Tag: risk-management
-
AI Risk Management in SaaS: A Practical Guide
Learn how to manage AI risk in SaaS environments across identity, access, and integrations. A practical guide for modern AI governance. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/04/ai-risk-management-in-saas-a-practical-guide/
-
The need for a board-level definition of cyber resilience
Tags: awareness, business, cisa, compliance, control, crime, cyber, cybercrime, cybersecurity, detection, finance, framework, governance, law, metric, regulation, resilience, risk, risk-analysis, risk-management, service, supply-chain, technologyWhere the literature converges: Organizational outcomes vs. policy and controls It’s consistently agreed that cyber resilience should be tied to organizational outcomes rather than technical controls and policies. Rather than focusing on metrics such as mean time to detection or number of security controls, organizational cyber resilience needs to evaluate levels of business continuity, preservation…
-
AgentManager schützt die hybride Belegschaft aus Menschen und KI-Agenten
Der Anbieter der weltweit bekannten Plattform, die sich umfassend mit dem Human-Risk-Management und KI-Agenten befasst, KnowBe4, führt den Agent-Risk-Manager ein. Das branchenweit erste Verteidigungssystems, das darauf ausgelegt ist, das Verhalten autonomer KI-Agenten zu sichern, zu überwachen und zu steuern. Der Agent-Risk-Manager ist ein Eckpfeiler der KnowBe4-HRM+-Plattform und verändert grundlegend, wie Unternehmen die Risiken der menschlichen…
-
Prepping for ‘Q-Day’: Why Quantum Risk Management Should Start Now
Quantum computers are coming and may impact systems in unexpected ways, and it will take years to be fully quantum-safe, if ever, cryptography expert warns. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/preparing-q-day-quantum-risk-management
-
From Risk Insight to Action: The Decision Simulator – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/04/from-risk-insight-to-action-the-decision-simulator-kovrr/
-
The EU AI Act Data Requirements Explained – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/04/the-eu-ai-act-data-requirements-explained-kovrr/
-
The State of AI Risk Management in 2026 Reveals a Growing Confidence Gap
A new report highlights growing gaps between perceived AI visibility and actual risk. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/artificial-intelligence/the-state-of-ai-risk-management-in-2026-reveals-a-growing-confidence-gap/
-
12 cyber industry trends revealed at RSAC 2026
Tags: access, ai, application-security, authentication, awareness, business, ciso, cloud, control, cyber, cybersecurity, data, deep-fake, defense, detection, edr, endpoint, firewall, gartner, governance, identity, infrastructure, insurance, metric, microsoft, monitoring, mssp, phishing, programming, risk, risk-management, service, siem, skills, soc, software, startup, technology, threat, tool, trainingLegacy security vendors have the inside track on AI, for now: As far as AI technology consumption for cybersecurity, most CISOs I spoke with were open-minded while leaning toward their existing vendors, at least in the short term. This may buy legacy security vendors a bit, but not much time.Remember what happened in the cloud…
-
Open-Source FIM: Freely Available. But What Makes Them Expensive?
<div cla In a previous article, we explained why it is worth licensing File Integrity Monitoring (FIM) rather than using open-source alternatives. The decision is not “free vs paid”; it is about streamlined access to the risk management capabilities of FIM and controlling costs. CimTrak is a purpose-built system that produces control and evidence through…
-
8 ways to bolster your security posture on the cheap
Tags: access, attack, authentication, awareness, breach, ciso, control, credentials, cyber, cyberattack, cybersecurity, data, data-breach, ddos, dkim, dmarc, dns, email, endpoint, exploit, finance, google, identity, Internet, metric, mfa, microsoft, mitigation, okta, passkey, password, phishing, risk, risk-management, service, strategy, technology, tool, training, update, waf, zero-day2. Take full advantage of your existing tools: A practical way to strengthen enterprise security without incurring additional significant spend is to ensure you’re fully leveraging the capabilities of solutions already present within your organization, says Gary Brickhouse, CISO at security services firm GuidePoint Security.”Most organizations have invested heavily in security solutions, yet most are…
-
The external pressures redefining cybersecurity risk
