Collaborate Disseminate
If you’re reading this post, chances are you have been through a regulatory compliance push before. And you’re probably hoping that (at least) some of your previous efforts will count towards newer frameworks, like the Cybersecurity Maturity Model… Continue reading How CMMC Measures Up to Other Compliance Frameworks
With the advent (and multiplication!) of privacy regulations around the world at both national and sub-national levels, it can be hard to know what your obligations and responsibilities are under these laws. These various frameworks are driven by … Continue reading Data Breach Notification Myths Busted
We have looked at Cybersecurity business cases in the past, relating the cost of a proposed solution to the potential cost of a breach. That framework hasn’t gone away – but, there are some other pieces to consider when crafting a cybersecurity bu… Continue reading How to Build Board-worthy Cybersecurity Business Cases
Does your IR Plan Help During a Breach?
The post Does Your Incident Response Plan Actually Help? appeared first on Security Boulevard.
Continue reading Does Your Incident Response Plan Actually Help?
There are the threats you know of. Then, there are the threats you should actually be defending against.
Right now, some people think that these are the big cybersecurity monsters:
The post How Understanding Cybersecurity Thr… Continue reading How Understanding Cybersecurity Threats Influences Your Defenses
I can say it until I’m blue in the face: don’t pay the ransom, ever. Period. Even if you’re the victim of a ransomware attack, don’t pay the hackers.
In fact, I wrote an article explaining why paying the ransom only leads t… Continue reading How Not to Pay a Ransom (Twice)
If you’re reading this, chances are you’re actively trying to improve your security to prevent a breach, or you’re experiencing a breach right now and trying to determine what to do about it.
Most of the advice you’ve found so far probably h… Continue reading Evaluating Paths to Incident Response
Windows Group Policy tends to get overlooked by most Administrators. Typically, you visit this policy when you first set up a domain—which for many companies is well beyond the first day you start using Windows. By the time you get around to… Continue reading Why You Need a Software Restriction Policy (Right Now)
California’s Consumer Privacy Act (CCPA) came into effect on the first of January 2020, and while we haven’t seen any CCPA penalties handed out yet, I’m betting one is coming any day now. Given provocative comments from Cal… Continue reading CCPA: No Extensions, No Excuses
Thinking like the bad guys is part of being in cybersecurity. Our ability to anticipate the moves of our opponents is essential, just like in a chess game – except with real business consequences. Drawing on my prediction of worse spam to come in … Continue reading The Perfect Phishing Email