Risk Management October 26, 2023

Why cybersecurity training isn’t working (and how to fix it)

3 min read - Early to a meeting, an employee decides to check direct messages on their favorite social network. Uh, oh. A message from the social network’s security team says their account has been hacked. They’ll need to click on the link to…

Risk Management June 9, 2023

Security awareness training 101: Which employees need it?

4 min read - To understand why you need cybersecurity awareness training, you must first understand employees’ outsized roles in security breaches. “People remain — by far — the weakest link in an organization’s cybersecurity defenses,” noted Verizon on the release of their 2022…

CISO May 4, 2023

What “beginner” skills do security leaders need to refresh?

4 min read - The chief information security officer (CISO) was once a highly technical role primarily focused on security. But now, the role is evolving. Modern security leaders must work across divisions to secure technology and help meet business objectives. To stay relevant, the…

Risk Management March 27, 2023

The role of human resources in cybersecurity

3 min read - The human resources (HR) department is an integral part of an organization. They work with all departments with a wider reach than even IT. As a highly visible department, HR can support and improve an organization’s security posture through employee…

CISO March 10, 2023

How to solve the people problem in cybersecurity

4 min read - You may think this article is going to discuss how users are one of the biggest challenges to cybersecurity. After all, employees are known to click on unverified links, download malicious files and neglect to change their passwords. And then…

Incident Response March 6, 2023

The role of marketing and PR in incident response

3 min read - Responding to a cyber incident requires teamwork across departments and disciplines. Technical incident responders must work to halt incoming attacks while the communications teams develop a public response. Clear communication is essential. Communication strategies differ before and after a cyber…

CISO April 5, 2022

Why You Need a Diversity and Inclusion Program in Cybersecurity

4 min read - This is a time of major changes for businesses and agencies. That includes the move to the cloud and the shift to being digital-first. So, cybersecurity has moved to a front-and-center position in many companies and industries. When talking about…

Threat Hunting March 17, 2022

Top 5 Cybersecurity Podcasts to Follow in 2022

3 min read - One of my favorite parts about talking to cybersecurity professionals is asking how they landed in the industry. Few tell me about a straight path to their career, like attending college or earning a certification. Most launch into an interesting…

Incident Response January 26, 2022

10 Years Later, What Did LulzSec Mean for Cybersecurity?

6 min read - While working on several articles on the WannaCry attacks for my job as a cybersecurity journalist, I learned about LulzSec, which ranked among the most notable attacks of the 2010s. I wanted to find out more about the group that…

Zero Trust January 19, 2022

Insider Threats: How to Combat Workplace Disinformation

4 min read - Who hasn’t heard about disinformation or fake news? And for those responsible for security, who hasn’t heard about the risk of insider threats? Both issues are well known, but how disinformation can affect cyber risk management might not be so…