Threat & Vulnerability Management Archives

Penetration Testing Threat & Vulnerability Management

What is the Difference Between a VA Scan and a Pen Test?

by RSI Security August 8, 2019September 5, 2019

When conducting experiments, scientists will carefully set up control measures to provide parameters for results. These controls help define the outcome by marking what ways the experiment did or did not meet expectations.

Likewise, as you decide to gauge the effectiveness of your security, you will set up parameters that will help drive results. A penetration scan or a vulnerability assessment can help you evaluate the performance of your system.

This guide below will lay out in detail the difference between the pros and cons of penetration tests and vulnerability assessments, their differences, and why you might choose one or the other.

August 8, 2019September 5, 2019 0 comment

Cyber Attacks Threat & Vulnerability Management

5 Cyber Security Threats In The Cannabis Industry

by RSI Security July 25, 2019August 13, 2019

written by RSI Security

The legal marijuana industry is expected to grow exponentially over the next few years. This is spurred not only by the legalization of recreational marijuana in many states in the US as well as in countries like Canada, but also the growing adoption of cannabis as a pharmaceutical product.

According to the State of the Legal Cannabis Markets report from BDS Analytics and Arcview Market Research, legal pot sales will hit $40.6 billion in 2024. This represents a 24.5 percent growth over the period 2018 to 2024.

The burgeoning cannabis retail industry is, therefore, a prime target for cybercriminals who look to steal valuable and sensitive information ranging from credit card information, trade secrets, and personally identifiable information (PII).

Aside from the consumer information they store and manage, online cannabis retailers are being targeted because many of them have yet to incorporate cybersecurity practices. Small to medium-sized online marijuana retailers are also highly vulnerable to cyberattacks because they normally don’t have the resources to hire an IT staff who can implement security measures to mitigate cybersecurity risks.

July 25, 2019August 13, 2019 0 comment

IT Security & Cybersecurity Awareness Training Threat & Vulnerability Management

Shadow IT Risk: Q&A with Cybersecurity Expert Sai Huda

by John Shin June 7, 2019June 12, 2019

written by John Shin

When it comes to cybersecurity risk, it’s easy to overlook one of the primary targets that hackers are starting to go after: your own employees. More specifically, cyber criminals are now going after what’s known as companies’ “Shadow IT” ecosystem, hacking into software and apps employees use without the approval and/or knowledge of your IT department.

According to Gartner, by 2020 approximately one-third of successful enterprise cyber-attacks will be on data and systems located in shadow IT resources. And that’s not to mention the regulatory compliance risks that organizations run by having sensitive data potentially being handled, transferred, and passed around on apps that may or may not have the proper security measures.

I recently caught up with globally recognized cybersecurity expert and author Sai Huda to help demystify shadow IT, explain the true risks that shadow IT presents, and provide IT leaders with sound strategies to tackling shadow IT within their organizations.

June 7, 2019June 12, 2019 0 comment

Threat & Vulnerability Management

How to Build an Effective Vulnerability Management Program

by RSI Security January 25, 2019January 27, 2019

written by RSI Security

Vulnerabilities can wreak havoc on your network if you don’t take the necessary precautions to combat them. Having a robust cybersecurity program in place that is focused on vulnerability management can help your organization stay on top of potential security risks before they happen.

January 25, 2019January 27, 2019 0 comment