HBSRESOURCES

Blog

Why You Should Hire a Penetration Tester and Which One

Penetration testers can help organizations learn about attacks and the methods used so they can gain insight into their systems’ weaknesses.

Penetration Testing, Security

What to Expect in NIST SP 800-53 Revision 5

What's new with the NIST's Special Publication (SP) 800-53 Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations?

Cybersecurity, IT Leadership, NIST

Security Requirements of Vendors and Clients

As security awareness rises, so do expectations of vendors and clients. Organizations have begun including information security in their due diligence process.

IT Leadership, Risk Management, Security, Third-Party

How to Get the Most Out of Your IT Audit

Learn ways to get the most from your IT Audit including selecting a qualified auditor, assigning an audit-owner, preparing, and asking questions.

Audits, Risk Assessment

How Does SIEM Work?

SIEM works first by gathering all the event logs from configured devices. They are sent to a collector that typically runs on a virtual machine inside the host network.

Cybersecurity, Managed XDR, SaaS, SaaS Security

3 Tips for Detecting Malware

Detecting malware is becoming more difficult. Discover tips will help you identify malware even if your anti-malware tools fail to detect an infection.

Data Safety, Phishing, Security

The True Role of an Information Security Professional

Information security professionals must understand their role in helping business leaders balance the risk vs reward equation when evaluating cybersecurity efforts.

IT Leadership, Security

Top 5 Components of a Strong Information Security Awareness and Training Program

It's a great time to provide information security awareness and training for your organization’s employees for the defense of your networks and information.

Governance, IT Leadership, Security Awareness

An Overview of the FFIEC Cybersecurity Assessment Tool

The FFIEC Cybersecurity Assessment Tool provides a framework to determine risks, measure information security efforts, and determine progress toward goals.

Governance, IT Leadership, Organizational Resilience, Policies, Risk Management

Information Security vs. Information Assurance

Discover the thriving employment prospects in information security, but don’t mistake it for an effortless royal path—building skills and experience is key.

Security

Internal vs. External Threats – Which One Worries You More?

Your organization must determine whether to be more worried about information security threats from internal or external sources. Take a balanced approach.

IT Leadership, Risk Management, Security

Why is Two-Factor Authentication (2FA) Important for Remote Access?

Remote access systems are under unprecedented attack. Discover how two-factor authentication for remote system administration by IT staff or vendors can help.

Authentication, MFA, Remote Work