As we head into 2025, the cybersecurity landscape continues to shift and evolve in response to increasingly sophisticated threats, from the relentless surge of ransomware attacks to emerging risks fueled by AI-powered cybercrime. Organizations are not only contending with more frequent and complex breaches but...
All too often, organizations today overestimate their security posture, assuming they are better protected against potential attacks than they truly are. One 2023 report of IT risk found that 88% of IT decision-makers were confident in their organization’s readiness for cyber-disruption. Nearly two-thirds said they...
According to a 2024 GAO report, federal agencies reported over 30,000 IT security incidents in FY 2022. “Risks to our nation’s essential technology systems are increasing,” the report’s authors wrote. “Such attacks could result in serious harm to human safety, national security, the environment, and...
Maintaining a cutting-edge cybersecurity team is crucial in a world of proliferating cyber threats. “The threat landscape is tougher than it’s ever been,” Tara Wisniewski, EVP, Advocacy, Global Markets and Member Engagement at ISC2, which offers training and certifications for cybersecurity professionals, told Infosecurity Magazine...
Phishing, a form of cyberattack that uses disguised email as a weapon, is not a new threat. However, its evolution continues to outpace the defenses of many organizations. Phishing attacks are designed to trick individuals into giving out personal information such as passwords, credit card...
In our first article in this series about open and transparent government initiatives, we asked why U.S. government agencies seem to be growing less open (meeting fewer records requests than previously). In our second article, we looked at solutions: how to retrieve and produce records...
The role of the Chief Information Security Officer (CISO) is undergoing a significant transformation. As cyber threats become more sophisticated and pervasive, the responsibilities of CISOs have expanded beyond traditional IT security to include a broader strategic role in the boardroom. "In a world rife...
As federal agencies increasingly turn to cloud-based solutions to meet their growing technological and operational needs, selecting the right cloud service provider (CSP) for any given application is critical. To help with this complex, high-stakes process, the Federal Risk and Authorization Management Program (FedRAMP) certification program...
The impact of artificial intelligence (AI) on cybersecurity is complicated, creating both new threats and new opportunities. On one hand, AI is increasingly utilized by malicious actors to enhance the sophistication and scale of cyberattacks. On the other hand, government agencies and private organizations are...
Artificial Intelligence (AI) is increasingly being integrated into many sectors of government, and records management is no exception. For instance, the National Archives and Records Administration (NARA) has tested AI to help with the classification and retrieval of digital records, aiming to improve efficiency by...
Cyberattacks on critical U.S. infrastructure pose a significant and growing threat. Critical infrastructure encompasses a wide array of essential services, such as power plants, hospitals, transportation systems, and water treatment facilities. A cyberattack on any of these sectors could result in widespread disruption, financial damage,...
As artificial intelligence (AI) continues to transform industries, organizations are increasingly incorporating AI systems to optimize processes, enhance decision-making, and improve customer experiences. However, as with any technology, these systems, while powerful, can become targets for cyberattacks, putting sensitive information at risk. For corporate professionals...
Use of outsourcing to fulfill at least some cybersecurity functions is nearly universal: according to a survey from advisory services firm Kroll, 77% of organizations outsource some security functions, and 28% outsource their entire cybersecurity operations. A separate study found that 93% of organizations plan...
In the world of cybersecurity, technology matters less than people. End-users are both the most vital element—and the weakest link—in the chain of cyber defenses. As ISACA, a professional membership organization for IS/IT pros, writes, “Security is not only for security teams, because attackers will...
In 2024, the world of cybersecurity continues to be dominated by the persistent and evolving threat of ransomware. Once primarily a concern for small businesses and individuals, ransomware has become a sophisticated tool wielded by cybercriminals and is leading to increasingly worse outcomes for organizations....
The new reports are in! Records management officials at all federal agencies have submitted their annual Senior Agency Official for Records Management (SAORM) reports to the U.S. National Archives and Records Administration (NARA). It’s clear from the reports that many agencies were still struggling to...
With the COVID-19 pandemic every major business found that the only way to keep production up was to let employees work from home, including government agencies. While this workforce keeps production and revenue flowing, it adds considerable cybersecurity risks to the organization and its...