2 min read
You know it's common sense, but is it common in your workplace? I had the opportunity to attend a webinar covering incident and breach response and the reality is, having the framework to respond to an attack is becoming just as important as...
Read More
2 min read
"If everything is important, then nothing is." ― Patrick Lencioni We’ve all seen this concept applied to time management and other decision-making...
3 min read
How do you communicate cyber risk to management and the board at your organization? Has it been effective? Is everyone on the same page from a risk...
1 min read
We've had clients, friends, relatives, etc. ask us what they should do about the recent Equifax breach and the answer is pretty simple: get a credit...
It's tough to be effective as a CISO if you can't get your message across to other areas of the bank. How you do it is important as well. This video...
This past spring (as of May 1, 2017), the AICPA updated their Service Organization Controls testing standards from the SSAE-16 to SSAE-18.
3 min read
So what Benefit is there in a Business Impact Analysis?
We've been getting a lot of emails asking when our newest CAT excel spreadsheet would be released.
1 min read
This blog post is part two of a three-part series. It is an excerpt from our whitepaper on the Virtual Chief Information Security Officer concept. We...
