Blog

28th April 2022

How to start a career in cybersecurity, according to a hiring manager.

“I’m still really interested in cybersecurity, but I had no idea getting an entry level job would be this difficult! I thought you said companies are desperate to fill these roles, and they’re basically hiring anyone who applies?” Jason lamented, after being rejected for yet another job. Jason has been working as a desktop support…

21st April 2022

Patching Keeps the Lights On (Except when it Doesn’t)

You probably don’t give much thought to lightbulbs. I wouldn’t either, except that somehow, we own a house with lots of them. We have so many that in any given week, one, two, sometimes three of them burn out. And (of course), they are not all of the same type. Some are floodlight bulbs. Some…

6th April 2022

How to get a SOC 2 certification: A comprehensive guide.

Your growing company is hitting a sales plateau – it’s becoming difficult to close deals with security-conscious customers. Your sales and technical teams are getting bogged down with cybersecurity questionnaires and questions about a “SOC 2.” You need to know how to get a SOC 2 certification so you can remove this roadblock your company…

31st March 2022

How to read a SOC 2 Report

The output of a SOC 2 audit isn’t a simple stamp of approval – it’s a detailed report about the security program.

24th March 2022

I have “Zero Trust” in VPNs.

You should probably have zero trust in your VPN service: You’re enjoying a quiet Friday afternoon in your office when you receive a stomach-dropping alert from one of your systems. A co-worker of yours, Jane, has exfiltrated thousands of your customer records from the company database. A distraught Jane is questioned by human resources, she…

17th March 2022

Don’t be an Attacker’s First Option

Longtime readers of this blog (thank you!) know that for the past several years, I have been coaching the basketball teams of both of my children. When the kids were really little, it was mostly about teaching fundamentals and getting them comfortable with the rules of the game. However, now that my son is playing…

10th March 2022

Gmail vs Outlook for Business Email Security

We recently had this exchange regarding email security with a client: Client (Microsoft user): We got acquired and now our parent company wants us to move from Microsoft Office 365 to Google Workspace. vCISO and me: Oof, that sounds like a lot of work! But frankly, we’re a little relieved to hear that. Why would…

3rd March 2022

Are you tracking root logins in AWS?

The root account in AWS is the master key to all of your organization’s cloud-hosted systems, activities, and services. If an attacker gets in: game over. It must be well-protected. A properly configured AWS setup will require very infrequent root logins. Most responsibilities should be doled out to other users with fewer permissions. The root…

24th February 2022

E-commerce Fraud and how your Business can Avoid it

Last week, your business’s e-commerce sales were much higher than forecasted and it seemed that orders would continue to fly in – that is until you received a notification from customer support informing you that there’s been an influx of customer complaints and credit card chargebacks. What could have gone wrong? Was there an issue…

17th February 2022

The Asset of Asset Management

Can you guess what is the most feared day in the Black Family household? If you said, “Any day in which Rob needs to shovel two feet of snow,” we are going to give you partial credit. But no, it’s actually … “library book due day!” We visit our local library frequently. Most times, my…

« Previous 1 2 3 4 5 6 … 18 Next