Search
cta_page

Tripwire Cybersecurity Solutions

Protect the security and integrity of your infrastructure with Tripwire. Tripwire protects the world’s leading organizations from the most damaging cyberattacks. Defend your organization across IT to OT with our industry-leading cybersecurity and compliance solutions. window._wq = window._wq || []; _wq.push({ id: "t054beewaw", options: { preload: "auto" } }); ...
Vulnerability & Risk Management
Cybersecurity
Compliance
File Integrity & Change Monitoring
IT Security Operations & Asset Discovery
Managed Security Services
Security Configuration Management
Datasheet

The Tripwire NERC CIP Solution Suite

The North American Electric Reliability Corporation (NERC) maintains comprehensive reliability standards that define requirements for planning and operating the bulk electric system (BES). Among these are the Critical Infrastructure Protection (CIP) Cyber Security Standards, which specify a minimum set of controls and processes for power generation and transmission companies to follow to ensure...
Compliance
NERC CIP
How to Integrate FIM with SOAR Platforms
Blog

Continuous PCI DSS Compliance with File Integrity Monitoring

By Guest Authors on Tue, 10/28/2025
PCI DSS compliance is often seen as a one-off task, that is, you do the audit, implement controls, and then move on.But then there comes the problem - systems aren’t static, meaning that files, scripts, and configurations change constantly, and even small untracked changes can create gaps that lead to non-compliance or security issues.This is where File Integrity Monitoring (FIM) comes in. It...
File Integrity & Change Monitoring
time-for-an-iot-audit
Blog

Time for an IoT Audit?

By Guest Authors on Wed, 08/06/2025
IoT is everywhere, quietly powering everything from smart thermostats in homes to complex systems in industrial networks. While these devices bring incredible convenience and innovation, they also open the door to significant cybersecurity risks, especially in manufacturing and similarly sensitive sectors.The longer devices stay online, the more likely they are to become vulnerable due to outdated...
Vulnerability & Risk Management
Cybersecurity
Industrial Control Systems
Security Configuration Management
times_are_changing._how_to_future-proof_your_cybersecurity_career
Blog

Times are Changing. How to Future-Proof Your Cybersecurity Career.

By Anthony Israel-Davis on Wed, 09/10/2025
Since the floodgates opened in November 2022 (at the arrival of ChatGPT), there has been one question on everyone’s mind: Is AI going to take my job?While the answers range from yes to no to maybe, there are ways to ride the AI wave without being subsumed by it. The way skilled professionals will do that, especially within cybersecurity, all depends on how well they know the industry—and how well...
Datasheet

Tripwire NERC CIP Executive Brief

North American electric utility companies constantly balance the need to be audit-ready for NERC CIP compliance against their top priority: ensuring the reliability of the bulk electric system.NERC CIP compliance, especially when approached using manual methods, is complex, time-consuming, and prone to human error. Further, NERC CIP requirements often infer security skill sets beyond those of many...
Compliance
NERC CIP
File Integrity & Change Monitoring
Security Configuration Management
Penetration Testing Report
Guide

2024 Pen Testing Report

Each year, Fortra's Core Security conducts a global survey of cybersecurity professionals across various industries on their penetration testing practices to better understand the different approaches to, common challenges with, and overall development of offensive security.The 2024 Penetration Testing Report is an analysis of the results of this...
Zero Trust Security Report
Guide

2023 Zero Trust Security Report

The concept of Zero Trust is quickly gaining momentum among enterprise IT security teams, with 87 percent saying their organizations have zero trust access in place and projects underway or planned.The 2023 Zero Trust Security Report reveals how enterprises are implementing zero trust security in their organizations, including key drivers, adoption...
Fortra Guide
Guide

Getting in Control of Financial Services Cybersecurity Regulations

Organizations in the financial sector are all too aware that their industry continues to be one of the top targets for cyber criminals. Among financial services and insurance organizations, the leading cause of breaches is system intrusion. That’s why so many cybersecurity compliance regulations have sprung up to ensure systems are kept hardened against attack. This guide covers the main...
Compliance
CIS Controls
FISMA
GDPR
NIST
PCI DSS
SOX
CMS-ARS-A-Blueprint-for-US-Healthcare-Data-Security-and-Compliance
Blog

CMS ARS: A Blueprint for US Healthcare Data Security and Compliance

By Kirsten Doyle on Thu, 03/20/2025
Protecting sensitive patient information is more critical than ever. With technologies evolving at a breakneck pace and the number of cyber threats targeting healthcare entities in the United States skyrocketing, healthcare organizations must have robust policies and guardrails in place to ensure patients' confidential information doesn't fall into the wrong hands.One of the essential frameworks...
Compliance
HIPAA
Security vs. Compliance: What's the Difference
Blog

Security vs. Compliance: What's the Difference?

By Anthony Israel-Davis on Thu, 11/06/2025
Security and compliance—a phrase often uttered in the same breath as if they are two sides of the same coin, two members of the same team, or two great tastes that go great together.The truth is, they can be. But it takes some effort.How can security and compliance teams work together to create a winning alliance, protect data, develop according to...
Cybersecurity
Compliance
Top Phishing and Social Media Threats: Key Findings from the Quarterly Threat Trends & Intelligence Report
Blog

Top Phishing and Social Media Threats: Key Findings from the Quarterly Threat Trends & Intelligence Report

By Guest Authors on Sun, 09/18/2022
In today’s online landscape, it is crucial for organizations to stay on top of the threats that put their enterprises at risk. Agari and PhishLabs have put together their Quarterly Threat Trends & Intelligence Report detailing their analysis of phishing and social media attacks this quarter. The report presents statistics regarding the volume of...
the_uks_four-step_framework_for_supply_chain_resilience
Blog

The UK’s Four-Step Framework for Supply Chain Resilience

By Josh Breaker-Rolfe on Thu, 11/13/2025
Ransomware attacks can ripple through supply chains, causing serious disruption and massive financial consequences for multiple businesses in one fell swoop. As such, CISOs are spending more time considering how to keep operations secure as ecosystems span across dozens, if not hundreds, of vendors, contractors, and digital dependencies. With this in mind, the UK government has released a...
Cybersecurity
File Integrity & Change Monitoring
Fortra Guide
Guide

Sustaining SOX Compliance Best Practices to Mitigate Risk Automate Compliance and Reduce Costs

Achieving compliance with the Sarbanes-Oxley Act (SOX) can be a monumental effort. Maintaining those controls and audit reporting on an ongoing basis can be even more difficult. The SEC recommends automated controls for more efficient and effective compliance results.This white paper details the SOX requirements that are best addressed by automated controls using the COBIT framework in two core...
Compliance
SOX
Fortra Guide
Guide

Guide to Managed Cybersecurity Services

On a mission to find a service that protects your organization's data while achieving regulatory compliance simultaneously? Discover best practices for cybersecurity managed services that provide advanced protection.As managed services become more popular — and essential, for many — the world is on track to funnel 77 percent of cybersecurity spending...
Managed Security Services
Key Takeaways from the 2023 Domain Impersonation Report
Blog

Key Takeaways from the 2023 Domain Impersonation Report

By Eric George on Tue, 10/03/2023
One of the most pervasive and unavoidable threats on the internet, domain impersonation can be used by bad actors as the basis for a wide range of attacks. The various ways in which cybercriminals make use of lookalike domains often fluctuate, and the first half of 2023 has exemplified this fact. Staying on top of security and not falling victim to...
Cybersecurity