[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:itil\u002Foverview":3},{"item":4,"lessons":15,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":7,"citations":8,"publisher":9,"summary_md":10,"official_text":11,"official_attribution":11,"official_url":12,"link_label":13,"note":11,"updated_at":14},"itil","overview","ITIL",2370,"PeopleCert (AXELOS)","**What it covers.** ITIL is a widely used body of guidance for IT service management, now published by PeopleCert. The current version, ITIL 4, describes a service value system and a set of management practices, including change enablement, incident management, problem management and service level management. It covers how normal, standard and emergency changes are assessed, authorised and recorded.\n\n**In practice.** Organisations adapt ITIL practices to their own size and culture rather than adopting them wholesale. For change, that means a clear change model, defined authorities for each change type, a fast but controlled route for emergency changes and a record of what was changed, by whom and why. Auditors usually look for change records, post implementation reviews and links between incidents, problems and changes.\n\n**Common gaps.** Emergency changes are often used to bypass control and are never reviewed afterwards. Processes can also become heavy paperwork that teams route around, so records stop reflecting reality.",null,"https:\u002F\u002Fwww.peoplecert.org\u002Fbrowse-certifications\u002Fit-governance-and-service-management\u002FITIL-1","Read about ITIL","2026-10-18T15:18:43.663+00:00",{"total":16,"list":17},2315,[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"cybersecurity-workforce-shifts-as-ai-roles-surge-and-traditional-postings-decline","Cybersecurity Workforce Shifts as AI Roles Surge and Traditional Postings Decline","2026-10-18T12:20:19.942+00:00",{"slug":23,"title":24,"published_at":25},"critical-drupal-rce-flaws-demand-immediate-patching","Critical Drupal RCE Flaws Demand Immediate Patching","2026-10-17T16:20:34.593+00:00",{"slug":27,"title":28,"published_at":29},"government-encryption-backdoors-threaten-global-data-security","Government Encryption Backdoors Threaten Global Data Security","2026-10-17T14:20:19.334+00:00",{"slug":31,"title":32,"published_at":33},"critical-beyondtrust-auth-bypass-actively-exploited-patch-immediately","Critical BeyondTrust Auth Bypass Actively Exploited — Patch Immediately","2026-10-16T22:21:05.267+00:00",{"slug":35,"title":36,"published_at":37},"critical-magento-rce-flaw-demands-immediate-patching","Critical Magento RCE Flaw Demands Immediate Patching","2026-10-16T22:20:34.131+00:00",{"slug":39,"title":40,"published_at":41},"beyondtrust-zero-day-highlights-critical-risk-of-unpatched-edge-devices","BeyondTrust Zero-Day Highlights Critical Risk of Unpatched Edge Devices","2026-10-16T22:20:18.59+00:00",{"slug":43,"title":44,"published_at":45},"active-exploitation-of-fortinet-and-beyondtrust-flaws-highlights-patch-urgency","Active Exploitation of Fortinet and BeyondTrust Flaws Highlights Patch Urgency","2026-10-16T20:21:00.599+00:00",{"slug":47,"title":48,"published_at":49},"openbsd-root-exploit-chains-decades-old-bug-to-bypass-kernel-protections","OpenBSD Root Exploit Chains Decades-Old Bug to Bypass Kernel Protections","2026-10-16T20:20:45.22+00:00",{"slug":51,"title":52,"published_at":53},"cross-jurisdictional-law-enforcement-surveillance-of-political-activists-raises-civil-liberties-alar","Cross-Jurisdictional Law Enforcement Surveillance of Political Activists Raises Civil Liberties Alarms","2026-10-16T20:20:31.596+00:00",{"slug":55,"title":56,"published_at":57},"ai-compromises-robotic-arm-in-16-minutes-exposing-ot-security-gaps","AI Compromises Robotic Arm in 16 Minutes, Exposing OT Security Gaps","2026-10-16T20:20:16.394+00:00",{"slug":59,"title":60,"published_at":61},"nist-nsa-cisa-issue-guidance-on-ai-incident-readiness-for-high-risk-ai-systems","NIST, NSA & CISA Issue Guidance on AI Incident Readiness for High-Risk AI Systems","2026-10-16T18:21:54.014+00:00",{"slug":63,"title":64,"published_at":65},"aomei-backupper-update-servers-hijacked-to-distribute-backdoor","AOMEI Backupper Update Servers Hijacked to Distribute Backdoor","2026-10-16T18:21:08.893+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"patch-management","Automated patch management","Known holes get closed in days, not months.",1052,{"slug":73,"name":74,"problem":75,"stories":76},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",839,{"slug":78,"name":79,"problem":80,"stories":81},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",560,{"slug":83,"name":84,"problem":85,"stories":86},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",274,{"slug":88,"name":89,"problem":90,"stories":91},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",241,{"slug":93,"name":94,"problem":95,"stories":96},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",174,[98,104,110,116,121,127,132,136],{"family":99,"item":100,"code":101,"title":102,"together":103},"cis","7","Control 7","Continuous Vulnerability Management",1227,{"family":105,"item":106,"code":107,"title":108,"together":109},"nist-800-53","si-2","SI-2","Flaw Remediation",1041,{"family":111,"item":112,"code":113,"title":114,"together":115},"gdpr","32","Article 32","Security of processing",829,{"family":99,"item":117,"code":118,"title":119,"together":120},"12","Control 12","Network Infrastructure Management",805,{"family":122,"item":123,"code":124,"title":125,"together":126},"nist-sp","800-40","SP 800-40","SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology",639,{"family":105,"item":128,"code":129,"title":130,"together":131},"ra-5","RA-5","Vulnerability Monitoring and Scanning",567,{"family":99,"item":133,"code":134,"title":135,"together":81},"13","Control 13","Network Monitoring and Defense",{"family":99,"item":137,"code":138,"title":139,"together":140},"2","Control 2","Inventory and Control of Software Assets",484]