Resources

How Does PCI DSS 4.0 Affect Web Application Firewalls?
Blog

How Does PCI DSS 4.0 Affect Web Application Firewalls?

By Josh Davies on Mon, 01/08/2024
Image The payment industry is bracing for the transition to Payment Card Industry Data Security Standard (PCI DSS) 4.0, heralding significant changes in cybersecurity practices. As we approach the implementation of this revised standard, a critical focal point emerges: the role and new mandate of web application firewalls (WAFs) in...
Compliance
PCI DSS
Operational Resilience: What It Is and Why It's Important
Blog

Operational Resilience: What It Is and Why It's Important

By Nick Hogg on Wed, 12/13/2023
Image Frankly stated, operational resilience is your ability to climb the mountain, no matter the weather. Businesses now need more than a good security structure to weather the storms of AI-driven threats, APTs, cloud-based risks, and hyper-distributed environments. And more importantly, operational resilience in 2024 requires a...
Cybersecurity
File Integrity & Change Monitoring
Incident Detection & Investigation
NIST CSF 2.0: What you need to know
Blog

NIST CSF 2.0: What you need to know

By Antonio Sanchez on Mon, 12/11/2023
Image Organizations looking to protect their sensitive data and assets against cyberattacks may lack the ability to build a cybersecurity strategy without any structured help. The National Institute of Standards and Technology (NIST) has a free, public framework to help any organization mature its IT security posture. Recently, the...
Compliance
NIST
On-Demand Webinar

Top Security Misconfigurations to Watch Out For

Thu, 11/30/2023
Misconfigurations continue to be a leading cause of cybersecurity breaches. Luckily, you can prevent and correct them with the right knowledge and tools on your side. The National Security Agency (NSA) and Cybersecurity and Infrastructure Security Agency (CISA) recently released a joint cybersecurity advisory (CSA) sharing the most common misconfigurations observed by their Red...
Cybersecurity
Security Configuration Management
SMB Protocol Explained: Understanding its Security Risks and Best Practices
Blog

SMB Protocol Explained: Understanding its Security Risks and Best Practices

By Dilki Rathnayake on Tue, 11/21/2023
Image Server Message Block (SMB) protocol is a communication protocol that allows users to communicate with remote servers and computers, which they can open, share, edit files, and even share and utilize resources. With the expansion of telecommunications, this protocol has been a prime target for threat actors to gain unauthorized...
Cybersecurity
Security Configuration Management
Change Variance: How Tiny Differences Can Impact Your IT World
Blog

Change Variance: How Tiny Differences Can Impact Your IT World

By Chris Hudson on Mon, 11/20/2023
Image In the vast and ever-evolving universe of information technology, there's one constant: change (that and cliches about constants!). Servers, systems, and software – they all get updated and modified. But, have you ever stopped to consider how even tiny differences between these digital entities can sometimes lead to unexpected...
Cybersecurity
File Integrity & Change Monitoring
Secure Access Control in 2024: 6 Trends to Watch Out For
Blog

Secure Access Control in 2024: 6 Trends to Watch Out For

By Gilad David Maayan on Wed, 11/15/2023
Image What Is Secure Access Control? Secure access control, part of the broader field of user management, is a key concept in the realm of information security, particularly in the business environment. It refers to the process of selectively restricting and allowing access to a place or resource. In the context of information...
Cybersecurity
Security Configuration Management
Guide

10 Common Security Misconfigurations and How to Fix Them

Is your organization using default security settings, or do you have a security configuration management (SCM) program in place to ensure your configurations are as secure as possible? Misconfigurations are a leading cause of unauthorized access and security breaches, creating entry points for hackers in servers, websites, software, and cloud infrastructure. The Open Worldwide...
Cybersecurity
Security Configuration Management
5-Tripwire-Enterprise-Misconfigurations-to-Avoid
Blog

5 Tripwire Enterprise Misconfigurations to Avoid

By Jeff Hines on Tue, 10/24/2023
Image Configuration management is vitally important as part of a sound cybersecurity strategy. We have previously published how patching alone is not enough, as that does not alter a system’s customized configuration. Misconfigurations can be as damaging to security as a deliberate attack on a system. As the manufacturer of Tripwire...
Security Configuration Management
What is a CMDB?
Blog

What is a CMDB?

