Optiv Blog

In the first part of the blog series, we alluded to the impending danger of ransomware campaigns. It appears the concerns were justified, given the....

The title of this post sounds daunting, does it not? However, achieving PCI compliance every day is not as daunting as you might think. With the....

Dark web, darknet, deep web – all sexy new terms that are often overused and not well understood. Definitions are all over the place ranging from....

Manage the security lifecycle of all in-house developed and acquired software in order to prevent, detect and correct security weaknesses.

Incident response has become one of the most critical aspects of any overall security strategy, but a solid incident response program (IRP) is....

t’s no secret that finding and retaining dependable, well-trained application security professionals is a serious challenge, and has been for years....

As the secure SDLC program matures, vulnerabilities should be caught and remediated earlier in the lifecycle. To know if the program is truly working....

The capability to respond effectively to cyber incidents is one of the most critical components of an enterprise security program. However, many....

In the world of third-party and vendor risk management, many new practices are being adopted. Over the past few weeks, members of Optiv’s third-party....

The term “knowledge management” (KM) refers to using vulnerability mining to turn remediation into lessons learned. Essentially this involves taking....

At a recent conference, I heard a speaker say, “Medical diagnoses will be done completely without a human doctor in the future – computers will be....

We’ve all heard that it’s not a matter of “if,” but “when.” This statement, while becoming its own stale mantra of sorts, is still the impetus for the....