CSO Salted Hash

Mar 19, 2018

Facebook suspends firm that took 50M users' data, says it wasn't a breach

Facebook suspended Trump-linked data firm Cambridge Analytica, which pilfered 50 million Facebook users' data, claiming the collected personal data was not the result of a breach. Read More ▶

Your Must-Read Stories

•	8 questions to ask about your industrial control systems security

•	Get a 299-Piece All-Purpose First Aid Kit For $12 Today

•	New CISO appointments, March 2018

•	9 policies and procedures you need to know about if you're starting a new security program

•	I'm using the public cloud, should I care about GDPR?

•	P2PE is not what your CIO thinks it is

White Paper: Bitsight

How Automating Third-Party Risk Management Helps Banks and Financial Institutions Address New Regulatory Requirements

Banks & financial firms have long been aware of the need to manage risk in third-party partners & most have a formal program for managing that risk. Yet an existing thirdparty risk management (3PRM) program may not address today's increased levels of outsourcing & new regulatory requirements for cybersecurity. Together, these factors are prompting financial institutions to take a fresh look at the strengths & focus of their 3PRM strategy. Read More ▶

8 questions to ask about your industrial control systems security

Do you have a real cybersecurity-focused ICS strategy in place, or are you force-fitting IT security policies on your industrial control systems? Read More ▶

DealPost

Get a 299-Piece All-Purpose First Aid Kit For $12 Today

The highly rated kit includes a first aid guide, vinyl gloves, bandages, cold compress, gauze pads, trauma pad, cotton-tipped applicators, first aid tape roll, antiseptics and all three common OTC pain medications. Neatly organized in a soft zippered pouch. Read More ▶

New CISO appointments, March 2018

Find up-to-date news of CSO, CISO and other senior security executive appointments. Read More ▶

9 policies and procedures you need to know about if you're starting a new security program

Any mature security program requires each of these infosec policies, documents and procedures. Read More ▶

I'm using the public cloud, should I care about GDPR?

GDPR says you should care, but how you should go about it remains murky at best. Read More ▶

P2PE is not what your CIO thinks it is

All of the things you wanted to know about point-to-point encryption (P2PE), but were too afraid to ask. Read More ▶

White Paper: Iron Mountain

Important Considerations Concerning SITAD In Rush to Cloud

Organizations wanting to follow best practices for regulatory compliance, governance & IT security may benefit from third-party expertise to help them complete the lifecycle of data & systems. For the before-and-after details surrounding cloud migration projects and ITAD, look for expert providers who can speak to all aspects of the data lifecycle - from ongoing data management to cloud data migration, cloud backup & final IT asset disposition. Read More ▶

CSO Insider

1.	Security vs. visibility: Why TLS 1.3 has data center admins worried
2.	8 hot cyber security trends (and 4 going cold)
3.	5 top machine learning use cases for security
4.	Top security certifications: Who they're for, what they cost, and which you need
5.	How to write an information security policy

Editor's Picks

1.	10 security buzzwords that need to be put to rest
2.	The buck stops here: 8 security breaches that got someone fired
3.	12 famous (and infamous) IT security disasters
4.	15 real-world phishing examples — and how to recognize them
5.	The 10 sneakiest hacker attacks