Resources

Working with a Reliable Partner for Cybersecurity Success
Blog
Blog

Working with a Reliable Partner for Cybersecurity Success

By Joe Pettit on Thu, 08/31/2023
Technology companies are often seen as revolving doors of constantly shifting personnel. Whether they are seeking a better work environment or chasing a higher paycheck, these staff changes can hurt an organization’s progress. Worse yet, the customers are often negatively impacted by these changes in the continuity of established relationships. At Fortra, we're proud to have a higher average...
Vulnerability & Risk Management
Cybersecurity
File Integrity & Change Monitoring
Managed Security Services
Security Configuration Management
Understanding-Firewalls
Blog
Blog

Understanding Firewalls – Types, Configuration, and Best Practices for Effective Network Security

By Dilki Rathnayake on Wed, 08/30/2023
A firewall is a security device that controls the flow of traffic across a network. A firewall may be a hardware appliance, or it may be a piece of software that runs on a third-party operating system. Firewalls operate based on a set of pre-defined, as well as customizable security rules that inspect network traffic to block or permit access to a network. Oftentimes, a firewall is logically...
Vulnerability & Risk Management
Cybersecurity
Incident Detection & Investigation
Security Configuration Management
The CIA Debate: Which is the Most Important?
Blog
Blog

The CIA Debate: Which is the Most Important?

By Anastasios Arampatzis on Mon, 08/21/2023
The Confidentiality, Integrity and Availability (CIA) Triad is a crucial information security model that guides and assesses how an organization manages data during storage, transmission, and processing. Each component of the triad plays a vital role in maintaining information security: Confidentiality means that data should not be accessed without authorization. Most times, it is equivalent to...
Vulnerability & Risk Management
Cybersecurity
File Integrity & Change Monitoring
5-Step Guide on Securing Serverless Architectures in the Cloud with RA
Blog
Blog

5-Step Guide on Securing Serverless Architectures in the Cloud with RASP

By Joseph Chukwube on Thu, 08/17/2023
Serverless architecture has increased in recent years, and is anticipated to grow by nearly 25% over the next decade, According to one source , the serverless architecture market was worth over $9 billion in 2022, with its compound annual growth rate projected to increase. The market could be worth over $90 billion by 2032. This indicates the immense amount of potential that this industry carries...
Cybersecurity
Security Configuration Management
Security Immutability: The Importance of Change
Blog
Blog

Security Immutability: The Importance of Change

By Tyler Reguly on Mon, 08/14/2023
A few years ago, I wrote about the importance of security immutability . More specifically, I discussed how important it is that your environment be unchangeable in order to ensure that it remains secure. As I looked back on the article, I found it rather amusing that the article was published 4 years ago, but that feels like a lifetime ago. In the last few years, we really have seen just how...
Cybersecurity
File Integrity & Change Monitoring
Security Configuration Management
Guide
Guide

5 Things Your FIM Solution Should Do for You

File integrity monitoring (FIM) is a critical security control that helps organizations detect system changes in real-time that indicate impacts to compliance and potential cybersecurity incidents, empowering teams to respond rapidly. FIM is required by many major compliance standards such as North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP), the Payment...
File Integrity & Change Monitoring
Tripwire Enterprise: Five ‘Other’ Things You Should Know
Blog
Blog

Tripwire Enterprise: Five ‘Other’ Things You Should Know

By Faisal Parkar on Thu, 08/10/2023
Network engineers and security analysts have a lot in common. Both require the ability to not only understand the problems at hand but to ascertain the moments leading to them. A typical scenario would include a request to help with a problem a customer has been experiencing. The person you are trying to assist is probably a member of the IT team in the organisation. During these situations, we...
Cybersecurity
File Integrity & Change Monitoring
Security Configuration Management
Is secure-by-default an achievable reality?
Blog
Blog

Is secure-by-default an achievable reality?

By Chris Hudson on Thu, 08/03/2023
We have come a long way in the cybersecurity sector in a relatively short period of time, but there remain many challenges in day-to-day operations that create security gaps in many organizations. One of the most common is tied to how we build our solutions, making sure they are secure out-of-the-box instead of only being evaluated during a pen test or annual review, and finding out then that...
Cybersecurity
Security Configuration Management
Is-Your-MSP-Taking-Its-Own-Security-Seriously
Blog
Blog

Is Your MSP Taking Its Own Security Seriously?

By Tripwire Guest Authors on Wed, 08/02/2023
Most small and midsized businesses trust an IT services partner to help them secure their networks. A few years ago, high-profile cyberattacks targeting MSP vendors Kaseya and SolarWinds thrust the security risk of relying on a complex chain of vendors into the technology media and moved the Department of Homeland Security to issue a statement about the need for greater security in the IT services...
Vulnerability & Risk Management
Cybersecurity
Incident Detection & Investigation
Security Configuration Management
DNS-Security-in-Healthcare-The-Gem-in-Your-Cybersecurity-Arsenal
Blog
Blog

DNS Security in Healthcare: The Gem in Your Cybersecurity Arsenal

By Tripwire Guest Authors on Mon, 07/31/2023
The ransomware, malware and phishing attacks going on in the healthcare industry are quite alarming these days. The customers' data in the healthcare industry is more sensitive than in most industries, and this has proven to be a sweet spot for threat actors. Recent research by Infloblox reported that in 2022, there were over 546 major data breaches due to malicious activity. This follows a 4%...
Cybersecurity
Security Configuration Management
Tripwire Enterprise: Reimagining a Winning Product
Blog
Blog

