Unlike traditional cyberattacks, advanced persistent threats are often carried out by well-funded and highly skilled threat actors who use a range of techniques to gain and maintain access to a target’s network and data for an extended period of time. As the number of APT attacks continues to rise, businesses of all sizes need to understand the threat landscape and take steps to protect their networks and data against APTs. 

In this blog post, we will explore APTs, how they work, the potential consequences of a successful APT attack, and best practices for preventing APTs.

Read More

We’ve previously discussed the role of risk assessment as defined by the International Organization of Standardization (ISO) 31000, and generally speaking, we’ve found that risk management is a key practice to supporting security and compliance. To better support organizations approaching risk assessment, ISO published the supplementary document, ISO/IEC 31010, “Risk assessment technique.”

In this article, we’ll provide a brief overview of the processes and techniques advocated by this publication.

Read More