August 2022 - Fractional CISO

25th August 2022

Communication, not computers, is the key cybersecurity leadership skill.

CFO: You’re asking for a security budget increase of 20% from last year and we’ve already reached our ratio on technology spend. CISO: …but our budget was cut 30% the year before due to other strategic projects and we haven’t addressed some key gaps… CFO: We didn’t have any security issues last year though and…

18th August 2022

Nudge your way to better Cybersecurity

Our local post office parking lot was under construction for many months. I have no idea what they were working on and it would not be notable except… … it used to be super-convenient to mail letters* there. [*Yes, those physical paper things. What can I say, I have a certain nostalgia for an age gone…

11th August 2022

The Makeup of a Great SOC 2 Risk Assessment

Not all risk assessments are created equal. Some are low and others are high. Yeah, that’s really helpful. Right? Risk assessments are so crucial to information security that the American Institute of Certified Public Accountants (AICPA) requires them from every single company seeking SOC 2 compliance. SOC 2 Risk Assessments fall primarily under the Security…

4th August 2022

Browser password managers – flawed security, by design!

This article addresses a very serious and pervasive business data risk, so let’s get right to it: The default password management features available in Chrome, Firefox, and Edge browsers only provide the appearance of secure password storage. In reality, they provide absolutely no meaningful protection for stored user passwords. Business leaders take note: if your…