Clear All

Filter By:

RSA 2018: Where Does Infosec Go From Here?

Looking at RSA Conference 2018, the crowd was noticeably younger this year, suggesting an industry growth spurt and raising questions about...
Van Wyk: Take Steps to Protect Yourself as a Consumer

With all the digital threats we face on a daily basis, it's a miracle we haven't all been hacked. To ensure the odds are in your favor...
Beaver: Learning the Right Lessons from ExpensiveWall Android Malware

If you're in charge of information security, you may not be able to control every user and every device in your environment, but you can...

Insights Portal

December 5, 2018 | Cloud Application and Data Controls
By Dave Shackleford, IANS Faculty

Create a Comprehensive API Security Review Standard

As more organizations move critical data to the cloud, they face the tough challenge of managing API data access and security. In this Ask-an-Expert written response, IANS Faculty Dave Shackleford details the primary areas to focus on when building an API security review standard as well as key questions to consider within each area.

November 16, 2018 | Cloud Network and Host Controls
By Mike Rothman, IANS Faculty

Developing a More Mature Cloud Security Model

Securing the cloud is fundamentally different, yet there are very few guidebooks or clear methods to ensure adequate protection. In this webinar, IANS Faculty Mike Rothman explains the Securosis/IANS Cloud Security Maturity Model, how serverless functions enable continuous cloud security, and how to secure the Continuous Deployment Pipeline.

November 12, 2018 | Cloud Network and Host Controls

IANS Topic Guide: Surviving Cloud Security Deployments

Each IANS Topic Guide addresses a single information security issue from a planning, deployment and maintenance perspective. In this installment, we focus on cloud security.

October 26, 2018 | Cloud Application and Data Controls

AWS Security Checklist

While there are many security best practices for organizations making the move to Amazon Web Services (AWS) accounts and environments, this checklist provides the most practical, applicable security steps organizations should take to ensure their workloads remain secure.

October 23, 2018 | Security Policies and Strategy

Poll: Should Security Policies Cover Shadow IT?

Is it wise to create policies specifically for Shadow IT? In this Viewpoints report, IANS Faculty Tim Medin, Adam Shostack and Kevin Beaver explain why it's not the best idea and offer recommendations for solving the problem.

October 22, 2018 | Cloud Access Security Brokers
By Dave Shackleford, IANS Faculty

8 Key CASB Decision Factors

Today's CASBs help improve everything in the cloud, from visibility and data security to threat protection and compliance. In this report, IANS Faculty Dave Shackleford explains how CASBs work and details the eight key decision factors organizations should assess before choosing one for their environment.

October 22, 2018 | Cloud Access Security Brokers

CASB Feature Checklist

This checklist details the primary features every organization should assess to ensure the cloud access security broker (CASB) they choose aligns with their cloud security goals.

October 4, 2018 | Cloud Application and Data Controls
By Dave Shackleford, IANS Faculty

IANS Cloud Security Update: Q3 2018

As organizations continue to move services and computing assets into cloud service provider environments, the need for adequate security controls grows as well. In this quarterly research report, IANS Lead Faculty Dave Shackleford updates IANS’ clients on the new developments occurring in the cloud security arena.

September 21, 2018 | Cloud Application and Data Controls

Office 365 Checklist

This checklist is designed to help organizations roll out Office 365 efficiently and securely.

September 14, 2018 | Cloud Network and Host Controls

Cloud Terminology Cheat Sheet (Updated)

This cheat sheet compares key services and cloud terms among major cloud services. This update provides Google Computer Platform (GCP) terminology, in addition to Amazon Web Services (AWS) and Microsoft's Azure.

Type

Topic

Recent Blogs & Podcasts