When you have discovered a vulnerability, have you ever been confused about how to determine the risk level of that vulnerability or the time-frame in which that vulnerability should be addressed? Among the many publications in the NIST (National Read more…
Have you noticed recently that many of the web sites you visit now have a link or banner that displays additional information for “California Residents”? When clicking on the link, you learn about all the additional protections around the privacy Read more…
When considering security, most of the attention is placed on the confidentially of sensitive information. Controls are put in place to ensure that the appropriate individuals have the right access to information. Security, however, address three areas protecting the sensitive Read more…
As we look at the history of ransomware attacks, the primary attack vector has been through the reliance on end user activity and error. Most of these attacks are carried out by the end user clicking on a malicious link Read more…
The news has been dominated recently by reports of ransomware attacks. Specifically, we’ve heard about the attacks in the gas pipeline and meat processing industries. Though the news media is treating this as if it were a breaking event, the Read more…
These days, it is more and more common to use cloud, technology, and integration partners in our IT environments. Consider the use of a cloud-software or application provider. You me leverage these services to deliver your respective products and services Read more…
Responding to Information Security Questionnaires Companies are placing an increased amount of attention on their information security exposure in the supply chain. While establishing a relationship and doing business with you, your customers have a vested interest in understanding the Read more…
Collaboration Tools and Information and Security As we navigate our work environments through a pandemic, technology has certainly played a key role, contributing to our ability to meet and work collaboratively. We have seen file sharing, web conferencing, electronic mail, Read more…
Disclosure of Information Enforcement Information Security focuses on the controls necessary to limit access to sensitive information and reduce fault tolerance with the objective of preventing associated incidents and breaches. However, at the same time we are working to reduce Read more…