Rapid threat model prototyping: Introduction and overview
Choosing a form of threat modeling can help protect your organization from security threats.
Management, compliance & auditing
Commercial off-the-shelf IoT system solutions: A risk assessment
The Internet of Things (IoT) is growing rapidly. IoT devices provide convenience and can be a more efficient and cost-effective solution to a variety of different...
A school district’s guide for Education Law §2-d compliance
During the 2014-2105 fiscal year, the New York State Education Department enacted Education Law §2-d, which includes a series of provisions designed to enhance...
IT auditing and controls: A look at application controls [updated 2021]
Portions of this article, including many of the definitions and terminology, have been sourced and summarized from ISACA.org and course materials published...
6 key elements of a threat model
Threat modeling is a process for threat discovery and risk management. Any system carries potential risk, and a clear understanding of these risks is essential...
Top threat modeling frameworks: STRIDE, OWASP Top 10, MITRE ATT&CK framework and more
Threat modeling is an exercise designed to identify the potential threats and attack vectors that exist for a system. Based upon this information, it is possible...
Average IT manager salary in 2021
IT management is a competitive career opportunity. Some companies hire from within, but you can still find job opportunities from IT firms looking for qualified...
Security vs. usability: Pros and cons of risk-based authentication
Risk-based authentication (RBA) has to become part of the enterprise lexicon for a good reason. The authentication measures used to protect access to resources...
Threat modeling: Technical walkthrough and tutorial
Threat modeling is an exercise designed to help an organization identify potential threats and cybersecurity risks within their organization and systems....
Comparing endpoint security: EPP vs. EDR vs. XDR
Endpoint detection and response is a type of security solution that provides real-time visibility into endpoint activities by monitoring and recording endpoint...