Social Media Ideas for Security Management

A Security Collection for the Security Chapter

Information Security in Project Management: Managing Security Risks

Information security in project management requires security considerations to be integrated into project initiation, planning, design, execution, testing, implementation, and clos...

Physical security spent a decade connecting systems. It never learned to govern them

International Security Journal hears exclusively from Soloinsight about physical security and how to govern it effectively. Ask a security director whether their access control sys...

When Prevention Isn’t Enough: Managing Serious Security Incidents

— Good security is designed to stop problems before they become emergencies. Visible patrols, controlled entry points, trained personnel, surveillance systems, and clear procedures...

SaaS Security Posture Management (SSPM): How It Protects SaaS Environments

SaaS Security Posture Management (SSPM): How It Protects SaaS Environments SaaS Security Posture Management (SSPM) is the practice of continuously identifying, assessing, prioritiz...

Managing Risk with Integrated Security Solutions

Business risk often develops where separate systems, teams and procedures fail to share information. A door alarm may seem minor until it’s linked to an unusual login, a missing vi...

Securing AI Agents in Production: Balancing Access Control and Risk Management for Unexpected Actions

Introduction: The Critical Imperative of AI Agent Security in Production Systems As AI agents increasingly integrate with production systems, the security of their access has bec...

I Wrote a Security Policy, Then Made Myself Break It

A guardrail you haven't tried to violate is just documentation with better formatting. That's the premise behind aws-boundary: an AWS multi-account setup using AWS Organizations,...

Iru Ekun Security Network and the need for caution

Plato's old political question remains mercilessly relevant: who will guard the guardians? A society that cannot answer that question has not created security; it has merely redist...

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login credentials to run code as root on those servers over the networ...

Building trust and alignment in physical security leadership

ISJ hears exclusively from Javan Simpson, Senior Manager, Physical Security at ScotiaBank who discusses taking a people-first approach to security, building trust across teams. As...

Data Services Manager version 9.1.1 Network Security

<p style="text-align: justify;"><a href="https://i0.wp.com/cormachogan.com/wp-content/uploads/2023/01/dsm-logo-icon.png?ssl=1" target="_blank&quot...

How Enterprises Govern Secure Remote Access

Managing remote access security has become a governance problem that most organizations face nowadays, with the workforce being more distributed. Even with VPNs and authentication...

Implementing defense-in-depth authorization for MCP tools on Amazon Quick

Learn how to enforce defense-in-depth authorization for Model Context Protocol (MCP) tools on Amazon Quick. This walkthrough wires Microsoft Entra ID group and claims-based JWTs th...

Securing Amazon Quick from POC to production: Agents, Flows, and Spaces

Amazon Quick proof-of-concept projects often stall when security teams review the production plan. This post walks through designing dashboards, Spaces, knowledge bases, agents, an...

FBI's CJIS v6.1: What Security Teams Need to Know.

The FBI's CJIS Security Policy v6.1 strengthens requirements around encryption and vulnerability scanning while continuing the shift toward more continuous security assessment. Spe...

MOD Guard Service

The MGS (MOD Guard Service) plays a vital role in supporting MOD security.

Custom IT Services and Cybersecurity: Secure-by-Design Systems

Most companies start with generic IT. A managed service provider handles laptops, email and antivirus. A stack of SaaS subscriptions covers core functions. Someone internal becomes...

Managing Agentic Security at Scale

On the code we scan at depth, the volume of findings is now the constraint: frontier models plus an agentic harness surface more real, exploitable findings than engineering can abs...

Smart city data management: Security, privacy and best practices 

Think of a city like a giant playground full of walkie-talkies. Every streetlight, every camera, every traffic signal is basically whispering little bits of information back to a c...

How to keep AI agents within their permissions

AI agents can use valid credentials to perform actions beyond their assigned permissions, creating risks that traditional access controls may not prevent. Token Security explains h...

The hardest AI security problems now live in what an agent is permitted to do

OWASP’s 2026 Top 10 for LLM applications moved excessive agency from sixth to third and dropped improper output handling from fifth to tenth, in the first edition weighted partly o...

The methodology gap in physical security assessment

International Security Journal hears exclusively from Stephen Beels, Creator of IPSRM and physical security professional. Early in my career as a security consultant, I came to rea...

CJIS v6.1 Compliance: 5 Practical Priorities for Agencies

CJIS v6.1 requires agencies to maintain strong authentication, account security, and audit controls while demonstrating ongoing compliance. Specops outlines five practical prioriti...