HHS Cybersecurity Performance Goals: Context and 2 Comprehensive Checklists
Few pieces of data are as intimate and private as health records. Because of the sensitive nature of the data,…
Read post
Category: Risk Assessments
NIST CSF 2.0: Noteworthy Updates in the New Version
On August 8, 2023, NIST published the initial public draft for version 2.0 of its Cybersecurity Framework (NIST CSF 2.0).…
Network Security Audits vs. Security Risk Assessments
Due to a lack of a common language in the security world, it’s easy to get confused and overwhelmed. Considering…
FTC Safeguards Rule: What you Need to Know
What is the FTC Safeguards Rule? Initially established in 2003, the FTC Safeguards Rule outlines data security guidelines for organizations…
vCISO Engagements After Acceptable Risk Assessment Scores
When your organization reaches a risk assessment score threshold it finds acceptable, that’s not the time to take your foot…
What We Know About the CMMC So Far
If you’re a contractor for the DOD, the CMMC needs to be on your radar. Security requirements will be built…
10 Traits of Companies that Avoid Cyber Incidents
You can’t prevent all security incidents from happening, but businesses that avoid many of them tend to have commonalities. Here…
Manufacturing Cybersecurity Defenses Against Cyberteurs
Manufacturing businesses are uniquely vulnerable to attackers. Their business models are hyper-affected by potential breaches. Take a look at how…
Using a Common Language to Reach Non-Security People
In the brokenness of the information security industry, our inability to communicate effectively stands out above the rest as one…
Not If, But When: Security Incident Classification
Information security incidents are unavoidable. It’s important to learn how to respond effectively to and manage an incident that does…
An Information Security Expert’s Take On The Equifax Breach
Logically, we approach investigations holistically from four different perspectives; the company itself, what was in place for prevention, what was…
Information Security Life Cycle, not Information Security Projects
Information security is a living, breathing process that’s ongoing, it’s a life cycle. Without a life-cycle approach to information security…