Risk Management June 9, 2023

Security awareness training 101: Which employees need it?

4 min read - To understand why you need cybersecurity awareness training, you must first understand employees’ outsized roles in security breaches. “People remain — by far — the weakest link in an organization’s cybersecurity defenses,” noted Verizon on the release of their 2022…

Risk Management June 14, 2022

How to Become World Class at Cyber Hygiene

2 min read - In a recent podcast from England Rugby Union coach Eddie Jones, he made reference to the adage about trying to be “world-class at things that require zero effort.”     Relating that adage to the work environment, people can become world-class…

Risk Management May 12, 2022

62% of Surveyed Organizations Hit By Supply Chain Attacks in 2021

4 min read - You’ve heard more about the supply chain in the past two years than you ever expected, or likely wanted. But, as a cybersecurity professional, you now have even more reason to pay attention besides not being able to get your…

Incident Response March 15, 2022

It’s Not Fair, But Cyber Crime Is Cheap

4 min read - It may not be fair, but cyber crime is cheap. How cheap? You can buy ransomware for as little as $66, or hire a threat actor for $250. And if you look hard enough, you can even get a phishing…

Data Protection January 12, 2022

Arming CISOs With the Skills to Combat Disinformation

4 min read - As if chief information security officers (CISOs) did not have enough to deal with, add one more issue to their plates: information warfare. These operations now target private and non-governmental entities almost as often as they involve world powers. That’s…

CISO December 21, 2021

What Cybersecurity Professionals Are Wishing for This Holiday Season

3 min read - After another tough year in the cybersecurity trenches, security professionals deserve a well-earned holiday, along with some powerful gifts to help them cope with the new year’s daunting threat landscape and the security challenges to come.  Here’s our rundown of…

CISO October 21, 2021

Non-Traditional Cybersecurity Career Paths: Entering the Industry

8 min read - There are lots of ways organizations can work to address the cybersecurity skills gap. Working with young people, providing skilling for students and implementing zero trust helps. So does amplifying gender diversity and promoting respect in the workplace. Organizations can…

Identity & Access October 11, 2021

How to Fight Phishing: Don’t Get Fugu’ed!

3 min read - Threat actors who deploy phishing and other attacks have an advantage: they don’t operate within any space of decent norms or legal jurisdiction. Accept that, and you quickly understand why the cybersecurity battle feels like fighting a tire fire with…