Cyber budgeting is a crucial component of financial planning for companies in all industries. In fact, one of the most common questions we get is, “What percent should we be spending on our cybersecurity budget?” But that doesn’t mean it’s easy to put all the puzzle pieces together. According to research from IANS +…
On August 8, 2023, NIST published the initial public draft for version 2.0 of its Cybersecurity Framework (NIST CSF 2.0). This is the first update since 1.1 was released in 2014, so it was due. We’re going to break down the framework, the updates, and the differences from its previous version. What is NIST CSF?…
The concept of insurance can be a tricky one to navigate. At its core, insurance is meant to provide us with a safety net in case something bad happens—kind of like an incident response plan. Hopefully you never need to use it, but making the investment ahead of time can help you recover from any…
The United States Department of Defense (DOD) has upped its security game in a big way starting in 2020. The government agency, which provides military forces for national security, released a new certification—The Cybersecurity Maturity Model Certification (CMMC)—at the end of January 2020 that aims to decrease the impact of cybersecurity risks that threaten the…
When your organization reaches a risk assessment score threshold it finds acceptable, that’s not the time to take your foot off the gas. Here’s how to reframe your security program and vCISO engagement after you get there.
Given the dramatic shift in remote-work situations, Zoom has become a popular platform to help businesses communicate and operate despite the changes. As always, attackers have taken interest in this shift and have used the platform to their advantage. Here are some of the known Zoom risks and vulnerabilities, what they’ve done to fix them, and some of the best practices for using the platform.
Information security compromise is impossible to prevent 100% of the time. So, there needs to be an incident response plan. Effective incident response is critically important in all organizations. Read about the lens FRSecure takes with its incident response engagements.
If you’re a contractor for the DOD, the CMMC needs to be on your radar. Security requirements will be built into all DOD contacts by 2026, and it’s important you get ahead of it.
Sometimes, running an information security program can feel a lot like being in the middle of a horror film. Turn down the lights, grab some popcorn, and queue the ominous music. Here are five of the scariest things a CISO (or infosec leader) could hear from their security or IT team—and what decisions you can make to avoid the quintessential difficult escape.
Creating your own formal vendor risk management program can seem like an intimidating procedure at first. Keeping these four best practices in mind while developing your own vendor risk management program can help simplify the process and ensure that you’re developing a successful and sustainable program.