Security posture management assesses an organization's defenses, identifies gaps, and helps prioritize fixes that reduce exposure to cyberattacks.
Search across headline titles and summaries.
Background for this topic.
Security posture management is the ongoing assessment and improvement of an organization’s security configuration, controls, and exposure across cloud services, endpoints, identities, applications, and data. It typically inventories assets, checks settings against policy, identifies vulnerabilities or excessive access, and tracks whether remediation is completed. Related terms such as cloud, SaaS, and attack-surface posture management describe narrower scopes of the same discipline.
Its security value depends on accurate asset discovery and useful prioritization: an exposed storage resource, weak identity control, or unpatched internet-facing system may warrant faster action than a lower-risk policy deviation. Effective programs detect configuration drift, correlate findings with exposure and threat intelligence, assign accountable owners, and verify fixes rather than merely reporting them. Practitioners should also assess what telemetry is collected and retained, since posture platforms can access sensitive configuration, identity, and inventory data; least-privilege access and appropriate privacy controls are therefore material.
Weekly headline count for the current query.
Various touch-ups added as MPs seek greater resilience to attacks on critical sectors UK government introduced the Cyber Security and Resilience (CSR) Bill to Parliament today, marking a significant overhaul of local cybersecurity legislation to sharpen the security posture of the most critical sectors.…
Check out the SANS CISO Primer for tips on hardening your organisation’s security posture in 2024 Sponsored Post Ever get nostalgic for the good old days of cybersecurity protection? When attacks were for the most part amateurish and infrequent, and perhaps more in the nature of an occasional nuisance rather than a daily existential threat?…
To maintain a strong data security posture, you must protect the data where it lives Partner Content There are plenty of technology acronyms in the alphabet soup of the cybersecurity industry, but DSPM is the latest one leading the charge; its recent buzz has brought scrutiny to various security concepts that have cluttered the meaning behind data security posture management.…
How to enhance employee career development and retain skilled staff with SANS cyber training Sponsored Post Every organisation needs to make cyber security training a high priority. Effective education is an essential part of improving security practices and fostering a sound security posture.…
Ethical hackers, but for privacy programs Black Hat Miscreants aren't only working to exploit flaws in an enterprise's security posture, they're also looking for holes in organizations' privacy programs to steal user data, according to Meta's Scott Tenaglia.…
Promises new alert notices but warn 'we can sometimes predict thunderstorms but not lightning strikes' RSA Conference A heightened state of defensive cyber security posture is the new normal, according to federal cyber security chiefs speaking at the RSA Conference on Tuesday. This requires greater transparency and threat intel sharing between the government and private sector, they added.…
'Hunt forward' operations push US capabilities across borders US Cyber Command chief General Paul Nakasone said has revealed the agency he leads conducted nine "hunt forward" operations last year, sending teams to different counties to help them improve their defensive security posture and hunt for cyberthreats. …