Blog

Check out our blog

Stay ahead of digital threats with our latest trends, tips, and insights in cybersecurity.

Blog

Aug 20, 2026

From Vulnerability Management to Vulnerability Operations

The State of Cybersecurity in the Healthcare Sector

As we approach the end of the year, data breaches and ransomware in the healthcare sector continue to be a major concern for the US and other nations across the globe. The sector is particularly attractive to cybercriminals because it cannot afford downtime or lack of service availability, and IT resources are often limited. There are huge numbers of connected devices in each institution, and cybersecurity, until now, has not being as tightly regulated as in other critical infrastructure sectors.

Blog

Dec 16, 2024

Exploring Access Control, MFA and the Principle of Least Privilege

In this blog post, we explore Access Control – a critical component of cyber risk management and something that’s pivotal to implementing a zero-trust security model. Strong access control mechanisms form a part of all security frameworks and data privacy regulations today, and should be on any security team’s or CISO’s priority list.

Blog

Dec 11, 2024

CIS Benchmarks: Securing Your Operating System Configuration

A poorly configured operating system can leave your organization vulnerable to a wide range of intrusions and cyber attacks, including malware infections, unauthorized access, and data breaches. By regularly assessing systems for weak configurations and adhering to best practices, you can significantly reduce the risk of these threats.

Blog

Nov 12, 2024

Five Essential Cybersecurity Controls for SMBs

If you’re responsible for cybersecurity at a small or midsized organization, and are unsure about what to include in your must-have list, this article is for you.

Blog

Nov 4, 2024

How do you choose a GRC tool? Ask these 9 questions

The digital landscape today is more complex than ever before, and data privacy requirements have become more stringent as organizations generate, access, handle, and store increasing amounts of data (especially in the cloud). Regardless of the sector you operate in, compliance with data privacy and cybersecurity regulations is almost certainly mandatory. The penalties and consequences of non-compliance have also become more severe as the scale and impact of data breaches have increased. An easy-to-use, integrated governance, risk, and compliance (GRC) tool is essential to both reduce the risk of data breaches, and meet compliance needs.

Blog

Sep 27, 2024

The CIS Guide to Defining Reasonable Cybersecurity

The Center for Internet Security (CIS) released a “Guide to Defining Reasonable Cybersecurity” at the RSA Conference this year, setting out to specify what an organization must do to meet the standard of reasonableness in cybersecurity. In the US, “laws and regulations are nearly unanimous in requiring that cybersecurity controls must be reasonable.” However, there was no unanimously agreed-upon definition of reasonable cybersecurity to determine if an organization was doing everything deemed rational, reasonable and necessary to prevent cyber incidents and minimize the internal and external impact of a breach.

The platform that scales with you

Get a Demo