Reporting relationships are more than lines on an org chart, they're lines of authority. Ultimately, who the CISO reports to may say more about an organization's maturity than it does about an individual's effectiveness. Read More ▶ | | | Catch a glimpse of what flourishes in the shadows of the internet. Read More ▶ | | If you get this digital certificate error using Chrome, then Google now considers that website's Symantec PKI certificate untrustworthy. Read More ▶ | | | Companies gather intelligence on their rivals just like nation-states do. Sometimes its legal, but industrial espionage can easily slip over the line into criminality. Read More ▶ | | California's new privacy law, AB 375, might not burden security as much as the GDPR, but details are subject to change. Read More ▶ | | Don't be fooled, integrating security into the DevOps process is a big project. But the payoff is worth the effort. Here's what you need to know to get started building DevSecOps from the ground up. Read More ▶ | | With strong support from Google, Microsoft and other vendors, WebAuthN is poised to become a true standard for passwordless authentication over the web. Read More ▶ | | Editor's Picks | | | Get Security Smart From the editors of CSO, Security Smart is a quarterly security awareness newsletter ready for distribution in your organization. Subscribe now and arm your employees with the information they need to be more secure at home and at work. Learn more. | | | | |