A new report advises CISOs to measure their security investments and identify critical weaknesses by conducting continuous penetration testing.

“Until agencies more effectively implement the government’s approach and strategy, federal systems will remain at risk,” GAO warned.

Symantec is conducting an investigation over “concerns raised by a former employee.”

The Department of Health and Human Service's Office of Inspector General said that a penetration test on four operating divisions identified "configuration management and access control vulnerabilities."

A new guide for auditors says SSH key management should be on their checklist because the proliferation of unmanaged keys for the ubiquitous encryption protocol means IT networks can't be guaranteed as secure.

The largest professional organizations for qualified accountants issued guidance to its members this week about how to audit management claims about their company's cybersecurity.