves business....

Recently, the Office of the Comptroller of the Currency (OCC), released updated guidance for bank examiners as they scrutinize third-party risk....

Building an application catalog is a critical step towards maintaining governance over a secure SDLC program. The primary purposes of the catalog are....

Once again tax season is upon us, and with it brings increased phishing attempts targeted at obtaining tax information from both for-profit and non....

In the final installment, we will again be looking at an instance of vulnerability stacking, this time, however, we’ll be focused on account....