Author Bio

This post originally ran on September 9, 2021, and has been updated.  Worldwide IT spending is projected to total $4.4 trillion in 2022, an increase of 4% from 2021, according to the latest forecast by Gartner, Inc. With skyrocketing IT initiatives and digitization, leaders everywhere are evaluating their options, including investments in vulnerability management (VM)….

Once executives make an investment, they’re eager to see one particular metric: Return.   In many cases, it’s a piece of hardware or software that needs to pay for itself by saving time, amplifying efforts, or even reducing risk to be a win for the company. Kenna Security customers bought into the risk-based vulnerability management (RBVM)…

Businesses don’t like surprises, especially unwelcome ones. Economic and marketplace shocks often lead to decisions made under duress and result in rapid, costly ramp-ups or scale-backs. And while the future ultimately is unknowable, organizations that understand the business risks posed by an uncertain world–and equip themselves to respond confidently to those risks—will fare far better…

We’ve had a few big goals throughout our research series, “Prioritization to Prediction,” and we accomplished a big one with the release of our eighth edition: A way for organizations to measure and reduce their exploitability. The findings, based on research by Kenna Security and the Cyentia Institute, uncovered a few interesting tidbits along the way….

Businesses have been under historical stress the last two years as global events have dealt blow after devastating blow. And perhaps no office has felt these stresses more acutely than the CISO.   Unprecedented attacks, increasingly complex environments, expanding perimeters, blame culture, challenging stakeholders, friction between Security and IT, data overwhelm, and shortcomings inherent to traditional vulnerability management strategies can spread CISOs thin. Instead of investing their valuable time in efforts that lower risk to the business, they’re…

If the past couple of years has taught us anything, it’s that there is strength in numbers. Cybersecurity professionals know this more than most. Challenges are becoming more complex, telemetry data more voluminous, vulnerabilities more prevalent, workforces and attack surfaces more distributed, and threats more sophisticated. In the face of all this, few organizations have…