What is a Denial of Service Attack (DoS)? A denial of service attack occurs when a malicious individual or element attempts or is successful at blocking access to a workstation, server, internal network, Internet, or other infrastructure services making Read more…
In the past, have you worked with third-parties and other third-parties that maintained a set or subset of your data? Is it possible that prior third-parties had hardware that was owned by your company? Is it possible that there Read more…
What are “Access Reviews”? Over time, as workforce members leave the company or move to other positions within the same organization, they no longer need access to certain systems, or they require access to new systems. Periodically, it is important Read more…
Is your organization in a situation where a customer or regulator is requiring an independent information security certification? Some of the required certifications that are becoming mainstream include CMMC 2.0, HITRUST, PCI, SOC 2, and ISO 27001:2013. If you’ve Read more…
We’re familiar with the “as a service” offerings that are commonly used to support or augment our IT applications, platforms, and infrastructure: “Saas” – Software as a Service – Typically, these are best known as cloud applications. These days, we Read more…
Confidential electronic information can be stored in photo copiers, multi-function output devices, tablets, laptops, desktop workstations, and a wide array of electronic devices and media. In some instances, it may not be readily apparent to the user that confidential information Read more…
We know the routine. Open an application or go to a web site, enter in your user ID, and authenticate with a password. Lately, however, you have noticed a third step. Once you enter your password, you receive another instruction Read more…
Why are policies important? When an organization first undertakes the effort of implementing an Information Security Framework or Management System, a key step is the development of policies, procedures, and standards. Every information security framework requires the development and implementation Read more…
Since the original publication of this briefing and reminder, there continue to be differing opinions on exactly what percentage of data breaches are caused by human error. Originally, those percentages ranged from 25% to 75%, based on the subjectivity of Read more…
Often, organizations that wish to mitigate the security risk of their networks, choose to divide them in separate network segments or domains. When architecting and establishing these domains, the design is typically based on the sensitivity of information, organization of Read more…