You've requested...

Prevent Data From Leaking Out of Your Organization

If a new window did not open, click here to view this asset.

Download this next:

Web security: Important but often overlooked

Businesses increasingly rely on being online, yet web security is often overlooked. This is evidenced by the fact that the top web attack methods, such as SQL injection and cross-site scripting, continue to be effective.

 These well-known vulnerabilities need to be addressed and web security needs to move beyond whitelisting, blacklisting and URL filtering. It needs to be dynamic in response to a dynamic threat. It also needs to take humans into account by responding to users’ needs and providing a working environment that is inherently secure and insulated from common web threats.

 Organisations need to be aware of their exposure to web threats and follow best practice to limit that exposure and mitigate the damage from web-based attacks. This is best achieved by monitoring all web traffic, securing web applications, ensuring data is not exposed to the internet unnecessarily, using good access controls, and implementing multi-factor authentication. The risk is often high, but it can and must be managed.

These are also closely related to: "Prevent Data From Leaking Out of Your Organization"

  • Hacking the Human Operating System

    The prevalence of social engineering in many publicly disclosed cyber attacks suggests there is either an inherent weakness in the ability of victims to distinguish malicious communications or that cyber criminals are using more complex methods to bypass the “human firewall”. 

    The truth likely lies somewhere between these two statements, but, regardless of the root cause, we can see that the first line of defence is evidently failing. More importantly, to blame users for breaches is not entirely fair. There are many examples of clearly unsafe user behaviour, but this report will demonstrate that attackers often bypass the consciousness of their targets and attempt to manipulate victims through subconscious influences.

    This report will review the concept of social engineering. We will consider the techniques used in recent cyber attacks, as well as the levers to influence victims, communication channels and suggested controls to reduce the risks.

  • Top MITRE ATT&CK techniques from criminal/APT groups

    McAfee’s latest report incorporates not only the malware zoo, but new analysis for what’s being detected in the wild.

    It also covers:

    • Threats to sectors and vectors
    • Sunburst malware and the SolarWinds supply chain compromise
    • Top MITRE ATT&CK techniques in Q4 2020 from criminal/APT groups
    • And much more

    Download the full report to uncover it all.

Find more content like what you just read:

  • Bolster signature-based malware detection with machine learning

    Discover how to enhance malicious code and behavior detection by combining signature-based detection with machine learning. Hear from experts Michael Cobb and Karen Scarfone about how to improve malware threat detection and 10 questions to ask endpoint security vendors.

    Download

  • Top 10 IT security stories of 2018

    The discovery of the Meltdown and Spectre microprocessor vulnerabilities, and several similar vulnerabilities in the months that followed, were probably the single most challenging developments for enterprise IT security teams in 2018. Here's a look back over Computer Weekly's top 10 IT Security stories of 2018.

    Download

  • 8 fraud fighting benefits of BankIDs

    With the help of an effective BankID, some even reducing online payment fraud for their users and business partners to levels as low as 0.00042%. This white paper explores how organizations can use BankIDs to fight fraud, including 8 key benefits. Read on to learn more.

    Download

  • A guide to the zero-trust security journey

    The distributed nature of the modern network has made traditional security methods based on the principle of a “perimeter” obsolete. A zero trust IT security model should be part of an integrated approach that includes the entire end-to-end digital estate, overcoming the challenges of the traditional perimeter. Read on to learn more.

    Download

  • Endpoint and antimalware protection for small to large businesses

    Picking a security platform can be difficult. Inside this e-guide, expert Ed Tittel explores strategies and criteria to ensure you are picking the most successful security platform for your company.

    Download

  • 86 million reasons to support No More Ransom

    Anti-ransomware cross-industry initiative says it has prevented more than £86m in ransom payments as it marks its third anniversary, which coincides with a resurgence in ransomware in many parts of the world.

    Download

  • CIO Trends #11: Middle East

    Read in this e-guide how Saudi Arabia is harnessing the cloud during the global healthcare crisis. Also read in this issue how SMEs in the United Arab Emirates are adopting the latest technologies at pace to help their businesses survive the Covid-19 related business disruption.

    Download

  • CIO Trends #11: Middle East

    Read in this e-guide how Saudi Arabia is harnessing the cloud during the global healthcare crisis. Also read in this issue how SMEs in the United Arab Emirates are adopting the latest technologies at pace to help their businesses survive the Covid-19 related business disruption.

    Download

  • Computer Weekly – 2 May 2017: How to deal with data under GDPR

    In this week's Computer Weekly, we take an in-depth look at GDPR – the new EU data protection regulation - with only 12 months left to prepare, we hear how one firm is using machine learning to revolutionise online fashion retail, and we examine how CIOs can apply lessons from buying software to improve digital transformation.

    Download

  • Cyber Security 2016 and beyond

    Cyber risks to businesses increasingly feature in the news as a growing number of companies are targeted by attacks aimed at stealing personal and intellectual property data, but despite this coverage, studies show many companies are still ill-equipped to deal with these attacks.

    Download

  • Print security: An imperative in the IoT era

    Analyst group Quocirca gives the perspective on the risks and best practices of print security.

