Blog

21st September 2023

Automate That!

“Rob, we have another prospect that needs a Statement of Work (SOW).” I should be excited; a new prospect is interested in our services. But argh! I hate writing the SOW. So many things to get wrong: legal company name, mailing address, payment specifics, which services we agreed upon in the discovery call. The list…

14th September 2023

Picking the Virtual CISO for your business – Free eBook

Picking the right Virtual CISO for your business is easier said than done. There are so many different vendors and individuals offering vCISO services these days that it’s hard to know where to start. We wanted to provide a guide to help businesses figure out the right type of vendor for them. While Fractional CISO…

24th August 2023

TX-RAMP: A Guide to the Texas Risk and Authorization Management Program

“TX-RAMP” – you never would have expected the most important deal of your company’s history to hang on this six-letter acronym. Your SaaS company has been presented with a golden opportunity: a major Texas state university is interested in your product. This could be the most significant deal of the year, potentially transforming the company’s…

17th August 2023

Management Reviews Are Not Optional

Yesterday, our kids got back from overnight camp in New Hampshire. It was three and a half weeks of nonstop fun. Hanging out with friends, playing in the sun, staying up later than was probably a good idea. And that was just Rachel and me! It sounds like the kids had a good time too….

27th July 2023

Canadians: don’t overlook Cybersecurity when Expanding into the U.S.!

As Canadians, we generally don’t define ourselves by what we are but rather what we are not. That is, we are not Americans. I’m a Canadian. I’ve worked primarily in Canada but I’ve had the great fortune to work with some incredibly talented and driven individuals from Europe, Asia, the Middle East and of course…

20th July 2023

Pen Tests, Vulnerability Scans, and Hip-Hop

Among the many parenting challenges of our time, few are more significant than getting one’s 10-year-old daughter successfully enrolled in the dance class of her choice. How do I know this? I know because we have one of those beings living under our roof and last week, when the one and only hip-hop class that…

13th July 2023

Congratulations to Jaden Soller! 2023 vCISO Cybersecurity Scholarship Winner

Congratulations to Jaden Soller of Indiana on being awarded Fracitonal CISO’s 2023 vCISO Cybersecurity Scholarship! Fractional CEO and Founder Rob Black presented her the award in a video call. Jaden’s interest in technology was sparked by a gift from her father: an old laptop. It was her first computer, and he quickly began teaching her…

29th June 2023

Over 56% of cyber attacks involve the supply chain – Fractional CISO

The weakest link in a company’s cybersecurity posture is often found in its supply chain. Fractional CISO Research evaluated 116 of the most common technology services used by its clients for recent history of information security incidents. We found that 39% of services have suffered information security incidents since January 2021. This number includes both…

15th June 2023

What Pokémon Cards can teach us about Cybersecurity

For the second weekend in a row, I am sitting near lots of people playing Pokémon. That’s correct. Pokémon, the Japanese card game launched in 1996 and, as my 12-year-old son would happily tell you, a game that is still going strong three decades later. So much so, in fact, that we are here at…

8th June 2023

CMMC Compliance Explained: Protecting Sensitive U.S. Government Information

For most businesses, cyber attacks threaten their employees, customers, and their bottom line. For contractors to the United States Government, cyber attacks threaten national security. In 2015, attackers breached KeyPoint Government Solutions, granting them the credentials needed to access and exfiltrate personally identifiable information of 4.2 million current and former government clearance holders from the…

25th May 2023

Adopting a Security-first SDLC Approach

He just wanted a job. Or so said a self-described penetration tester who compromised the hosting platform Packagist to replace abandoned PHP modules with ones he controlled. He didn’t deploy any malicious code, just a note that he was looking for a job. His compromise could have pushed malicious code to the over 500 million…

18th May 2023

Cybersecurity Comes With a Price

Thump, Thump, Clang! Uh oh, there was clearly something wrong with the car. So I took it to the dealer to have a look. They found a bunch of typical stuff in need of attention – brake pads, tires, etc. But they also discovered a problem with the subframe; the right rear trailing arm had…

11th May 2023

ISO 27001 ISMS Requirements

You’ve heard its name in the breeze and in hushed whispers. A certification to rival SOC 2, HIPAA, perhaps even FedRAMP. Your sales team wants it, your customers want you to have it. That’s right! All the way from Geneva, Switzerland, it’s ISO 27001! ISO 27001 is the cool kid of the cyber security certifications…

1 2 3 … 22 Next