Photo of a man picking up a lock that is sitting on a laptop computer keyboard

5 Ways to Stay On Top of Security Risks and Updates

9 Oct 2015 by Shay Moser

No matter the size of your IT team, organizations like yours may find addressing security daunting. Small and large corporations still face the same threats  — and your stakeholders expect the same levels of security.

Kim Kirkes, enterprise resiliency manager at Insight, says failing to stay up-to-date on the latest security threats and vulnerabilities can make your business more susceptible to attacks, increased downtime and the risk of exposing confidential or sensitive data.

“It also poses the threat of the inability to meet customer needs, which could potentially impact your organization’s overall revenue and reputation,” says Dennis Aldridge, senior manager, product management of Microsoft® solutions, at Insight.

When you’re not prepared, there’s also an element of uncertainty. “If you’re not keeping tabs on potential threats and updates, it will be more difficult to make an informed decision as to how to best prioritize risks to make sure you’re focusing your efforts and limited resources where they’re most needed,” Kirkes adds.

Websites and resources to help you stay on top of security risks and updates:

  1. National Vulnerability Database
    As the U.S. government’s repository of standards-based, vulnerability management data, this resource allows your organization to stay compliant and assess potential security risks. The site also includes a database of security-related product names, software flaws, security checklists and more.
  2. Government Information Security
    This site provides the latest news coverage related to threats and advisories, as well as regulatory updates and announcements. Providing reliable, timely information, this resource offers news that relates to security risks and updates, and provides informed perspectives from experts who can help guide your information security and risk management methodology.
  3. U.S. Computer Emergency Readiness Team
    As an official website of the Department of Homeland Security, US-CERT leads efforts to manage cyber information distribution and proactively handle cyber risks. This resource supports a safer Internet by investigating threats, offering information related to major incidents and providing important cybersecurity content.
  4. Internet Storm Center
    This volunteer organization detects issues, assesses threats, and shares both technical and procedural material with the general public via a comprehensive, real-time database. Using both manpower and technology, this resource tracks abnormal trends and behavior to identify security risks.
  5. Alerts
    It’s wise to register to receive vendor vulnerability reports on platforms and applications running in your environment.