By Lane Thames on Tue, 10/17/2023
Image There are countless tools and technologies available to help an organization stay on top of its IT assets, and a configuration management database (CMDB) is an extremely useful one. The database keeps track of relevant information regarding various hardware and software components and the relationships between them. It allows...
Security Configuration Management
Compliance vs. Security: Striking the Right Balance in Cybersecurity
Blog

Compliance vs. Security: Striking the Right Balance in Cybersecurity

By Jay Thakkar on Mon, 10/09/2023
Image Compliance and security often go hand in hand as ideas that attempt to protect against cyber threats. While both compliance and security are designed to lower risk, they are not mutually inclusive—that is, not everything that is required for compliance will necessarily help with security, and not everything that bolsters...
Cybersecurity
Compliance
Security Configuration Management
cogs
Blog

Revealed! The top 10 cybersecurity misconfigurations, as determined by CISA and the NSA

By Graham Cluley on Fri, 10/06/2023
Image A joint cybersecurity advisory from the United States's National Security Agency (NSA) and Cybersecurity and Infrastructure Security Agency (CISA) has shone a light on the top ten most common cybersecurity misconfigurations found in large private and public organisations. The report aims to detail the weaknesses found in many...
Cybersecurity
Security Configuration Management
On-Demand Webinar

Best Practices for the PCI DSS 4.0 Countdown

Wed, 09/27/2023
The deadline for compliance with the Payment Card Industry Data Security Standard (PCI DSS) 4.0 requirements isn’t until March 31, 2024, but organizations that allow those remaining months to fly by without adequate preparation may face last-minute PCI panic. The best approach is to steadily reach key milestones so you’ll be fully prepared when the deadline arrives. Watch the...
Compliance
PCI DSS
Closing Integrity Gaps with NIST CSF
Blog

Closing Integrity Gaps with NIST CSF

By Lane Thames on Wed, 09/27/2023
Image The then-new 2014 NIST Cybersecurity Framework (CSF) was designed to plug security gaps in operational technology. It’s still in use today and more relevant than ever. Fortra’s whitepaper provides a cohesive review of this security staple and how to glean the best out of it for your strategy. A Brief History of NIST CSF “The...
Cybersecurity
Compliance
NIST
Increasing Your Business’ Cyber Maturity with Fortra
Blog

Increasing Your Business’ Cyber Maturity with Fortra

By Antonio Sanchez on Wed, 09/20/2023
Image When building a tower, it helps to start with a sturdy foundation. Cyber maturity is the tower, and there are three levels that build it: Foundational IT/OT & Security Control Processes Fundamental Security Control Capabilities Advanced Security Control Capabilities Fortra occupies a unique space in the industry because of...
Vulnerability & Risk Management
Cybersecurity
Compliance
Managed Security Services
Security Configuration Management
5-Reasons-Why-You-Should-Conduct-Regular-Cybersecurity-Audits
Blog

5 Reasons Why You Should Conduct Regular Cybersecurity Audits

By Chester Avey on Wed, 09/13/2023
Image Cyber threats are growing more sophisticated, covert, and frequent every day. This year alone has seen the likes of T-Mobile and PharMerica suffering serious security breaches. These incidents disrupted operations and threatened their bottom lines, not to mention the lingering aftereffects and negative brand perception in the...
Cybersecurity
Compliance
Security Configuration Management
10-Mistakes-in-Cybersecurity-and-How-to-Avoid-Them
Blog

10 Mistakes in Cybersecurity and How to Avoid Them

By Katrina Thompson on Mon, 09/11/2023
Image It's easy to rest on our laurels. Prevent a few breaches – or go long enough without one – and you start to feel invincible. While our efforts are certainly laudable, we can't get too comfortable. As defenders, we always need to be on the hunt for what we've missed and ways to do better. Here are ten common cybersecurity...
Cybersecurity
File Integrity & Change Monitoring
What is ISO 27002:2022 Control 8.9? A Quick Look at the Essentials
Blog

What is ISO 27002:2022 Control 8.9? A Quick Look at the Essentials

By Taha Dharsi on Wed, 09/06/2023
Image The basic parameters that control how hardware, software, and even entire networks operate are configurations, whether they take the form of a single configuration file or a collection of connected configurations. For instance, the default properties a firewall uses to control traffic to and from a company's network, such as...
Cybersecurity
Compliance
Security Configuration Management
Working with a Reliable Partner for Cybersecurity Success
Blog

Working with a Reliable Partner for Cybersecurity Success

By Joe Pettit on Thu, 08/31/2023
Image Technology companies are often seen as revolving doors of constantly shifting personnel. Whether they are seeking a better work environment or chasing a higher paycheck, these staff changes can hurt an organization’s progress. Worse yet, the customers are often negatively impacted by these changes in the continuity of...
Vulnerability & Risk Management
Cybersecurity
File Integrity & Change Monitoring
Managed Security Services
Security Configuration Management
Understanding-Firewalls
Blog

Understanding Firewalls – Types, Configuration, and Best Practices for Effective Network Security

By Dilki Rathnayake on Wed, 08/30/2023
Image A firewall is a security device that controls the flow of traffic across a network. A firewall may be a hardware appliance, or it may be a piece of software that runs on a third-party operating system. Firewalls operate based on a set of pre-defined, as well as customizable security rules that inspect network traffic to block or...
Vulnerability & Risk Management
Cybersecurity
Incident Detection & Investigation
Security Configuration Management