Tenable Blog

In Getting Started With Security Metrics, Marcus Ranum contends that metrics are the language of business, the primary means of communicating your security posture to executives. Metrics must tell a story and be relevant to your specific business. When asked, “What are the top metrics that I should keep?” Marcus provides an answer that may very well surprise you.

There has been a lot of press coverage concerning the discovery of the XcodeGhost malware that affects iOS 9 and other Apple systems. This infection has caused 400 apps to be pulled from the Apple App Store so far. The malware was created by compromised compilers, where when an author codes an app, the final step between programming and the finished app is to compile it.

Businesses are not stagnant, and expansion can create growing pains for IT infrastructures. More IT assets and more potential vulnerabilities can strain your vulnerability management program.

CISOs are busier than ever answering questions from executives and senior management about the latest breaches and their own security programs. With the average tenure of a CISO trending around 17 months, how do they balance activities to actually ensure security while also keeping the company informed about their security posture? Scott Hollis tackles this dilemma in The Average CISO Tenure is 17 Months—Don’t be a Statistic!

Recent analyst predictions are anticipating significant increases in the amount of corporate data bypassing perimeter security and flowing between mobile devices and the cloud. In the new IT landscape, which endpoints are most vulnerable? Which devices and applications need more security? How does the security department reach out and protect new SaaS environments and BYOD?