Phishing Simulation Best Practices: How to test employees without creating a blame culture
A successful phishing simulation should not demonstrate how easy it is to trick employees. It should make the organisation harder to trick next time. As explored in our earlier Cyber Security Awareness Training: What IT Teams Should Compare buyer’s guide, effective security awareness is increasingly focused on changing behaviour rather than simply demonstrating that employees have completed […]
Managed Cloud Hosting vs In-House Infrastructure: Cost, control and operating model
Running infrastructure in-house gives IT teams control. It also gives them responsibility for almost everything that keeps that infrastructure running. Hardware, operating systems, monitoring, patching, backup, security, capacity, resilience and incident response all require expertise and time. That makes the decision between in-house infrastructure and managed cloud hosting more complicated than comparing a server purchase with a […]
SIEM Deployment: Alert tuning, log management and detection quality
Security teams today rarely suffer from a lack of data. Firewalls, endpoints, cloud platforms, identity systems and applications can generate enormous volumes of security information every day. The challenge is turning that information into something useful. A SIEM (Security Information and Event Management) platform brings logs and events together from multiple sources, normalises the data and applies […]