AI, cloud computing, data management and analytics are just a few of the ways organizations increasingly rely on digital infrastructures to support their operations. These technological advancements compel IT and security professionals to constantly seek effective strategies to protect their organizations. Effective vulnerability management is an essential element of any best-in-class cybersecurity program.

Integrating vulnerability data into your GRC platform

Vulnerability management is a critical practice that offers a systematic approach to identifying, evaluating, treating and reporting on security vulnerabilities within IT assets. This proactive measure not only aids in detecting and rectifying weaknesses before they can be exploited by attackers but also significantly reduces the risk of data breaches.

Organizations can take this process a step further by integrating vulnerability management data into a GRC platform. By utilizing data from automated vulnerability scans, organizations can achieve a holistic understanding of IT risks in relation to overall business risk.

This integration of vulnerability management data into a single GRC solution supports informed decision-making, prioritizes vulnerabilities based on their impact and ensures adherence to cybersecurity policies. With real-time dashboards and trend analysis, CISOs can keep a vigilant watch over their organization’s cybersecurity health, making vulnerability management an essential tool in the arsenal of modern IT and security professionals.

This is where the integration of advanced vulnerability management tools, such as those offered by 

3 ways Diligent and Tenable are enhancing IT risk management (ITRM)

The Tenable partnership is instrumental in enhancing 

by providing a comprehensive vulnerability management solution that not only identifies and assesses risks but also facilitates their remediation in a timely and efficient manner. This integration allows for a seamless management of security vulnerabilities, which is essential for maintaining the integrity and security of IT systems.

Identifying and prioritizing vulnerabilities

At the core of this partnership is the sophisticated scanning technology that Tenable provides. This technology is capable of identifying vulnerabilities across an organization’s IT assets, including those that are often overlooked. Once identified, vulnerabilities are evaluated and filtered to eliminate false positives, ensuring that only genuine threats are addressed. This process is critical as it allows IT teams to prioritize vulnerabilities based on their severity and the criticality of the affected assets, ensuring that the most significant risks are mitigated first.

The remediation of vulnerabilities is streamlined through the integration of ticketing systems such as Jira and ServiceNow. This integration ensures that once a vulnerability is identified and prioritized, it is swiftly addressed through appropriate mitigation measures, such as applying patches or making configuration changes. The effectiveness of these measures is then verified through rescanning, ensuring that vulnerabilities are effectively neutralized.

Another significant aspect of the Tenable partnership is the continuous monitoring and reporting capabilities it enables. Through regular scans and the use of dashboards and trend charts, organizations can maintain a real-time view of their vulnerability status. This ongoing monitoring is crucial for ensuring compliance with cybersecurity policies and service level agreements (SLAs) and for making informed decisions about IT security.

Strengthening cybersecurity through strategic vulnerability management

The practice of vulnerability management is essential, and by methodically identifying, evaluating, treating and reporting on security vulnerabilities, organizations can proactively mitigate potential threats before they become exploitative risks. Integrating vulnerability management insights into single GRC platform enhances these efforts, offering a holistic view of IT risks aligned with broader business objectives.

This comprehensive approach not only facilitates informed decision-making but also prioritizes urgent vulnerabilities and ensures adherence to cybersecurity regulations. Leveraging advanced tools, such as those provided by industry leaders like Tenable, is critical in sustaining strong cybersecurity health and safeguarding digital assets.

in partnership with Tenable, can enhance your organization's cybersecurity and risk management practices.

Diligent and Tenable: Enhancing cybersecurity through effective vulnerability management

An interview with Seth Fischer, founder and chief investment officer of Hong Kong-based Oasis Management regarding the activist fund's investments in Japan

How do you find being a shareholder activist in Japan different from activism in the U.S.?

I think the conversation is at a different stage and about different issues. The U.S. may have gone too far in terms of shareholder primary, while in Japan it's the other extreme, shareholders are only part of the conversation. So, it's a different start to the conversation. The issues with companies are also different. In the U.S., incentives are important, so you talk in very financial terms because that's where people are. In Japan, you talk about stakeholders and what's good for the company. 

What’s your take on the Tokyo Stock Exchanges (TSX) requirement for companies to have a price-to-book ratio of one or higher?

The stock exchange wants better companies, so they say they need to have a price-to-book of one or higher. But that's the lowest common denominator phenomenon as opposed to being all you can be. Benchmark yourself against the best that your company can be. And it depends on what your industry is. Not all businesses are asset heavy businesses that might trade at 1.2 times. Some businesses should trade at three times, or at five times. 

How has the TSX’s increased emphasis on benchmarking changed the nature of shareholder activism in Japan?

In the past, to mount a successful campaign you typically needed to have a scandal at the target company like hiding assets or financial irregularities, like at Toshiba. Today, it’s a new world where we're going to start benchmarking you to the best that you can be. Boards believed their job was only to decide what's legal. Now we're asking boards to decide what's wise. 

That's what we're trying to do at [consumer products company] Kao, very frankly. We showed the president the books and said you should be benchmarked against P&G, Unilever or L'Oréal. Some of those companies have a majority of women on their board. Why does Kao have just one token woman on the board? If women are prime source of your business, maybe it should be 90%. 

In your Kao campaign you highlight the need for marketing. Is marketing something Japanese companies need to do better?

Marketing is super important. Look at Asics, they doubled down on marketing and their share price went up four times. But most Japanese companies still do very traditional media. They are still way behind social media advertising. They haven't bought into the new age media yet. The fact is that every teenager in Japan is addicted to TikTok, but this reality hasn't made it into the Japanese corporate boardrooms that are made up of 81-year-olds who only watch television. 

People say that if Japanese companies sold all their cross holding in affiliate companies, it would unleash a huge amount of market value. Is it as important as people say it is?

I think it's even more important because it's the concept of unused assets. It's the concept of using the balance sheet better and smarter, thinking about return on equity and return on capital. But it's also a matter of holding management accountable and answerable to their shareholders. 

We have seen a surge in shareholder proposals for Japanese companies to disclose additional information. What types of information are they looking for?

A lot of Japanese companies hide assets. For example, one company that makes color cartridges for printers didn't disclose that it owns a painting by Rothko. How do you not disclose that you own millions of dollars' worth of artwork? 

They also do a poor job disclosing what business lines really make money and which lose money because they don't want to be questioned about it. When one of their business lines loses money, they try to hide it somewhere, like in other operating expenses. So, you have to ask for information and dig deep to find the true value of these companies. 

What are some key steps that Japanese companies should take to improve their valuations?

We're past the stage of one size fits all. So, for one company that might be board independence, or better governance or disclosure. For others it might be capital allocation, changing the business makeup, shutting down money losing businesses. More broadly, make sure your board nomination and compensation committees are really functioning. Get away from nepotism, get away from simply appointing based on seniority and get the best quality management, best quality boards you can.

Diligent

Blog

Diligent and Tenable: Enhancing cybersecurity through effective vulnerability management

IN-DEPTH: Q&A with Oasis Management

Solutions

Resources

Company

Your Data Matters

Diligent

Blog

Diligent and Tenable: Enhancing cybersecurity through effective vulnerability management

IN-DEPTH: Q&A with Oasis Management

SolutionsSolutions

ResourcesResources

CompanyCompany

Your Data Matters

Solutions

Resources

Company