Resources

Operational Resilience: What It Is and Why It's Important
Blog

Operational Resilience: What It Is and Why It's Important

By Nick Hogg on Wed, 12/13/2023
Image Frankly stated, operational resilience is your ability to climb the mountain, no matter the weather. Businesses now need more than a good security structure to weather the storms of AI-driven threats, APTs, cloud-based risks, and hyper-distributed environments. And more importantly, operational resilience in 2024 requires a...
Cybersecurity
File Integrity & Change Monitoring
Incident Detection & Investigation
Tips for Achieving Success With a NERC CIP Audit
Blog

Tips for Achieving Success With a NERC CIP Audit

By Jim Fisher on Wed, 12/13/2023
Image Electrical utilities are responsible for just about everything we do. This presents a tremendous burden on those who operate those utilities. One way these organizations offer assurance is through the audit process. While audits can generate tremendous anxiety, good planning, and tools can help make the entire process go...
Cybersecurity
Compliance
NERC CIP
Guarding the Grid: Navigating the Current and Future Landscape of Utility Cybersecurity
Blog

Guarding the Grid: Navigating the Current and Future Landscape of Utility Cybersecurity

By Travis Emerson on Mon, 11/27/2023
Image Tripwire recently held its annual Energy and NERC Compliance Working Group. This year's attendees included more than 200 Tripwire customer utility personnel representing over 80 different registered entities from all across the US and Canada. The company sizes ranged from public utility districts and city municipalities to...
Vulnerability & Risk Management
Cybersecurity
Compliance
NERC CIP
Change Variance: How Tiny Differences Can Impact Your IT World
Blog

Change Variance: How Tiny Differences Can Impact Your IT World

By Chris Hudson on Mon, 11/20/2023
Image In the vast and ever-evolving universe of information technology, there's one constant: change (that and cliches about constants!). Servers, systems, and software – they all get updated and modified. But, have you ever stopped to consider how even tiny differences between these digital entities can sometimes lead to unexpected...
Cybersecurity
File Integrity & Change Monitoring
What is NERC? Everything you need to know
Blog

What is NERC? Everything you need to know

By Michael Betti on Tue, 10/03/2023
Image Electric grids are part of every nation’s critical infrastructure. Every societal activity and business depends on reliable and safe electricity distribution. The US electric grid is a huge network of powerlines, distribution hubs, and renewable and non-renewable energy generators that is increasingly exposed to cyber-physical...
Compliance
NERC CIP
Industrial Control Systems
On-Demand Webinar

Best Practices for the PCI DSS 4.0 Countdown

Wed, 09/27/2023
The deadline for compliance with the Payment Card Industry Data Security Standard (PCI DSS) 4.0 requirements isn’t until March 31, 2024, but organizations that allow those remaining months to fly by without adequate preparation may face last-minute PCI panic. The best approach is to steadily reach key milestones so you’ll be fully prepared when the deadline arrives. Watch the...
Compliance
PCI DSS
10-Mistakes-in-Cybersecurity-and-How-to-Avoid-Them
Blog

10 Mistakes in Cybersecurity and How to Avoid Them

By Katrina Thompson on Mon, 09/11/2023
Image It's easy to rest on our laurels. Prevent a few breaches – or go long enough without one – and you start to feel invincible. While our efforts are certainly laudable, we can't get too comfortable. As defenders, we always need to be on the hunt for what we've missed and ways to do better. Here are ten common cybersecurity...
Cybersecurity
File Integrity & Change Monitoring
Working with a Reliable Partner for Cybersecurity Success
Blog

Working with a Reliable Partner for Cybersecurity Success

By Joe Pettit on Thu, 08/31/2023
Image Technology companies are often seen as revolving doors of constantly shifting personnel. Whether they are seeking a better work environment or chasing a higher paycheck, these staff changes can hurt an organization’s progress. Worse yet, the customers are often negatively impacted by these changes in the continuity of...
Vulnerability & Risk Management
Cybersecurity
File Integrity & Change Monitoring
Managed Security Services
Security Configuration Management
The CIA Debate: Which is the Most Important?
Blog

The CIA Debate: Which is the Most Important?

