Deploy and Maintain Anti-Malware Software Anti-malware is the one security control almost every business already believes it has. So the question worth asking isn’t whether you have it. It’s whether what you have can catch what actually shows up today, and whether it’s running on everything, not just the obvious computers. A lot of organizations are protected on paper and quietly exposed in practice. Control 10.1 is deliberately foundational. It doesn’t ask for...

Trending at Forthright.
CIS IG1 Control 8.1: The Question Every Investigation Starts With
Establish and Maintain an Audit Log Management Process Every security investigation starts with the same question: what actually happened? In a lot...
Top Technology Concerns CEOs Are Facing (And Why the Real Risk Isn’t the Technology)
The Top Technology Concerns CEOs Are Facing Today (And Why the Real Risk Isn't the Technology) If you'd asked most CEOs a few years ago what kept...
CIS IG1 Control 7.4: Perform Automated Application Patch Management
Updates You’re Probably Not Catching Your operating system is probably the best-patched software on your computers. Modern Windows and macOS...
CIS IG1 Control 7.3: Perform Automated Operating System Patch Management
Why Patching Should Be a System, Not a Habit Almost no one argues against patching. Every leader I talk to already knows that unpatched systems are...
CIS Safeguard 7.2: Finding the Problem Is Only the Beginning
In Safeguard 7.1, we discussed the difference between running a vulnerability scanner and operating a vulnerability management program. A scan may...
CIS Safeguard 7.1: Why a Vulnerability Scanner Is Not a Vulnerability Management Program
A Vulnerability Scanner Is Not a Vulnerability Management Program As we move into CIS Control 7, Continuous Vulnerability Management, we're going to...
CIS IG1 Safeguard 6.5: Require MFA for Administrative Access
CIS IG1 Safeguard 6.5: Require MFA for Administrative Access by Heath Gieson This final article in the MFA mini‑series focuses on the...
Why 84% of Companies Fail at Digital Transformation. And Why That Number Hasn’t Moved.
Why 84% of Companies Fail at Digital Transformation. And Why That Number Hasn't Moved. By: Frank Merino Nearly a decade ago, Forbes published a...
CIS IG1 Safeguard 6.4: Require MFA for Remote Network Access
CIS IG1 Safeguard 6.4: Require MFA for Remote Network Access by Heath Gieson This article continues our CIS IG1 identity series by extending...








