Blog

When it comes to creating a cybersecurity process that can consistently translate security expectations into actionable tactics, you need a framework. Frameworks are how regulations for data confidentiality and safety are communicated and enforced in many industries. For example, any company that gathers and stores information about your health or medical care must be compliant with HIPAA. What is a Compliance Framework?A cybersecurity compliance framework is a set of guidelines and best practices that enable consistency and clear communication about security expectations. Compliance frameworks communicate cybersecurity standards, but they don’t provide instructions for exactly how those standards should be met. […]

What do cyber-criminals do when they need more computing power? They steal it, of course, and something connected to your network could be captured and enslaved in a global botnet army if you haven’t hardened your systems. This is what occurred in 2016 when a huge Denial of Service attack targeted high-profile websites and hosting providers.* Here’s how it happens. A cyber-criminal searches the internet for devices that have weak, default or no passwords or other holes that can be exploited. When they find an open door, they confiscate the computing power and turn it in the direction they want […]

When you want to know if what you’re doing to protect your organization from cyber-attack is effective, you should check your security controls with a penetration test (or pen test). A pen test simulates what a real attacker might do to get into your network and capture the credentials and privileges that would give them ultimate power to do anything they want in your IT systems. Discovering if your systems can be compromised is a good thing for you to do if you’re a business leader managing risk. However, the need for a pen test may be dictated by someone […]