Tags: access, ai, attack, breach, business, ciso, control, cyber, cyberattack, cybersecurity, data, deep-fake, defense, email, governance, guide, incident response, injection, network, nist, resilience, risk, risk-management, supply-chain, technology, threat, toolAI is accelerating both the attackers and your defenses, but governance is often missing : What I see generative AI doing in cybersecurity is accelerating what attackers can do and lowering the cost of entry for new criminal gangs. Cyberattacks are more potent because the technology makes it easier to target victims, create deepfake videos or…
-
BSidesSLC 2025 Risk Management Explained Through Star Wars
Author, Creator & Presenter: Kenny Scott – Founder & CEO Of Paramify Our thanks to BSidesSLC for publishing their Creators, Authors and Presenter’s outstanding BSidesSLC 2025 content on the Organizations’ YouTube Channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/bsidesslc-2025-risk-management-explained-through-star-wars/
-
Die Einhaltung von NIS2 wird nicht an der Technik scheitern, sondern an den Menschen
NIS2 erhöht die Erwartungen an die Cybersicherheit in ganz Europa und stellt das menschliche Verhalten in den Mittelpunkt der Compliance Experten für Human Risk Management fordern Unternehmen auf ihre Belegschaft auf NIS2 vorbereiten. NIS2 hat die Messlatte für die Cybersicherheit in ganz Europa höher gelegt, und das aus gutem Grund. Die Bedrohungen sind hartnäckiger,… First…
-
BSidesSLC 2025 LLM-Assisted Risk Management For Small Teams Budgets
Author, Creator & Presenter: Connor Turpin – Cloud Architect And Sysadmin Our thanks to BSidesSLC for publishing their Creators, Authors and Presenter’s outstanding BSidesSLC 2025 content on the Organizations’ YouTube Channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/bsidesslc-2025-llm-assisted-risk-management-for-small-teams-budgets/
-
Check Point schützt KI-Fabriken mit neuem Security Architecture Blueprint
Darüber hinaus orientiert sich die Architektur an etablierten KI-Governance-Standards wie dem NIST AI Risk Management Framework und Gartner AI TRiSM. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-schuetzt-ki-fabriken-mit-neuem-security-architecture-blueprint-von-gpu-bis-llm/a44349/
-
Check Point schützt KI-Fabriken mit neuem Security Architecture Blueprint
Darüber hinaus orientiert sich die Architektur an etablierten KI-Governance-Standards wie dem NIST AI Risk Management Framework und Gartner AI TRiSM. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-schuetzt-ki-fabriken-mit-neuem-security-architecture-blueprint-von-gpu-bis-llm/a44349/
-
Check Point schützt KI-Fabriken mit neuem Security Architecture Blueprint
Darüber hinaus orientiert sich die Architektur an etablierten KI-Governance-Standards wie dem NIST AI Risk Management Framework und Gartner AI TRiSM. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-schuetzt-ki-fabriken-mit-neuem-security-architecture-blueprint-von-gpu-bis-llm/a44349/
-
KI-Agenten zur sicheren Validierung von Sicherheitslücken und autonomer Behebung
Qualys hat ‘Agent Val” als Teil von ‘Enterprise TruRisk Management” (ETM) eingeführt. Agent-Val ermöglicht dem Risk-Operations-Center (ROC) eine sichere, agentengesteuerte Exploit-Validierung und autonome Risikobehebung. Agent-Val steht für einen grundlegenden Wandel im Schwachstellen- und Risikomanagement: weg von einer auf Annahmen basierenden Priorisierung, hin zu einer evidenzbasierten Umsetzung. Dies beschleunigt die Reaktion, reduziert unnötigen Aufwand und führt…
-
EU AI Act Compliance Guide for CISOs GRC Leaders – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/eu-ai-act-compliance-guide-for-cisos-grc-leaders-kovrr/
-
KnowBe4 Expands AIDA to Eight AI Agents at RSAC 2026, Targeting Fully Autonomous Human Risk Management
KnowBe4 is leaning hard into autonomous AI at RSAC 2026, using the conference to spotlight an expanding suite of AI agents it says is reducing security administration from hours to seconds. The company’s AIDA platform, short for Artificial Intelligence Defense Agents, now includes eight agents after the recent launch of the AIDA Orchestration Agent. That..…
-
SecurityScorecard Debuts TITAN AI to Automate Third-Party Risk Management Workflows
RSAC 2026: SecurityScorecard is using RSA Conference week to roll out TITAN AI, a set of capabilities aimed at taking manual work out of third-party risk management (TPRM) and tying vendor oversight more directly to threat intelligence. The company says TITAN AI sits on top of its existing Ratings and TPRM platform and is designed..…
-
Purple Book Community and ArmorCode Survey Flags Shadow AI, AI-Generated Code Risks
RSAC 2026 coverage: The Purple Book Community (PBC), in partnership with ArmorCode, released its State of AI Risk Management 2026 report on Monday, based on a survey of more than 650 senior enterprise cybersecurity leaders in North America and Europe. The report points to a governance gap as organizations operationalize AI faster than security programs..…
