In 2017, the Security Leadership Research Institute (the Security Executive Council’s research arm) asked security practitioners to choose from a list of which risk-related activities their security ...

Collects and uses customer or employee personal information. Participates in an industry sector that is considered high risk or critical infrastructure. Offers securities as a publicly traded company.

The Department of Health and Human Services is seeking comments on how it can improve its security risk assessment tool, which is designed to help smaller organizations conduct assessments as required ...

Organizations that take cybersecurity seriously conduct risk assessments to determine policies, practices and controls. Often, however, security teams keep the actual assessments to themselves, with ...

The Office for Civil Rights (OCR) and the Office of the National Coordinator for Health Information Technology (ONC) announced the release of version 3.4 of the Security Risk Assessment (SRA) Tool, ...

[Excerpted from "How to Conduct an Effective IT Security Risk Assessment," a new report posted this week on Dark Reading's Risk Management Tech Center.] Many security and compliance projects begin ...

Nudge Security, a leader in SaaS and AI security governance, today announced Adaptive Risk Management, new functionalities that respond to changes in SaaS and AI vendor risk as well as internal usage, ...

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act, continues to reshape compliance obligations ...

Los Angeles, California - September 29, 2026 - PRESSADVANTAGE - VendRespect has introduced a real-time cybersecurity ...

Why are you operating your physical security program? What threats are you trying to protect against? What specific risks to your organization and enterprise are you trying to mitigate? If you cannot ...

One of iOS 27's coolest security features didn't make headlines, but it could stop you from falling for a scam.