By Anastasios Arampatzis on Mon, 08/21/2023
Image The Confidentiality, Integrity and Availability (CIA) Triad is a crucial information security model that guides and assesses how an organization manages data during storage, transmission, and processing. Each component of the triad plays a vital role in maintaining information security: Confidentiality means that data should...
Vulnerability & Risk Management
Cybersecurity
File Integrity & Change Monitoring
On-Demand Webinar

Expert Compliance Automation Tips for Financial Services

Thu, 08/17/2023
Cybersecurity compliance standards like the Payment Card Industry Data Security Standard (PCI DSS) and Society for Worldwide Interbank Financial Telecommunications (SWIFT) do an excellent job of hardening systems against breaches. This is especially important in the financial services sector, a common target for cybercriminals. This on-demand webinar presented by Senior...
Compliance
CIS Controls
FISMA
GDPR
PCI DSS
SOX
Security Immutability: The Importance of Change
Blog

Security Immutability: The Importance of Change

By Tyler Reguly on Mon, 08/14/2023
Image A few years ago, I wrote about the importance of security immutability. More specifically, I discussed how important it is that your environment be unchangeable in order to ensure that it remains secure. As I looked back on the article, I found it rather amusing that the article was published 4 years ago, but that feels like a...
Cybersecurity
File Integrity & Change Monitoring
Security Configuration Management
Guide

5 Things Your FIM Solution Should Do for You

File integrity monitoring (FIM) is a critical security control that helps organizations detect system changes in real-time that indicate impacts to compliance and potential cybersecurity incidents, empowering teams to respond rapidly. FIM is required by many major compliance standards such as North American Electric Reliability Corporation Critical Infrastructure Protection ...
File Integrity & Change Monitoring
Tripwire Enterprise: Five ‘Other’ Things You Should Know
Blog

Tripwire Enterprise: Five ‘Other’ Things You Should Know

By Faisal Parkar on Thu, 08/10/2023
Image Network engineers and security analysts have a lot in common. Both require the ability to not only understand the problems at hand but to ascertain the moments leading to them. A typical scenario would include a request to help with a problem a customer has been experiencing. The person you are trying to assist is probably a...
Cybersecurity
File Integrity & Change Monitoring
Security Configuration Management
Tripwire Enterprise: Reimagining a Winning Product
Blog

Tripwire Enterprise: Reimagining a Winning Product

By Jeff Moline on Thu, 07/27/2023
Image How many security products does it take to monitor an organization? Even a small company often finds itself working with multiple monitoring tools to gain visibility into its security posture. This creates multiple blind spots, as a security analyst needs to jump between different tools with different formats and configurations...
Cybersecurity
File Integrity & Change Monitoring
Security Configuration Management
Using-MFT-to-Solve-Your-Cloud-Data-Challenges-5-Key-Takeaways-bw
Blog

Using MFT to Solve Your Cloud Data Challenges: 5 Key Takeaways

By Tripwire Guest Authors on Wed, 07/19/2023
Image As business operations evolve, the challenge of securely moving data within the cloud is one of elevated concern. Transferring sensitive information to it is another. Many are caught between what worked in on-prem technologies and what is needed in cloud-based architectures. Others have sidestepped the security challenges by...
Cybersecurity
File Integrity & Change Monitoring
Guide

How Managed Services Can Help With Cybersecurity Compliance

Organizations are often overburdened with managing complex tools to handle their most important compliance responsibilities, and in many cases lack the internal headcount to manage those tools with highly-trained expertise. Managed services can solve your security staffing and resource challenges by arming your team with security expertise to maintain optimal compliance. ...
Compliance
CIS Controls
FISMA
GDPR
HIPAA
NERC CIP
NIST
PCI DSS
SOX
Guide

File Integrity Monitoring (FIM) Toolkit

File integrity monitoring (FIM) is used to detect and correct unauthorized system changes that may be indicators of compromise. As the inventors of FIM, Fortra’s Tripwire has a multi-decade track record of helping organizations that want to reduce cyber risk and achieve system integrity to avoid security breaches and audit fines. This toolkit is a collection of helpful...
File Integrity & Change Monitoring
Guide

PCI DSS Resource Toolkit

PCI DSS Resources for Seamless Compliance The Payment Card Industry Data Security Standard (PCI DSS) is one of the most widely applied regulatory compliance standards, meaning thousands of organizations can benefit from streamlining their compliance programs to avoid audit fines and protect cardholder data. Fortra’s Tripwire is an authority on how to achieve continuous,...
Compliance
PCI DSS
Security Journeys: From Change Management to Compliance
Blog

Security Journeys: From Change Management to Compliance

By Chris Hudson on Wed, 05/17/2023
Image Zero Trust seems to no longer command the volume of articles that once set it up as a trend that promised a bright new future for security. This is in part because security is a journey. Rushed implementations and low returns often result in burnout with new technology, and generally the real work happens in the quiet stages...
Vulnerability & Risk Management
File Integrity & Change Monitoring
Guide

Insider Insights for the PCI DSS 4.0 Transition

Is your organization ready for the new PCI DSS 4.0 Standard? If you’re already compliant with the most recent version of the Payment Card Industry Data Security Standard (PCI DSS), you’ve probably already begun transitioning to version 4.0 ahead of the upcoming deadline. To help you make the journey easier and more straightforward, Fortra’s Tripwire gathered strategic...
Compliance
PCI DSS