cyber-security-management

Standardised Staples is a fictional company in a free cyber security game. In the game, you are the company's new Chief Information Security Officer. Every quarter brings a business decision, advisors who disagree, and an attack you may or may not stop. The budget is limited, the Board is distracted, and every decision has consequences. Twelve quarters. How long will you last?

Most phishing training, and indeed most compulsory computer-based training (CBT) modules, are largely ineffective in reducing incidents - and are therefore a waste of time and resources. Finally we have the data we need to challenge this, and find a better path to user awareness

What really is cyber security and why doesn't the traditional CIA triad of confidentiality, integrity, and availability work? And what's that got to do with footballs anyway? I've written this simple breakdown of the five key cyber security terms - confidentiality, integrity, ava

Most best practice advice on passwords is terrible. But why? This article explains which password advice should be followed and which advice is harmful, and shows you what a good password policy should contain.

To experts, the business case for cyber security change programmes can seem clear as day — it can be hard to understand why rational business leaders may say no to investment. Yet they do.Here’s how to get a yes.Winning board support for cyber security projects is a critical chal