As computer software has become the backbone of modern civilization, organized cyber criminals, state sponsored cyber attackers, and terrorist organizations try to exploit design flaws and weaknesses in the applications in order to generate revenue and carry out criminal activities. The growing number of cyber attacks has become one of the most serious economic and national security threats our nation faces.
The dilemma that organizations are facing is that their current vulnerability measures are unable to keep up with the evolving exploits, including perimeter intrusion detection, signature-based malware, and anti-virus solutions. Often, these security tools operate in a silo-based approach and are not integrated and interconnected to achieve a closed-loop process and continuous monitoring. Another shortcoming lies in the fact that a majority of vulnerability programs lack a risk-based approach, whereby vulnerabilities and associated remediation actions are based on the risk to the business.
Besides close collaboration with the Department of Homeland Security, organizations should consider overhauling their approach to security risk management to counter cyber attacks and prevent data loss, unauthorized disclosure, data destruction, copyright infringement, and damage to their brand.
This white paper outlines the steps that organizations should take to accomplish a strategic level of enterprise security risk management.
Related Items
PCI DSS 2.0 & Virtualization - Are You Compliant?
Continuous Compliance: A Better, Faster, Cheaper Way to Comply
The Big Picture: Beyond Compliance to Risk Management
A Risk-Based Approach: Enabling an Automated Risk-Based Response to Security Threats
