Cybersecurity is often an elaborate medieval fortress, with firewalls and passwords and other types of static defenses that keep the criminals at bay by simply not allowing them inside a…
Read More
As cybercrime becomes more prevalent, international governing bodies and individual governments have set standards for cybersecurity in companies that handle their customers’ data. I’ve previously talked about the FTC and…
How does the Recovery function benefit the affected organization if they do it well? According to publicly available data, a company can lose 6.5% of its customer base in the…
What can we learn from Real-Life Examples? Retail giants Target and Home Depot are two notorious examples of large-scale cyber-attacks. In both cases, tens of millions of credit cards were…
How to Apply NIST Cybersecurity Framework to your Organization Remember, in the last post, when I referred to DE.CM-7? I’m going to use this specific code again for my…
What is ACP? To wrap things up in this series, I’m going to explain how ACP (attorney-client privilege) and AWP (attorney work product) apply to your company’s cybersecurity efforts. To…
What can ACP do for your company? As cybercriminals threaten more and more companies in recent years, the world of cybersecurity has had a new layer added to it; Law….
Who is the Target? In my previous article on NotPetya, I talked about other targets of the attack, the consequences, and who we think is behind NotPetya. This post will…
Cybersecurity Is a Business Risk These days, I encourage organizations to manage cybersecurity as a business risk on par with sales, order fulfillment, and accounts receivable. This is because not…
Most executives want to be better cyber risk managers. They want to manage cybersecurity risks in the same thoughtful and intelligent way as they manage other aspects of their business….