True Confessions of a Real Life Virtual CISO
Trust, but verify.
These famous words of Ronald Reagan, who, incidentally, would make a fantastic CISO, are also the simplest explanati...
24
Mar
Security Awareness Training
21
Aug
80/20 Cyber Security, Part 4—The 3 “Damage Control” Controls
If you’ve been following along with this multi-part post, you’ve seen how to mitigate about 80% of your InfoSec risk with 20% of the e...
20
Aug
80/20 Cyber Security, Part 3—The 3 Essential Technical Controls
In part 1 of this post I applied “the 80/20 rule” to cyber security. The goal is to mitigate about 80% of your InfoSec risk with 20% o...
13
Jun
A “Phishing” Story — Beware of This New Twist
A client called the other day to tell me about a highly evolved phishing attempt cast straight at his law firm. Kudos to their employee...
19
Feb
You are Missing the Most Important Security Awareness Training Module…
Lots of companies offer good Security Awareness Training, including KnowBe4, Wombat, eLearning, MediaPro, SANS, and Pivot Point Securit...