article thumbnail

Jeremiah Grossman: Focus on ransomware, SDLC, and endpoints

Network World

With so many elements in information security -- application, network infrastructure, the endpoint, perimeter defenses, and data-centric approaches -- it's easy to fall in the trap of touting one as more important than the other.

SDLC 65
article thumbnail

What Executives Should Know About Shift-Left Security

CIO Business Intelligence

By Zachary Malone, SE Academy Manager at Palo Alto Networks The term “shift left” is a reference to the Software Development Lifecycle (SDLC) that describes the phases of the process developers follow to create an application. What executives should consider when adopting shift-left security?

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Cognitive on Cloud

Cloud Musings

Companies that are leveraging cloud today must also prepare for the cognitive computing era. This blend of cloud and cognitive has, in fact, created a brand new application development model.

Cloud 70
article thumbnail

When least privilege is the most important thing

CIO Business Intelligence

In the ever-evolving realm of information security, the principle of Least Privilege stands out as the cornerstone of safeguarding sensitive data. However, this fundamental concept, emphasizing limited access to resources and information, has been progressively overlooked, placing our digital ecosystems at greater risk.

Backup 128
article thumbnail

Scaling security: How to build security into the entire development pipeline

CIO Business Intelligence

“I’m incredibly proud of how technologists at Discover have collaborated to shift left on security. The way our team has scaled security into the SDLC enables Discover to increase product velocity and achieve its mission of becoming a top digital financial services firm,” said Shaun Khalfan, Chief Information Security Officer at Discover.

Security 122
article thumbnail

Meet The Team Behind Mayhem: Come See Us At These Upcoming April 2023 Events

ForAllSecure

Be sure to stop by so we can meet you and answer any questions you have about our security testing solution. BSides BSides San Francisco is a 100% volunteer-organized Information Security conference. Register for DevSecOps Days here. There are no “attendees” at a BSides event. Get a copy of the presentation here.

Meeting 52
article thumbnail

The CyberWire Daily Podcast EP. 389 With Guest Speaker David Brumley

ForAllSecure

ObserveIT enables security teams to detect a risky user activity, investigate incidents in minutes and effectively respond. He's from the Johns Hopkins University Information Security Institute and also my co-host on the "Hacking Humans" podcast. This 20 minute podcast is available for listening below.