    Download

  • In 2017, the insider threat epidemic begins

    Cyber security resiliency depends on detecting, deterring and mitigating insider threats. This report from the Institute for Critical Infrastructure Technology assesses the risks and potential solutions.

    Download

  • Overcoming Enterprise Data Protection Challenges

    Data usage and dependence has evolved rapidly in recent years – which has led to a rise in the necessity for effective data loss prevention (DLP), especially as organization migrate their data to the cloud. Access this exclusive e-book for a closer look at modern data protection challenges and requirements and an intro to cloud-based DLP.

    Download

  • How can a data security platform complement a DLP tool?

    A lack of contextual awareness: This is one of the myriad challenges that many data loss prevention (DLP) tools can present. Along with delving into that obstacle and two others, this e-book explores how a data security platform can complement DLP tools. Continue on to unlock the full insights.

    Download

  • 9 essential elements of network security

    Network security isn't a one-size-fits-all strategy. Dive into the various segments of network security, and learn how they overlap and interact with each other.

    Download

  • CW APAC, April 2022: Trend Watch: Cyber security

    In this handbook, Computer Weekly looks at how to minimise edge security risks, India's rise in cyber security revenues and Trellix's decision to democratise XDR access

    Download

  • How to improve your cloud DLP

    This e-guide outlines the risks the cloud exposes modern enterprises to, and explores new options in cloud security like third-party cloud access security brokers (CASBs). Learn about several tools available that can let CIOs gain the visibility to prioritize cloud apps based on their security risk, and more.

    Download

  • Enterprise Data Loss Prevention, Revisited

    To protect data assets both in motion and at rest, a modern approach to data loss prevention (DLP), designed for today’s digital enterprise, is paramount. Read this exclusive ESG white paper to learn more about rethinking DLP for the modern workflow.

    Download

  • Security Analytics

    This e-guide focuses on how businesses are turning to emerging technologies to improve their capability to detect and respond to previously-unknow cyber-attacks, and security analytics is among the most popular choices.

    Download

  • Building a successful data loss prevention program

    Data breaches and the resulting data loss can lead to destructive results. An effective data loss prevention (DLP) solution eliminates data duplication and can help centrally manage data and eliminate serious breaches. This e-book looks at what it takes to develop a successful DLP solution in order to secure your organization. Read on to learn more

    Download

  • Computer Weekly – 24 October 2017: Where will AI take us?

    In this week's Computer Weekly, artificial intelligence (AI) enthusiasts and sceptics debate the opportunities and risks of the much-hyped technology. Our latest buyer's guide examines the benefits of cloud-native applications. And we look at best practice in defending email systems from cyber attacks. Read the issue now.

    Download

  • Focus: how to avoid being hit by ransomware

    In this special report, we analyse the risks of ransomware and provide the latest best practice advice on how to protect your organisation from this fast-growing form of malicious software.

    Download

  • Computer Weekly - 10-16 September 2019: A tech boost for social care

    In this issue, we explore how local authorities across the UK have been looking at assistive technologies, ranging from collaborative robots to voice assistants, to support delivery of adult social care services. We also look into the ramifica-tions of HMRC targeting 1,500 GlaxoSmithKline IT con-tractors.

    Download

  • SASE: The driver of your SaaS security journey

    SaaS applications have become popular in recent years due to their widespread availability, ease of use, and low costs – but they’re not always secure. In this white paper, you will learn about how a SASE solution is designed to assist your cloud transformation and safely adopt SaaS applications. Download now to learn about solution benefits.

    Download

  • U.S. FTC Safeguards Rule: What you need to know

    The Safeguards Rule requires mitigation of “reasonably foreseeable internal and external risks” - in other words, protection against data breaches, data leakage, phishing, and ransomware. Learn how Cisco Umbrella supports compliance in this white paper.

    Download

  • CW APAC, June 2020: Trend Watch - data protection

    Asia-Pacific organisations see the importance of having good data protection practices, even as they are still grappling with organisational and operational challenges. In this handbook, Computer Weekly looks at the different levels of preparedness across the region and what firms can do to plug any gaps.

    Download

  • CW Middle East Oct to Dec 2016

    In this quarter's CW Middle East ezine, we feature the IT journeys of three companies in the region with detailed analysis of recent IT projects that were designed to support business transformation in a changing world.

    Download

  • MicroScope – February 2022: Spotting the hidden security dangers

    In this security-focused issue, we take a closer look at the threats and security trends experts expect to increase and pop up over the course of 2022. Also read how proposed government regulations could spell eye-watering fines for MSPs, and how being green could be more difficult than anticipate

    Download

  • The Enterprise Buyer’s Guide to Integrated CASB Security

    To address today’s cloud security challenges, enterprises must take an integrated approach to CASBs to keep up with the exponential growth of SaaS. Download this e-book to learn about 5 must-haves of an integrated CASB solution, solution benefits and more.

    Download

  • How to integrate SaaS with CASB

    Today, organizations rely on the cloud for core business applications and data, but a layered approach has also increased complexity and brings new challenges. This ESG report digs into how integrating CASB with SaaS security providers aims to address these challenges by delivering key capabilities. Read on to get started.

