article thumbnail

How to Implement Threat Modeling in Your DevSecOps Process

Pure Storage

How to Implement Threat Modeling in Your DevSecOps Process by Pure Storage Blog This blog on threat modeling was co-authored by Dr. Ratinder Paul Singh Ahuja, CTO for Security and Networking, and Rajan Yadav , Director of Engineering, CNBU (Portworx), Pure Storage. Dr. Ahuja is a renowned name in the field of security and networking.

article thumbnail

Singing the Same Tune: The Case for Regulatory Harmonization

FS-ISAC

Compliance and reporting to regulatory authorities is another area where standardization plays an important role and can unlock considerable benefits for the different stakeholders. While cybercrime has been around for decades, the 2016 cyber heist against Bangladesh Bank was a watershed moment for financial authorities around the world.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

5 Questions to Ask Your CISO

Pure Storage

Do we have a vulnerability and patch management program? Installing software patches and updating systems to eliminate vulnerabilities are the low-hanging fruit of security tasks. Only by running through all possible attack scenarios can the CISO and security team confidently benchmark the time to normal operations. Or 10 hours?”

article thumbnail

School Security & Active Shooter Interdiction: A Q&A With Vince Riden

Security Industry Association

Many schools were designed with smaller buildings arranged in groups, maximizing the shape of the plot of land available to the project, with administration buildings attached to areas of public gathering (gymnasiums, auditoriums and cafeterias) – typically these are the most vulnerable areas.

article thumbnail

What’s Changed: 2021 Gartner Magic Quadrant for IT Risk Management

Solutions Review

Federal compliance regulations for the assessment and authorization of systems. ServiceNow’s closest competitor in this quadrant is Diligent, which is one of only two providers included in this Magic quadrant with an authority-to-operate (ATO) for its platform. Though ITRM tools are primarily used for the aforementioned use cases, U.S.

article thumbnail

Adversarial Risk Management

FS-ISAC

You can hire a professional audit firm to benchmark the bucket against peer buckets. At a strategic level, Adversarial Risk Management begins not with a study in assets, threat actors, or vulnerabilities, but by studying the objective of your adversary. You can examine the bucket, turn it carefully and closely examine the surface.

article thumbnail

SIA New Member Profile: IXP Corporation

Security Industry Association

Insider threats: Insiders with authorized access, including students, faculty or staff, can threaten the security of colleges and universities. Emerging technologies: The rapid adoption of emerging technologies, such as cloud computing, IoT devices and bring your own device policies, can introduce new vulnerabilities.