Webinar: How to Build a Security Program Budget
Check out our webinar from Shane Peden and Christian Hyatt in which they discuss how to design a security program budget and get it approved. https://youtu.be/Q4LAtW5WqYk
How to Recruit, Develop, and Keep Top Cybersecurity Talent (Part 5)
This blog post on developing and retaining security professionals at your high growth technology company is part of a multi-part series on designing an information security program in alignment with [...]
Webinar: Security is Table Stakes for Healthcare Technology
Check out our webinar from Christian Hyatt and Shane Peden where they discuss roadmaps and business cases for security, privacy, and compliance for healthcare technology companies. https://youtu.be/z4aFZnPWGRU
How to Read a HITRUST Validated Assessment
Understanding the results of a HITRUST engagement and how to use them. During your vendor due diligence process, a vendor sends you their HITRUST report. What exactly does this report [...]
Sudo: Its History and How to Abuse It
A quick explanation of one of the most influential and misconfigured computing utilities. A classic view into some of the tools use by pentesters at risk3sixty. You’re a [...]
So, you got a pentest. Now what?
How to progress toward a truly secure organization and infrastructure after penetration testing. You did it – you paid for penetration testing services. Whether it was to fulfill a potential [...]
Past to Present – Lessons From the NotPetya Ransomware
And how they are still relevant today. On a warm, sunny day in July 2017, one of the world’s most catastrophic and rampant demonstrations of ransomware began. Commonly referred to [...]
An Introduction to Active Defense
Global research and advisory firm, Gartner, forecasts that information security spending will exceed $124 billion in 2019, yet cyber defenses continue to fail. Organizations large and small continue to experience [...]
If It Can Talk to Networks, It Can Walk Across Them
Why the Internet of Things is a penetration tester’s most valuable asset. As technology moves at a seemingly exponential rate of growth and changes every day, more and more devices [...]
ISO 27001: Understanding Security Roles and Responsibilities and Why They Are Vital to the Success of Your Security Program
When building your Information Security Management System (ISMS) as part of ISO 27001 program implementation one of the most important elements of the system of management for your security program [...]