Cybersecurity
Zscaler ZDTE: Zero Trust Access Architecture
Zero trust access replaces broad network trust with policy decisions about a specific user, device, application, and session. The current…
Explore / Technology subjects
Cybersecurity
Cybersecurity architecture, identity, network defense, vulnerabilities, threat detection, risk and incident response.
The reading room
All insights
Latest in Cybersecurity
296 published articles in this category.
Cybersecurity
Google Cloud Security Engineer: Workload Identity Federation
Workload Identity Federation lets workloads authenticate to Google Cloud by exchanging credentials from an external identity provider for short-lived Google…
Cybersecurity
Google Cloud Security Engineer: Policies & Guardrails
Cloud guardrails define what teams are allowed to create, where they can create it, and which security boundaries cannot be…
Cybersecurity
Google Cloud Security Engineer: Security Command Center & Cloud Risk
Security Command Center is Google Cloud's centralized risk management platform for discovering vulnerabilities, misconfigurations, threats, posture drift, and other security…
Cybersecurity
ISACA CISM: Business-Aligned Security Strategy
An information security strategy should explain how security enables the organization to pursue its goals while keeping risk within acceptable…
Cybersecurity
ISACA CISM: Enterprise Risk Management for Security Managers
Security managers operate inside a broader enterprise risk environment. Cyber threats, data protection, resilience, third-party dependency, fraud, safety, financial exposure,…
Cybersecurity
ISACA CISM: Executive Communication for Security Leaders
Security leaders are responsible for more than identifying threats and operating controls. They must explain risk, priorities, incidents, investment needs,…
Cybersecurity
ISACA CISM: Incident Management at the Program Level
Incident management at the program level is the discipline of turning individual security events into a repeatable management capability. Technical…
Cybersecurity
ISACA CISM: Information Security Governance for CISM
Information security governance is the mechanism that turns security from a collection of technical activities into an accountable business capability.…
Cybersecurity
ISACA CISM: Security Program Metrics That Leaders Can Use
Security metrics are useful only when they help someone make a decision. Programs often collect hundreds of measurements because tools…
Cybersecurity
ISACA CISM: Security Resources & Capability Maturity
Security programs are constrained by more than budget. They depend on people, decision rights, processes, architecture, tooling, supplier relationships, institutional…
Cybersecurity
ISC2 CCSP: Cloud Data Security and Encryption Architecture
Cloud Data Security and Encryption Architecture belongs inside vendor-neutral cloud security architecture and operations because the topic affects decisions that…
Cybersecurity
ISC2 CCSP: Cloud Identity Federation and Access
Cloud identity federation lets one security domain rely on another domain to authenticate a user or workload without creating a…
Cybersecurity
ISC2 CCSP: Cloud Incident Response and Forensics
Cloud incident response combines familiar security-response disciplines with evidence sources and containment actions that exist only because the environment is…
Cybersecurity
ISC2 CCSP: Cloud Infrastructure Security and Segmentation
Cloud infrastructure security depends on making trust boundaries visible in an environment where networks, identities, workloads, and management APIs can…