If you don’t have a cybersecurity background, but wanted to have a discussion with those that do, the U.K. National Cyber Security Centre details five questions board members should ask their organization's chief information security officers about cybersecurity preparedness: 1. How do we defend the organization against phishing attacks? 2. [...]
No. 1: Secure Your Operations Including but not limited to: (Assemble a team of experts. Secure physical areas. Stop additional data loss. Remove improperly posted information. Interview people who discovered the breach. Do not destroy any forensic evidence.) No. 2: Fix Vulnerabilities It’s necessary to have a long-term plan when [...]
Amazon's Key door-unlocking system has been hacked again. A Bay Area security researcher posted a proof of concept video on twitter this past Sunday showing how an unknown device placed near a Key-compatible smart lock can interfere with the lock's locking mechanism, letting anyone into a Key-enabled home. Amazon is [...]
The digital world gives us access to a wealth of knowledge, allowing us to carry entire libraries in the palms of our hands, but it also gives us access to criminals, spammers, fake news makers, trolls, haters, frenemies, enemies and a wide range of people looking to deceive us. When [...]
Looking closely at the digital forensics of many breaches, the acquired evidence often points to a similar root cause — people are getting tricked into doing things they shouldn’t be doing. Year after year, millions of people simply can’t resist the temptation of clicking on those interesting phishing emails, not [...]
The increased spotlight on cybersecurity has required CEOs, boards of directors, and the entire C-suite to establish proper corporate governance to manage cyber security risks. This includes developing comprehensive policies, procedures, and reporting structures. Regulators expect organizations to develop and implement proper oversight and risk ownership protocols. To regulators, cybersecurity [...]
In the digital world we live in, information is the new currency, and that currency needs to be protected. Good cybersecurity awareness is not just for organizations and not just for governments — it’s for individuals everywhere. In a connected world, we each have a responsibility to protect ourselves and [...]
Focus on managing third party service providers and the potential risks those relationships pose. From a regulatory perspective, understand the cyber maturity of your vendor partners, what data they have access to, and where they might be vulnerable to cybersecurity threats. Weak vendor security controls translate to a weak cybersecurity [...]
Here are some cybersecurity questions to think about that will make your life easier when the seemingly unthinkable (yet highly probable) happens. How will the business run if there is a data breach? Who needs to be in the room to make decisions in the event of a breach & [...]
Ransomware has become the most popular form of malware in data security breaches, according to the 2018 Verizon Data Breach Investigation Report. The report is based on 53,308 security incidents, 2,216 data breaches, and 67 contributors globally. Ransomware started to appear in 2013 and has become the top variety of [...]