Micro Focus is now part of OpenText. Learn more >

Open-source is a standard feature of software development, and it's not going away. Here's how to stay on top of the software supply chain security...
Stan Wisseman
Oct 3, 2019
Master your code's open source or it will bite you in the app sec
Stay on the secure path
With attackers having shifted their focus from servers and operating systems directly to applications, coding libraries are in the hot seat over...
Stan Wisseman
Apr 7, 2016
Third-party libraries are one of the most insecure parts of an application
Libraries in the hot seat
Nobody said that software security would be easy, but treating software vulnerabilities the way development treats quality defects is a good start.
Stan Wisseman
May 9, 2016
Application security and QA: Why they are better together
A defect is a defect
Security solutions based on AI, ML, zero trust, analytics, and encryption can mitigate the potential cost of a breach, the data shows. Here's how.
Stan Wisseman
Aug 30, 2021
Shift to cyber resilience: 7 steps to a better security approach
Get off the cybersecurity hamster wheel
Can the federal government jump-start the market for secure software? It's going to try.
Stan Wisseman
Aug 5, 2021
The cybersecurity EO and 'critical software': What you need to know
Under the microscope
The modern CISO should focus on enabling cyber resiliency in a way that supports business growth and transformation. Here are five key suggestions.
Stan Wisseman
Feb 25, 2021
5 ways to build in cyber resilience with intelligent threat operations
Suit up your security approach
Here's why incentivizing is the best approach to getting results with data privacy efforts.
Stan Wisseman
Jul 2, 2021
Why safe harbor is the best way forward for data protection
Carrot or the stick?
With SecOps, it’s best to narrow your focus so you can quickly detect threat actors. Here's how to put the Attack framework to work on your team.
Stan Wisseman
May 10, 2021
Why MITRE ATT&CK is a cyber resilience rock star
Amplify your security operations
Are shortcuts in thorough application security testing worth the potential cost impact of headline-making breaches?
Stan Wisseman
Jun 7, 2021
In-depth app sec analysis comes at a cost—but so does a breach
Don't take shortcuts
When assessing defenses, include your people as soft spots—but also pay attention to these emerging potential weak links in your cybersecurity.
Stan Wisseman
Oct 27, 2020
Is your enterprise susceptible? 4 key focus areas for cyber resilience
Find your weakest links
Here's how to get your identity and access management controls in order to stay ahead of hardening cyber insurance standards.
Stan Wisseman
Oct 4, 2021
Cyber insurance: Tighten your security controls or face exposure
Get your IAM ducks in a row
Machine learning–assisted auditing significantly reduces application security test times. Here's how.
Stan Wisseman
Feb 21, 2018
How machine learning boosts application security testing
Auto-triage helps you focus
Customer trust issues can derail the best laid cybersecurity plans. Follow these steps to validate your trust assumptions, and to effectively...
Stan Wisseman
Jul 29, 2016
Broken promises: How trust affects cybersecurity
Cracked assumptions
Here are nine strategies that have surfaced recently in interviews with cybersecurity pros that you can put to work to achieve cyber resilience.
Stan Wisseman
Nov 15, 2021
9 strategic cybersecurity outcomes CISOs should focus on
Imagine cyber resilience
Most mature security operation teams are using advanced analytics as an aid to anomaly detection, says the 2016 State of Security Operations report.
Stan Wisseman
Mar 3, 2016
Finding the supernovas: How machine learning can lift security operations' game
Machine learning gets down to Earth
Once a "nice to have" capability, cyber resilience is now a must. Here are five tips for improving your organization's cyber resilience.
Stan Wisseman
Nov 17, 2020
How to boost your enterprise's immunity with cyber resilience
New normal forces cybersecurity rethink
User and entity behavioral analytics tools let you detect unusual credential usage that could represent misuse, and respond accordingly.
Stan Wisseman
Jun 26, 2019
How behavioral analytics helps close the credentials security gap
Machine learning steps up
Raising the collective security IQ of the workforce can be one of the most cost-effective, proactive security controls you can implement.
Stan Wisseman
Aug 17, 2016
Creating a human firewall: 5 ways to bolster the weakest link in information security
What's your security IQ?
The new GDPR data-privacy issues mean businesses need to take a holistic view of application security. Here are the key considerations.
Stan Wisseman
Sep 6, 2018
GDPR and application security: Why a holistic view is key
Own the data
Our pursuit of security is a lot like our efforts to remain healthy. Good security engineering practices are key to building trustworthy and...
Stan Wisseman
Jun 8, 2016
Swallow the security engineering pill: Why resilience is the best Rx
Take your medicine
Show More