Industry Regulations

Forrester’s zero trust concept has grown in acceptance as we come out of the pandemic. Today’s columnist, Ben Smith of RSA, says companies will need to consider zero trust as employees return to the office.

Biden signed a long-awaited executive order on cybersecurity, covering everything from federal procurement standards for private sector contractors to IoT security labels.

What does the U.S. do about criminals protected by their own governments? That question becomes more complicated with attacks against critical infrastructure, which is privately owned and operated, but also intrinsically tied to national security. Those distinctions make these companies high-value targets, which many argue are in government's best interest to protect.

Given the drastically different cybersecurity preparedness, capacity and overall posture of small and medium businesses, advocates are lobbying the Biden administration for small business-specific cybersecurity federal policies.

For the first time in its 60-year history, the OECD offered policy guidelines for risk reduction through vulnerability management. Today’s columnists, Rayna Stamboliyska and Tarah Wheeler offer some insights on how the industry will respond.

The announcement ends months of speculation over the key positions, during which time the government has had to face fallout from both the Solarwinds and Hafnium Exchange Server campaigns without leadership in place.

U.K.-clothing retailer FatFace has egg on its face after a botched disclosure letter customers and security professionals consider too late, too secretive and too hard to confirm.