Joan Goodchild

Joan is a veteran journalist, editor and writer who has been covering security for more than a decade. She has written for several publications and previously served as editor-in-chief for CSO Online.

A new study touts the benefits of DevSecOps practice for improving security posture, but finds it is slow to catch on in many organizations. The survey released this month from Sonatype, CloudBees, Signal Sciences, Twistlock and Carnegie Mellon’s Software Engineering Institute highlights the gains in security hygiene within businesses employing ... Read More

It ain’t easy bein’ a CISO. That’s a sentiment heard around the halls of business and in security departments around the globe. But there is also plenty of research that backs up the notion that running a security department is difficult, stressful, tireless work, and those who do it are ... Read More

Differing approaches to pleasing in-demand talent can keep security employees happy and reduce attrition The cybersecurity skills shortage that is so widely discussed is forecasted to result in 3.5 million unfilled positions by 2021. Research from ESG found 51 percent of organizations currently believe they have a “problematic shortage” of cybersecurity ... Read More

Research finds criminals increasingly target business, but security programs are not caught up to the current threat landscape Criminals will always go where the money is, and several pieces of recent research finds they are increasingly directing their efforts at business targets in an effort to earn a bigger payout ... Read More

Giving employees the tools for security awareness is essential. Many figures point to user error as the largest contributing factor in breaches and security incidents. Recent data from the International Association of Privacy Professionals (IAPP) finds the most common causes of unauthorized exposure of regulated data are unintentional or inadvertent ... Read More

There is a common refrain among security industry veterans that it is not a matter of if, but when, a breach or other security incident occurs. Protection and prevention are only one slice of the pie when it comes to a holistic security program. Incident response, being ready to react ... Read More

It’s election season, and those in security know that with every season, there is a reason for criminals to create new lures to fool end users. The next week is sure to bring us many phishing emails and social networking ploys that seek to pry sensitive information from unsuspecting people ... Read More

Digital transformation can mean many different things to a variety of business leaders. But at its core, it is the process of integrating digital technologies into business practice. Organizations embark on a digital transformation journey for more efficiency, increased cost savings, enhanced customer experience and better productivity, just to name ... Read More

As security becomes a top priority for businesses around the globe, the chief information security officer (CISO) is increasingly tapped to present to the board of directors about the status of risk mitigation efforts and plans for the organization’s security strategy. In fact, Gartner estimates by 2020, 100 percent of ... Read More