Peer-Driven Insights

Threat & Vulnerability Management

Active Ambassadors in This Topic

Clifton Persaud

ISACA

Education, 10k+

Joseph Doyle

Okta

Software, 5k - 10k

Clifton Persaud

ISACA-GWDC

Education, 5k - 10k

View All Community Ambassadors

Community Posts

What will be the biggest cybersecurity threat of 2022?

Attacks targeting authenticator apps58%

IoT Denial-of-use attacks33%

Cyber extortion of high profile individuals59%

C-level impersonations18%

Something else (comment below)1%

View Results

Has your company made you feel comfortable about the prospect of returning to the office?

Yes - My company has been clear with the back to office plan82%

No - Messaging around return to the office has been confusing and disjointed17%

Which is the best VPN for business?

Perimeter 816%

ExpressVPN41%

NordVPN Teams21%

Twingate9%

Windscribe5%

CyberGhost4%

IPVanish

Other (comment below!)11%

View Results

Does your organisation have a formalised threat hunting programme? If so - what were the key drivers for you in setting one up and what made it successful?

If not - what is stopping you from setting this up?

What sorts of failsafe processes/controls, etc, do you rely on to make sure terminated or suspended employees’ access credentials are revoked immediately? Does your org generally rely on direct communications from HR or do you have an HRM or similar system to automate this?

Read More Comments

What tools/services do you use for CTEM (continuous threat exposure management)?

Read More Comments

Employee Count and Licensing Usage:

- What is your employee count?

- Do you use Microsoft E3, E5, or a variation (e.g., E3 + Security E5)?

- Do you rely only on Microsoft EOP and/or Defender for O365 for email protection? If not, what other product(s) do you use (e.g., Proofpoint, Abnormal)?

Read More Comments

How do you navigate urgent vulnerability patching needs for tools linked to business-critical applications (like SAP NetWeaver)? Are updates like this only done overnight/after business hours?

Thoughts on the recent alleged breach of Oracle Cloud’s login servers? What are your initial reactions to Oracle’s denial of the breach now that some customers have validated the leaked data?

Read More Comments

What processes do you rely on to address risks from rogue cloud tenants that the security team doesn’t have visibility of?

Read More Comments

We recently moved from Tenable to Rapid7 Insight VM for vulnerability management. We've struggled with carrying over our existing metrics as reporting on fixed vulnerabilities is difficult. How are other InsightVM customers handling KRI/KPI reporting?

What sorts of advanced threat detection tools would you recommend for monitoring multi-cloud environments?

Read More Comments

What tips or best practices can you share for monitoring your cloud provider’s security performance on an ongoing basis?

Read More Comments

What controls are you using to address device code phishing currently?

How are you improving credential theft prevention in your org? Are you implementing/exploring any new tools or services to protect credentials?

What are some manageable solutions to help small- and medium-sized businesses (SMBs) address cybersecurity risks like ransomware?

Read More Comments