-
Anthropic ban heralds new era of supply chain risk, with no clear playbook
Tags: ai, business, ceo, cisco, ciso, compliance, control, data, defense, framework, government, group, infrastructure, intelligence, law, monitoring, network, RedTeam, risk, risk-management, sbom, software, strategy, supply-chain, technology, threat, toolCompliance pressure before policy clarity: For organizations that do business with the federal government, the implications extend beyond technical challenges into legal and contractual risk. Alex Major, co-chair of government contracts and global trade practice at law firm McCarter and English, tells CSO that supply chain designations like the Anthropic ban tend to move quickly…
-
Anthropic ban heralds new era of supply chain risk, with no clear playbook
Tags: ai, business, ceo, cisco, ciso, compliance, control, data, defense, framework, government, group, infrastructure, intelligence, law, monitoring, network, RedTeam, risk, risk-management, sbom, software, strategy, supply-chain, technology, threat, toolCompliance pressure before policy clarity: For organizations that do business with the federal government, the implications extend beyond technical challenges into legal and contractual risk. Alex Major, co-chair of government contracts and global trade practice at law firm McCarter and English, tells CSO that supply chain designations like the Anthropic ban tend to move quickly…
-
Cybersecurity and privacy priorities for 2026: The legal risk map
Tags: attack, authentication, awareness, best-practice, breach, communications, country, cyber, cybersecurity, data, defense, finance, fraud, governance, government, incident, incident response, infrastructure, law, mfa, monitoring, privacy, ransomware, regulation, risk, risk-management, service, strategy, supply-chain, threat, usaContinued federal interest in cybersecurity and privacy, especially in connection with national security concerns: The evident connection between cybersecurity and privacy and national security have led to a number of federal initiatives in recent years. Most recently in March 2026, the White House announced the current administration’s Cyber Strategy for America, renewing a commitment to…
-
CISA official advises agencies not to get too hung up on who takes lead in critical infrastructure sectors
Acting director Nick Andersen said relationships, not actor risk management agency designations, should guide which agency is at the forefront. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-srma-critical-infrastructure-flexible-partnerships-nick-andersen/
-
SecurityTrainings messbar machen
Im Gespräch mit Netzpalaver skizzieren Kennedy Sanke, Systemadministrator und Klaus Mayr, IT-Experte, beide bei der Interbite AG aus Liechtenstein, wie sie die Plattform für Human-Risk-Management von KnowBe4 einsetzen. Die Interbite AG ist der IT-Dienstleister der 1967 gegründeten Intamin AG, einer schweizerisch-liechtensteinischen Unternehmensgruppe aus Wollerau im Bereich der Entwicklung und Produktion von Freizeitanlagen und Transportsystemen. Bekannt…
-
When insider risk is a wellbeing issue, not just a disciplinary one
Tags: access, breach, compliance, control, cyber, data, exploit, finance, group, malicious, monitoring, resilience, risk, risk-management, security-incident, threat, training, vulnerabilityWritten by Katie Barnett, Director of Cyber Security at Toro Solutions Insider risk is still often framed around intent, with the focus placed on malicious employees, disgruntled contractors, or deliberate misuse of access for personal gain.Those cases exist and they matter, but they are rarely where risk first begins, and they do not reflect how…
-
When insider risk is a wellbeing issue, not just a disciplinary one
Tags: access, breach, compliance, control, cyber, data, exploit, finance, group, malicious, monitoring, resilience, risk, risk-management, security-incident, threat, training, vulnerabilityWritten by Katie Barnett, Director of Cyber Security at Toro Solutions Insider risk is still often framed around intent, with the focus placed on malicious employees, disgruntled contractors, or deliberate misuse of access for personal gain.Those cases exist and they matter, but they are rarely where risk first begins, and they do not reflect how…
-
Digitales Vertrauen wird strategisch – wie Keyfactor Unternehmen auf neue Krypto-Realitäten vorbereitet
Digitales Vertrauen ist längst nicht mehr nur ein IT-Feature es ist zu einem wichtigen Bestandteil des Risikomanagements von Unternehmen geworden First seen on infopoint-security.de Jump to article: www.infopoint-security.de/digitales-vertrauen-wird-strategisch-wie-keyfactor-unternehmen-auf-neue-krypto-realitaeten-vorbereitet/a44122/