Blog

19th December 2018

Cryptocurrency: Not Ready for Prime Time

Some say to never kick a cryptocurrency when its down. But I will. The recent Bitcoin crash has brought the question to light of the long-term viability of cryptocurrencies. Will they come back, or won’t they? I don’t know. What I do know is that cryptocurrencies have some serious structural challenges. These challenges will hamper…

11th December 2018

SOC 2 Audit: How to Comply with the Tough New Changes

SOC 2 Audit: How to Comply with the Tough New Changes Companies that want SOC 2 audit certification are scrambling to get in front of new requirements from the American Institute of Certified Public Accountants (AICPA). The AICPA has released additional information on what’s needed for a SOC 2 audit. SOC 2 audits finished after…

28th November 2018

18 months in: What I’ve learned starting a cybersecurity company

After twentyish years working for someone else, I quit my corporate job and started a cybersecurity consulting company. While it seemed risky at the time, now I can’t imagine doing anything else. When I first quit, I got questions like, “You have clients lined up, right?” and “What are you really doing?” The answers, “no”…

6th November 2018

Does your organization need a Password Manager?

The answer is yes. Your business needs a secure Password Manager! In today’s IoT-driven business landscape, a single weak password can jeopardize an entire organization’s infrastructure. Password managers for business are essential to generate, manage, and share credentials, bolstering your organization’s primary line of cyber defense. Now that we’ve answered one of the most frequently…

9th October 2018

Understanding IoT Identity

What is a surefire way to mess up the security of your IoT implementation? Use the same secret for all of your devices? Allow former employees to access the devices in the system? How about leave default passwords on devices? It turns out that there are a lot of surefire ways to mess things up….

6th September 2018

Four steps to securing your IoT Identity from ex-employees

When you see one of those cybersecurity stories about how an ex-employee “hacked” a company with terrible consequences, do you think that could never be us? Or do you think, I’m glad we don’t have anyone like that around! Many companies are exposed to the former insider risk, they fortunately haven’t been tested by a…

1st August 2018

Is your website about to go dark?

Encryption hasn’t always been a standard on the Internet – in earlier days, most webmasters simply used HTTP, instead of the HTTPS format. HTTP means no encryption for the website. So all the private information- names, addresses, passwords, that are collected can be “heard” by any one “listening in”. These days, many companies are moving…

12th July 2018

Typeform Data Breach: 100,000 Records and Counting

The list of customers affected by the Typeform data breach has grown in the past week. So has the number of personal records exposed. This article aims to collect all of this data in one location. What is Typeform? Typeform conducts customer surveys and quizzes for other companies using their service. The web-based platform allows…

8th June 2018

Cybersecurity Risk Assessment – A Better Way

What do cybersecurity pros mean when they talk about a “high vulnerability” or “high risk?” – if you’ve ever scratched your head listening to someone present a cybersecurity risk assessment, you’re not alone. Many of us have these questions about risk: What does a high vulnerability mean to a business? How do we rank cybersecurity…

29th May 2018

IoT cybersecurity standards

Fractional CISO’s own Rob Black is featured in the current Security Ledger podcast discussing IoT cybersecurity standards. Rob discusses the state of IoT security standards, the challenges the industry faces and what is next for IoT security standards. Check out the podcast here. Coverage of the podcast and the upcoming Security of Things Forum here….

18th August 2017

Do I need a CISO? A guide for NY Financial Advisors

New York State has instituted significant cybersecurity regulations. Do they apply to Registered Investment Advisors (RIA)? While the Department of Financial Services does not regulate RIAs, following their guidance can help to protect the organization. Additionally, RIAs that handle insurance or certain other securities are subject to the regulation. Appointing a Chief Information Security Officer…

18th July 2017

NY Cybersecurity Regs: Four Things Every New York State Financial Institution MUST DO!

Wondering about how to comply with New York DFS Cybersecurity regulations? You’re not alone. New York is a pioneer in instituting regulations for cybersecurity in the financial services sector. Anyone subject to the banking law, insurance law or financial services law needs to accomplish goals to show compliance. So what you have to do? Here…

28th June 2017

Why Fractional CISO: How medium-sized businesses can improve their cybersecurity posture

Many medium-sized businesses know that they are not doing enough to address cybersecurity threats. The frequent news reports of cyberattacks are unsettling. Many of them occur because of human error, not because of technology. The good guys have to be nearly perfect but the bad guys only have to find a single vulnerability. People, Process…

« Previous 1 … 16 17 18 19 20 … 25 Next