... The U.S. Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) will have far-reaching impacts on over 316,000 organizations. We provide security and risk management leaders with an overview of proposed rules released in April 2024 to help prepare for eventual mandates. More Detail ...
Analyst(s): Katell Thielemann
Get more from Gartner
Interested in receiving proven business and technology insights, analyst guidance, benchmarks, diagnostics and more? Connect with a Gartner representative to learn more about becoming a Gartner client.
... The NIS2 Directive legislates the need for enhanced cyber hygiene within organizations. This document equips security and risk management leaders with a structured approach to risk identification and prioritization, enabling them to better protect critical business operations and infrastructure. Strategic ...
Analyst(s): Brent Predovich | Lisa Neubauer | Arthur Sivanathan | Josh Murphy
... The “right to repair” impacts cyber-physical systems due to operational technology’s proliferation into consumer use and the pressure to disclose technical support information. There are also increased safety risks. CPS product leaders must adjust their roadmaps to accommodate the “right to repair.” ...
... Chief audit executives are responsible for providing assurance over cybersecurity risks, yet they often do not participate in cyber resilience controls testing like red teaming. This research provides CAEs guidance on how audit can work with red-team owners to improve cybersecurity assurance. More Detail ...
... remain challenged in keeping up with rapidly evolving threats. Security and risk management leaders can use these five initiatives to fortify their cyber defense efforts while fostering greater returns on security investments. Gartner Research ...
... business risk appetite. To help security and risk management leaders ensure investments reflect risk appetite, this case study explores how the CIO/cyber lead at the Institute of Cancer Research adopted ODMs and PLAs. Case Overview Contributors Gartner Recommended Reading Gartner Research ...
Analyst(s): Richard Addiscott | Paul Furtado | Elizabeth Davis | Christopher Mixter
... such as automated moving target defense, advanced obfuscation, deception and predictive threat intelligence, to gain a measurable advantage over attackers.” Begin Piloting Postquantum Cryptographic Migration Gartner predicts that organizations that do not begin piloting postquantum cryptographic (PQC ...
... matter of time before a cyberattack hits an organization. To prepare their enterprises, healthcare and life science CIOs must refine their approach to cyber risk and identify and adapt to the trends across this pernicious threat landscape. Overview Introduction Analysis Gartner Recommended Reading Gartner ...
Analyst(s): Cybersecurity Research Team | Healthcare and Life Sciences Research Team
... AI-Enhanced Malicious Attacks Are a New Top Emerging Risk for Enterprises STAMFORD, Conn., May 22, 2024 Survey of 345 Senior Enterprise Risk Executives Reveals Top 5 Emerging Risks in the First Quarter of 2024 Concern about artificial intelligence (AI)-enhanced malicious attacks ascended to the top of ...