Almost a year into a post-GDPR world, the question for many cloud service providers is still, “How do I evidence GDPR compliance?” With no meaningful …
Bottom Line Up Front (BLUF): By design, it is up to individual audit firms (CPA firms) to decide, based upon their understanding of the SOC 2 requirem…
Many modern forms of malware are now file-less and rely on Command & Control (C2) infrastructure to assist outsiders with gaining unauthorized acc…
One of the biggest threats facing enterprises are outsiders plugging directly into an Ethernet port and being granted instant, unauthenticated access …
Developing a cyber security baseline can be daunting. Oftentimes the burden falls on the Chief Information Officer or Chief Technology Officer. These …
Business boils down to one thing: People People are the most challenging (and rewarding) part of a successful business. And I mean the full lifecycle …
When most people think of hacking, they think of what Hollywood portrays. In a dark basement, a hooded, perhaps tattooed outcast rapidly types nonsens…
There is understandably quite a bit of confusion in the market place when it comes to offensive security engagements. Consultants use a number of term…
The EU-US Privacy Shield may soon be a thing of the past after the European Parliament passed a resolution on July 5th , calling on the European Commi…
The Data Protection Impact Assessment (DPIA) is a significant new burden on data controllers under GDPR. As many have noted, GDPR does not clearly out…
I recently finished the book "Traction" by Gino Wickman. Next to Scaling-Up by Verne Harnish, I think it is one of the most actionable business books …
Mention "Risk Committee" or "Enterprise Risk" to upper management and you will probably get an eye role. If you suggest a standing meeting about risk …