by Michael Walsh | Feb 14, 2017 | InfoSec Strategies
As I get to know my new Pivot Point Security customers – while also reflecting back on my past Information Security employers, consulting engagements, and the information security strategies I’ve implemented – there’s a common theme that often pops up. It’s: “Oh,...
by Alex Fugairon | Jan 26, 2017 | InfoSec Risk Assessment
The “Goldilocks and the Three Bears” Approach I’m sure most people are familiar with the children’s tale of “Goldilocks and the Three Bears.” What does that have to do with security risk assessments? I’ve found that when it comes to assessing information...
by John Verry | Jan 5, 2017 | InfoSec Strategies
Everyone is an InfoSec target. Although big companies are often more vulnerable to strategic attacks, small business cyber attacks are also common because many attackers use an opportunistic approach that puts everyone at risk. Despite what Vogue magazine tells women...
by John Verry | Dec 8, 2016 | ISO 27001 Certification
Sitting through Stage 1 of an ISO 27001 certification audit for the first time can feel pretty daunting—even for a seasoned information security professional. Stage 1 is unusual in that focuses on the operation of the Information Security Management System (ISMS), not...
by Chris Banta | Nov 8, 2016 | ISO 27001 Certification
As a security professional with over 20 years’ experience working with multiple frameworks and verticals across the security industry, one of the issues I’m most commonly asked about is Vulnerability Management. Organizations of all sizes struggle with how to...
