On April 3, NIST published practical incident response guidance aligned with its CSF 2.0 framework. The guidance outlines best practices in security incident preparation and response for organizations ...

NIST's landmark revision elevates DNS from overlooked network infrastructure to a strategic cybersecurity control, redefining ...

As I mentioned in previous columns, there’s a new set of draft documents from the Computer Security Resource Center of the National Institute of Standards and Technology (NIST). In addition, SP 800-86 ...

An incident response plan (IRP) is an organisation’s individualised structured set of procedures and guidelines that they follow when encountering a security incident or a disruptive event. These may ...

Council has published a proposed rule (FAR Case 2026-001) which, if adopted, would require all federal contractors to implement the cybersecurity requirements contained in the National Institute of ...

Public- and private-sector organizations have experienced numerous major incidents related to cybersecurity over the past few years. Indeed, many experts claim it is just a matter of time before ...

Cybersecurity in higher education presents a unique and evolving challenge. As someone who has spent years in incident response, digital forensics and security engineering, I’ve seen firsthand the ...

Cybersecurity incident response is not only about handling an incident – it’s also about preparing for any possible incident and learning from it. Here are six steps for a successful and efficient ...