Tripwire Enterprise: Reimagining a Winning Product

By Jeff Moline on Thu, 07/27/2023
How many security products does it take to monitor an organization? Even a small company often finds itself working with multiple monitoring tools to gain visibility into its security posture. This creates multiple blind spots, as a security analyst needs to jump between different tools with different formats and configurations to research a security incident. Adding to this problem is that the...
Cybersecurity
File Integrity & Change Monitoring
Security Configuration Management
Enhanced Data Analysis with Synthetic Datasets
Blog
Blog

Enhanced Data Analysis with Synthetic Datasets

By Isla Sibanda on Wed, 07/26/2023
Large data can offer a massive affordable advantage for companies. Scientists, information analysts, marketing professionals, and advertisers rely upon receiving valuable insights from substantial pools of consumer information. When examined correctly, this information can provide valuable insight for organizations that understand how to use it. The regular procedure of gathering and arranging...
Vulnerability & Risk Management
Cybersecurity
Security Configuration Management
Using-MFT-to-Solve-Your-Cloud-Data-Challenges-5-Key-Takeaways-bw
Blog
Blog

Using MFT to Solve Your Cloud Data Challenges: 5 Key Takeaways

By Tripwire Guest Authors on Wed, 07/19/2023
As business operations evolve, the challenge of securely moving data within the cloud is one of elevated concern . Transferring sensitive information to it is another. Many are caught between what worked in on-prem technologies and what is needed in cloud-based architectures . Others have sidestepped the security challenges by implementing a Managed File Transfer (MFT) solution. Fortra canvassed...
Cybersecurity
File Integrity & Change Monitoring
A Sarbanes-Oxley Act (SOX) IT Compliance Primer
Blog
Blog

A Sarbanes-Oxley Act (SOX) IT Compliance Primer

By Anthony Israel-Davis on Mon, 06/26/2023
At the turn of the most recent century, the financial world was in a moment of unregulated growth, which lead to some serious corporate misdeeds in the United States. This presented the opportunity for two senators to enact a new law to ensure accurate and reliable financial reporting for public companies in the US. The result was the Sarbanes-Oxley Act ( SOX ) of 2002. But what does financial...
Compliance
Security Configuration Management
Guide
Guide

File Integrity Monitoring (FIM) Toolkit

File integrity monitoring (FIM) is used to detect and correct unauthorized system changes that may be indicators of compromise. As the inventors of FIM, Fortra’s Tripwire has a multi-decade track record of helping organizations that want to reduce cyber risk and achieve system integrity to avoid security breaches and audit fines. This toolkit is a collection of helpful resources such as articles...
File Integrity & Change Monitoring
Security Journeys: From Change Management to Compliance
Blog
Blog

Security Journeys: From Change Management to Compliance

By Chris Hudson on Wed, 05/17/2023
Zero Trust seems to no longer command the volume of articles that once set it up as a trend that promised a bright new future for security. This is in part because security is a journey. Rushed implementations and low returns often result in burnout with new technology, and generally the real work happens in the quiet stages when analysts and consultants are putting together the tooling and...
Vulnerability & Risk Management
File Integrity & Change Monitoring
Allowlisting and Blocklisting: What you need to know
Blog
Blog

Allowlisting and Blocklisting: What you need to know

By Tripwire Guest Authors on Tue, 05/02/2023
The phone rings, displaying "Potential Spam," warning of the possible downfall of accepting the call. We also have the option to set specific ringtones for the special people in our lives, so we audibly know immediately who’s calling. For other callers, like the once-a-year important call from our insurance or investment rep, we'll at least add their names so we can see when they ring. And, of...
Cybersecurity
Security Configuration Management
What Is Microsegmentation and 5 Compelling Security Use Cases
Blog
Blog

What Is Microsegmentation and 5 Compelling Security Use Cases

By Tripwire Guest Authors on Mon, 04/17/2023
What Is Microsegmentation? Microsegmentation is a security technique that partitions a network into small, isolated sections to reduce the attack surface and reduce an organizations risk. Each microsegment is typically defined by specific security policies, accessible only to authorized users and devices. Microsegmentation is often seen as a more effective security strategy than traditional...
Cybersecurity
Security Configuration Management
Network Security Threats and Defenses: A 2023 Guide
Blog
Blog

Network Security Threats and Defenses: A 2023 Guide

By Tripwire Guest Authors on Mon, 01/30/2023
What Is Network Security? Network security is a broad field, encompassing various processes, policies, rules, standards, frameworks, software, and hardware solutions. Its primary goal is to protect a network and its data from various threats, including intrusions and breaches. A network security program typically utilizes a combination of access controls, application security tools, virus and...
Cybersecurity
Security Configuration Management
The Heightened Importance of Cybersecurity in Mobile App Development
Blog
Blog

The Heightened Importance of Cybersecurity in Mobile App Development

By Tripwire Guest Authors on Thu, 01/12/2023
Mobile device use is pervasive , and has eclipsed traditional computing. We often hear how various malicious mobile apps are released into circulation. For these reasons, mobile app development needs to focus on cybersecurity just as much as it does on functionality and flexibility, if not more so. It’s an inevitable aspect of app development that must be taken more seriously, as the very real...
Cybersecurity
Security Configuration Management