When you have discovered a vulnerability, have you ever been confused about how to determine the risk level of that vulnerability or the time-frame in which that vulnerability should be addressed? Among the many publications in the NIST (National Institute of Standards and Technology) library, there are tools to Read more…
Have you noticed recently that many of the web sites you visit now have a link or banner that displays additional information for “California Residents”? When clicking on the link, you learn about all the additional protections around the privacy and security of your personal information. For example, a few Read more…
When considering security, most of the attention is placed on the confidentially of sensitive information. Controls are put in place to ensure that the appropriate individuals have the right access to information. Security, however, address three areas protecting the sensitive information: Confidentiality Integrity Availability The availability of information is as Read more…
As we look at the history of ransomware attacks, the primary attack vector has been through the reliance on end user activity and error. Most of these attacks are carried out by the end user clicking on a malicious link in an email or on a web site and the Read more…
The news has been dominated recently by reports of ransomware attacks. Specifically, we’ve heard about the attacks in the gas pipeline and meat processing industries. Though the news media is treating this as if it were a breaking event, the reality is that these types of attacks have been threatening Read more…
These days, it is more and more common to use cloud, technology, and integration partners in our IT environments. Consider the use of a cloud-software or application provider. You me leverage these services to deliver your respective products and services or as a means of operating business. Take, for Read more…
Responding to Information Security Questionnaires Companies are placing an increased amount of attention on their information security exposure in the supply chain. While establishing a relationship and doing business with you, your customers have a vested interest in understanding the risk of exposing their protected information to additional downstream parties. Read more…
Collaboration Tools and Information and Security As we navigate our work environments through a pandemic, technology has certainly played a key role, contributing to our ability to meet and work collaboratively. We have seen file sharing, web conferencing, electronic mail, and other collaboration platforms take the place of water cooler Read more…
Disclosure of Information Enforcement Information Security focuses on the controls necessary to limit access to sensitive information and reduce fault tolerance with the objective of preventing associated incidents and breaches. However, at the same time we are working to reduce exposure, it is of vital importance to have this information Read more…