Articles on security posture across cloud, identity, applications, OT and IoT: attack surface, configuration and exposure, and the Enterprise Security Risk and Posture Management (ESRPM) module.
APIs are a growing part of the attack surface. This article explains how expanded attack surface management finds exposed APIs and how to reduce the risk they carry.
Maximize Expanded Attack Surface Management (EASM) for API Security Read More »
IoT devices are easy targets for distributed denial of service attacks because of default passwords, weak updates and sheer numbers. This article explains why and how to protect them.
Why IoT Devices Are Easy Targets for DDoS Attacks Read More »
Public key infrastructure anchors trust for IoT devices in the cloud. This article explains how PKI authenticates devices, encrypts traffic and where it fails when certificates are unmanaged.
PKI: The Anchor of Trust for Securing IoT in the Cloud Read More »
An identity management strategy covers every person, device and service that reaches company data. This roadmap explains the steps, from inventory and policy to access control and monitoring.
Your Roadmap to Implementing an Identity Management Strategy Read More »
Ten attack surface management blind spots, from shadow IT and forgotten subdomains to third-party assets, and how each one undermines security posture if it goes unmonitored.
Cloud systems carry critical security flaws when configuration, identity and monitoring are left to defaults. This article explains the common flaws and how to close them.
Critical Security Flaws in Cloud Systems and How to Fix Them Read More »
IoT devices exchange data through APIs that are often unsecured. This article explains the risks to data security and the controls that protect IoT APIs.
Attack surface management is not limited to the external surface. This article explains what else it should cover: internal assets, identities, third parties and the controls around them.
The Big Question: Is Attack Surface Management Limited To The Surface? Read More »
Every IoT device has an identity that must be managed. This article explains identity management for connected devices: provisioning, authentication, lifecycle and monitoring.
Identity Management for IoT Devices: Securing an Interconnected Digital Galaxy Read More »
Vulnerability assessment and attack surface management answer different questions. This article explains the gap between them and how an integrated approach closes it.
Bridging the Gap Between Vulnerability Assessment and Attack Surface Management Read More »
Era of Automated Security Risk and Posture Management
Era of Automated Third Party Risk Management: Trust but Verify
Era of Automated Security Plans, Standards, Policies and Procedures
