In 2017, the Security Leadership Research Institute (the Security Executive Council’s research arm) asked security practitioners to choose from a list of which risk-related activities their security ...

Collects and uses customer or employee personal information. Participates in an industry sector that is considered high risk or critical infrastructure. Offers securities as a publicly traded company.

The Department of Health and Human Services is seeking comments on how it can improve its security risk assessment tool, which is designed to help smaller organizations conduct assessments as required ...

With the proliferation of external products such as cloud storage, software as a service, and AI-driven security platforms, managing the risk inherent in using third-party providers has never been ...

Keeping up with the latest security threats can be a full-time job. Bad actors constantly find new ways to infiltrate company servers, databases and websites. The result is lost data, locked systems ...

The FDA released their updated guidance on Cybersecurity in medical devices: Quality System Considerations and content for Premarket submissions at the end of June in 2025. In this guidance the FDA ...

Once a hacker has gained access to your network, they can steal, modify, delete, or distort your data, or take control of them in ways you couldn't imagine. Remember that due to frequently limited ...

The introduction of process safety system–specific malware into the manufacturing world in 2017 intensified the discussion around the convergence of safety and cybersecurity. If a cyberattack could ...