A new security standard released Tuesday makes it easier for companies to judge the safety of the specific cloud-based tools they use every day. The framework, from the Cloud Security Alliance, ...

Does your organization need NIST, CSC, ISO, or FAIR frameworks? Here's how to start making sense of security frameworks. Cybersecurity professionals often face the curse of knowledge–understanding so ...

The Committee of Sponsoring Organizations of the Treadway Commission, also known as COSO, has added a supplement to its widely used Enterprise Risk Management Framework, including detailed examples of ...

The US National Institute of Standards and Technology's framework defines federal policy, but it can be used by private enterprises, too. Here's what you need to know. The National Institute of ...