Uncategorized

CSF 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟰 A CISO once told me something that stayed with me: “𝗪𝗲 𝗱𝗼𝗻’𝘁 𝗵𝗮𝘃𝗲 𝗮 𝗰𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 […]

A pattern I’ve noticed in almost every major cyber incident review: The breach was detected. The alert existed. The evidence

CSF 𝗜𝗻𝘁𝗲𝗹𝗹𝗶𝗴𝗲𝗻𝗰𝗲 | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟮 One of the most expensive words in cybersecurity is: “𝗔𝘀𝘀𝘂𝗺𝗲𝗱.” We assumed the vendor was

CSF | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟭 During a recent discussion with a Board member, I was asked: “𝗛𝗼𝘄 𝗱𝗼 𝘄𝗲 𝗸𝗻𝗼𝘄 𝗼𝘂𝗿

CSF | 𝗣𝗼𝘀𝘁 #𝟯𝟲𝟬 A few years ago, an auditor asked a simple question during a review: “𝗪𝗵𝗼 𝗮𝗽𝗽𝗿𝗼𝘃𝗲𝗱 𝘁𝗵𝗶𝘀

CSF | 𝗣𝗼𝘀𝘁 #𝟯𝟱𝟵 A lesson I’ve learned after years of audits, assessments, and incident reviews: 𝗧𝗵𝗲 𝗺𝗼𝘀𝘁 𝗱𝗮𝗻𝗴𝗲𝗿𝗼𝘂𝘀 𝗮𝘀𝘀𝗲𝘁𝘀

CSF | Post #357 A question every Board, CISO, and Audit Committee should ask at least once a year: “What

CSF | Post #356 A question I often ask during audits is: “If your most critical employee resigned today, what

CSF | 𝗣𝗼𝘀𝘁 #𝟯𝟱𝟱 Most insider threats do not start with malicious intent. They start with convenience. Someone bypasses a

CSF | 𝗣𝗼𝘀𝘁 #𝟯𝟱𝟰 A lot of organizations believe they have a 𝗿𝗮𝗻𝘀𝗼𝗺𝘄𝗮𝗿𝗲 𝗽𝗿𝗼𝗯𝗹𝗲𝗺. In reality, many of them have