I have been asked recently how to approach business leaders about cybersecurity when they don’t follow the breach headlines and it’s true not all executives follow these stories. Keeping your executives up to date on breach headlines is a great way to make security top of mind, just as you [...]
When it comes to protecting our data, sometimes we may drop our guard while traveling. To help keep you on track, here are two simple tips to remember. Don’t leave your travel receipts, and itineraries in the back of the seat of the airline or in a cab. Take them [...]
The best way to develop cybersecurity awareness habits is to first understand that you are, in fact, a target for cybercriminals. For the most part, as a society, we seem to understand that the impacts associated with a cyber breach are pretty bad. I find that we just don’t seem [...]
9 billion credentials have been stolen since 2013. These credentials are then being sold on the Dark Web for as little as $3, thus giving those that are willing to pay remote access to your corporate devices. This may bring to mind four questions. How do I find out if [...]
Leaders within organizations need to help their employees understand why being aware is so important. And the best way to do this is by making your message specific to your audience. When encouraging employees to follow best cybersecurity practices, don’t tell them it will help keep the company secure; rather, [...]
According to Carbon Black, 70% of all attacks attempt some kind of lateral movement. Indicating that an attack in one part of your business will most likely effect another. Meaning, if you feel you have an employee that is not important enough to be trained on cybersecurity awareness, think again!
If you don’t have a cybersecurity background, but wanted to have a discussion with those that do, the U.K. National Cyber Security Centre details five questions board members should ask their organization's chief information security officers about cybersecurity preparedness: 1. How do we defend the organization against phishing attacks? 2. [...]
No. 1: Secure Your Operations Including but not limited to: (Assemble a team of experts. Secure physical areas. Stop additional data loss. Remove improperly posted information. Interview people who discovered the breach. Do not destroy any forensic evidence.) No. 2: Fix Vulnerabilities It’s necessary to have a long-term plan when [...]
The digital world gives us access to a wealth of knowledge, allowing us to carry entire libraries in the palms of our hands, but it also gives us access to criminals, spammers, fake news makers, trolls, haters, frenemies, enemies and a wide range of people looking to deceive us. When [...]
Looking closely at the digital forensics of many breaches, the acquired evidence often points to a similar root cause — people are getting tricked into doing things they shouldn’t be doing. Year after year, millions of people simply can’t resist the temptation of clicking on those interesting phishing emails, not [...]