22 Apr InfoSec Strategies Can There Ever Be “Just One” Cybersecurity Standard? March 16, 2023 By Richard Barrus A wise CISO once said: “The only thing worse than no cybersecurity guidance is too much cybersecurity guidance.” In today’s world, we a...Continue reading
22 Jul InfoSec Strategies Why “Check-the-Box” Policies are a VERY Bad Idea July 22, 2019 By Richard Barrus It sometimes happens in the course of supporting clients during ISO 27001 certification projects or other information security assessme...Continue reading
09 May InfoSec Strategies You Can’t Afford to Ignore CCPA Like You Ignored GDPR May 9, 2019 By John Verry If your company is like many of our SMB/SME clients, GDPR was a short-lived event. You heard about the regulation, kicked-off a GDPR pr...Continue reading
02 Jan ISMS Consulting ABA Opinion 483 from an Information Security Expert’s Point of View January 2, 2019 By Richard Barrus Legal firms are no strangers to regulations. But cybersecurity regulations coming from the American Bar Association (ABA)… that is a ne...Continue reading
27 Sep Government GDPR and the California Consumer Privacy Act of 2018 Compared September 27, 2018 By John Verry With the EU’s GDPR now in force and California just enacting its Consumer Privacy Act (AB 375), the two-minute warning has sounded for ...Continue reading