After an incident, one of the first data sources an investigator wants is DNS query logs. What domains did this host reach out to? When? How often? Did the resolution pattern look like beaconing? Did …
The risk register that comes out of a mature GRC program should tell the board something true about the organization’s exposure. Too often it tells them something comfortable instead.
The most …
Zero Trust is the right model. It is also reliably failing to take hold in most large enterprise environments. Those two things are not in conflict.
The model is correct: never trust the network, …
It’s Data Privacy Week. Or is it Data Privacy Day? The confusion isn’t accidental.
What started as a legitimate European observance on January 28 has expanded into a week-long American …
Model risk management has a well-documented history in financial services. SR 11-7, the Federal Reserve’s 2011 guidance on model risk management, established a framework that influenced how …
