CSO Update

Nov 25, 2018

Does it matter who the CISO reports to?

Reporting relationships are more than lines on an org chart, they're lines of authority. Ultimately, who the CISO reports to may say more about an organization's maturity than it does about an individual's effectiveness. Read More ▶

Your Must-Read Stories

•	10 things you should know about dark web websites

•	Google makes good on promise to remove some Symantec PKI certificates

•	Inside the murky world of corporate espionage

•	California Consumer Privacy Act (CCPA): What you need to know to be compliant

•	5 tips for getting started with DevSecOps

•	What is WebAuthN? Possibly the answer to all web authentication

10 things you should know about dark web websites

Catch a glimpse of what flourishes in the shadows of the internet. Read More ▶

Google makes good on promise to remove some Symantec PKI certificates

If you get this digital certificate error using Chrome, then Google now considers that website's Symantec PKI certificate untrustworthy. Read More ▶

Inside the murky world of corporate espionage

Companies gather intelligence on their rivals just like nation-states do. Sometimes its legal, but industrial espionage can easily slip over the line into criminality. Read More ▶

California Consumer Privacy Act (CCPA): What you need to know to be compliant

California's new privacy law, AB 375, might not burden security as much as the GDPR, but details are subject to change. Read More ▶

5 tips for getting started with DevSecOps

Don't be fooled, integrating security into the DevOps process is a big project. But the payoff is worth the effort. Here's what you need to know to get started building DevSecOps from the ground up. Read More ▶

What is WebAuthN? Possibly the answer to all web authentication

With strong support from Google, Microsoft and other vendors, WebAuthN is poised to become a true standard for passwordless authentication over the web. Read More ▶

Editor's Picks

1.	10 essential enterprise security tools (and 11 nice-to-haves)
2.	7 best practices for negotiating ransomware payments
3.	Are long passphrases the answer to password problems?
4.	Bruce Schneier's Click Here to Kill Everybody reveals the looming cybersecurity crisis
5.	Cybercriminals are using blockchain to improve security. Should you?
6.	5 hard truths every CISO should know
7.	What it takes to be a security consultant

Get Security Smart

From the editors of CSO, Security Smart is a quarterly security awareness newsletter ready for distribution in your organization. Subscribe now and arm your employees with the information they need to be more secure at home and at work. Learn more.