Blog

9th May 2023

Fractional CISO Named one of Inc. Magazine’s Best Workplaces for 2023

Fractional CISO has been named to Inc. magazine’s annual Best Workplaces list. Featured in the May/June 2023 issue, which hits newsstands on May 16, 2023, and prominently featured on Inc.com, the list is the result of a comprehensive measurement of American companies that have excelled in creating exceptional workplaces and company culture, whether operating in…

4th May 2023

Do you need a cyber range in your security program?

Shockingly, organizations don’t tend to enjoy having their environments breached even by people who have the best of intentions. Take high-school student Bill Demirkapi, who identified a number of issues with Blackboard and Follett’s edtech systems. After failing to be taken seriously by the education companies, he used his ill-gotten access to send a push…

27th April 2023

Internal Audits – Keep your Cybersecurity Plates Spinning!

Plate spinning is a balancing act! While it’s hard to get a single plate started, the real difficulty is keeping them all going at once. You have to regularly check-in on the plates you started earlier – or else disaster! A good cybersecurity program will have a mix of controls, some are automated, set in…

20th April 2023

Are you Measuring Continuing Risk?

Regular readers may remember that we bought a new house last year. You’ll be pleased to learn that as recommended, I ran a short-term (48-hour) radon test in the basement. Radon, in case you missed that day in middle school science class, is a colorless, odorless, tasteless, and radioactive gas – a health hazard. And…

13th April 2023

So your company needs a cybersecurity program…

Building a cybersecurity program is a challenging and time-consuming project, especially if you have a workload full of engineering or IT responsibilities. Of course, it’s even more time-consuming if you don’t already have the cybersecurity knowledge needed to just start working on it. This is a project that many companies hire new, specialized full-time employees or…

6th April 2023

SOC 2 Cloud Security Requirements

Carefully secure your cloud environment – or risk ending up on prospective customers’ No Fly Lists! The cloud has been a boon for businesses, giving many organizations access to convenient, scalable, and cost-effective computing power – without the hassle of building and maintaining an on-site data center! The cloud has also been a boon for…

30th March 2023

Personally Identifiable Information Guide: It’s not personal, it’s business!

“It’s not personal…it’s just business.” I had just received notice of yet another data breach involving my “Personally Identifiable Information” or PII. From the perspective of the big company, you were just one of millions whose data was lost. From my perspective, it felt personal. On the other side of the coin is my concern…

23rd March 2023

3 Lessons Cybersecurity Pros can Learn from Other Careers

Sometimes, it only takes one question to change your life forever. “Why don’t you try cybersecurity instead?” My path towards my cybersecurity career started about 12 years ago. I was at a college orientation day when, after finding out that my major was computer science, one of the advisors approached me and asked me that. …

16th March 2023

The Problem(s) with Multi-factor Authentication

Back in 2007, with the company that I was working for beginning to circle the drain, it became clear that it was time for me to move on. That’s when I joined RSA Security (my first official foray into the wonderful world of cybersecurity!) and began working on SecurID, RSA’s Identity and Access Management (IAM) product. IAM focuses…

9th March 2023

What Insider Threat Actually Looks Like

Who should you be more afraid of compromising your company’s security? 1. A dude wearing a hoodie who’s loitering outside with a laptop. 2. Gary in IT. (Hint: The answer is Gary.) An intense-looking hacker wearing a hoodie and banging out command-line instructions on a laptop makes for good entertainment, but skews our ability to…

2nd March 2023

4 Lessons from the CircleCI Breach

‘Twas the night before Christmas, and all through the business, no security professionals were sleeping. Not even the CISO… The holidays are a happy season for many. For cybersecurity professionals, they have become times of anxiety. Not because of the holidays themselves, but because cyber criminals have learned that launching their attacks while security teams…

16th February 2023

Your Cybersecurity Needs a Fitness Plan

I began skiing when I was 12. I grew up in Florida, but we would come up north occasionally to visit my aunt and uncle and they would take me, my brother, and our cousins out on the slopes. I loved it and I kept skiing for many years after that. But eventually, wear, tear,…

9th February 2023

Why you need a Quantitative Cybersecurity Risk Assessment

You are presented with two arguments about who is going to win the Super Bowl this weekend. Which sounds more persuasive and informative to you? “The Philadelphia Eagles have a medium chance of winning!” “The Kansas City Chiefs have a 57% chance of winning!” Obviously, the second statement is more meaningful than the first. The…

« Previous 1 … 3 4 5 6 7 … 26 Next