But a virtual server could be intercepted in midflight, Oberheide points out, and altered to give a hacker entry into whatever new physical machine it has moved.

FORBES: Virtualization's Dark Side

While prior governance and risk control (GRC) systems for IT were essentially large spreadsheets that required a good deal of manual entry, Brinqa actively listens to machine data and other low-level outputs from IT systems, then lets users assign and customize risk indicators for their particular organization.

FORBES: Elevating the IT Risk Management Conversation to the Boardroom