    Download

  • How to understand if your SASE solution is truly effective

    Not all SASE platforms are created equal. The best solutions offer the ability to combine SD-WAN and security into a single, integrated solution that delivers both full protection and a seamless user experience, regardless of location. Read on to learn more about the 10 tenets of an effective SASE solution and overcome your network challenges.

    Download

  • MITRE ATT&CK, a guide for businesses in 2022

    Mitre ATT&CK is a framework, but it can also serve as a foundation to address cybersecurity as a whole moving forward. Download this e-guide and learn more about the Mitre ATT&CK framework, and which trends are shaping the way this tool can be applied to cyber security around the globe.

    Download

  • Leader’s guide to reinventing data security for the cloud

    Is your data security strategy prepared for the cloud era? To find out, take a look through this 22-page e-book, which breaks down modern data security challenges and how to overcome them.

    Download

  • Computer Weekly – 15 October 2019: Securing the internet of things

    In this week's Computer Weekly, as security concerns prevent many organisations from adopting the internet of things, we examine mitigation strategies. Many firms are still struggling with GDPR policies – we assess if full compliance is ever possible. And we look at the technologies for delivering on-premise object storage. Read the issue now.

    Download

  • The future of storage

    In this week's Computer Weekly, we examine emerging technologies in storage such as helium disks and DNA. Ransomware is becoming more sophisticated and the attackers more tactical. And as the EU's top court challenges the UK over surveillance, we ask what this means for data privacy after Brexit. Read the issue now.

    Download

  • Uber and Volkswagen: Handling ethics in IT

    Take a look at this edition of ComputerWeekly to learn more Uber, Volkswagen, and other companies that have experience with software ethics issues, how they've dealt with them, and what the consequences have been.

    Download

  • Palo Alto Networks 2nd Special Edition

    Most network and network security products on the market today weren’t designed to handle today’s security concerns. To address these challenges, Gartner came up with secure access service edge (SASE). Read this e-boo for an in-depth look at SASE and learn how you can secure your organization against today’s threats.

    Download

  • What can CIOs do about the skills shortage in ASEAN?

    In this e-guide, read more about the issues that IT leaders are grappling with, and what efforts are being made to plug the talent gap. Plus, learn how one company has successfully transformed its HR operations using cloud-based software.

    Download

  • Umbrella for government white paper

    Government agencies have many factors to consider when acquiring and building security solutions. In this white paper, discover how Cisco Umbrella can provide a secure foundation for agencies who are navigating a rapidly changing reality when it comes to where their workers are located and where their mission-critical applications are hosted.

    Download

  • Computer Weekly – 15 November 2022: How to protect against ransomware attacks

    In this week's Computer Weekly, we look at how to prepare for and protect against ransomware, and what to do if you're hit by an attack. We gauge industry reaction to Ofcom's plan to investigate the big three cloud providers. And we find out how travel giant TUI is implementing self-service analytics. Read the issue now.

    Download

  • Royal Holloway: An enhanced approach for USB security management

    USB flash drives and other USB-connected data storage devices offer a simple way of making data more portable and more easily transferrable. However, their use presents security risks that must be addressed. Apart from increasing the risk of data theft, they have often been used to transfer malware, sometimes with disastrous results.

    Download

  • Computer Weekly – 16 January 2018: How to fix the Meltdown and Spectre chip flaws

    In this week's Computer Weekly, as CIOs come to terms with the Meltdown and Spectre processor flaws that make every computer a security risk, we examine how to protect your IT estate. We find out how Alexa-style smart speakers can help with CRM strategies. And we look at how the public sector is implementing DevOps. Read the issue now.

    Download

  • Understand the basics of zero trust network access

    The rise of sophisticated cyberattacks has resulted in many businesses adopting Zero Trust Network Access (ZTNA) solutions, some which are ZTNA 1.0 and some ZTNA 2.0. Explore this e-book to learn how ZTNA 2.0 solutions have emerged to usher in secure access for today’s new norm: remote work.

    Download

  • A Computer Weekly buyer's guide to Threat Management

    Threat management has become a vital component in the cyber security strategy of many businesses. In this19-page buyer's guide, Computer Weekly looks at why threat management should be tailored to your company's needs, the strength in combining it with other security systems and how cloud-based security can reduce costs.

    Download

  • Getting Cloud Security Right

    In this e-guide, we will consider how to do cloud security right. Regular Computer Weekly contributor Peter Ray Allison explores this issue, weighing up the questions organisations should be asking of their cloud service providers, and whose responsibility cloud security should be.

    Download

  • 13 steps for enabling secure remote work

    Remote working has become increasingly popular as it provides a way of enabling greater work flexibility and productivity, saving costs, retaining employees, and encouraging a healthy work-life balance. However, enabling it can be risky if not done with security in mind. In this infographic, we outline 13 steps to enable secure remote working.

    Download

  • 12 essential features of advanced endpoint security tools

    Endpoint protection of enterprise systems is an efficient method of managing software deployment and enforcing security policies. IT administrators can use endpoint security for a number of operation monitoring functions and data backup strategies. Here are 12 key features endpoint security products should include.

    Download