Blog Information Security

Tag: cybersecurityX

• Security Leadership Series: You Know Cybersecurity is More Than Compliance. But, Do They? 03/21/2019  |  By: Mark Burnette, CPA, CISSP, CISM, CISA, CRISC, CGEIT, ITIL, QSA, Shareholder, Practice Leader of Risk Services

  How do you know if your cybersecurity program is truly working? That’s the million-dollar (or for most businesses, the tens-of-thousands of dollar) question. And, if you’re lucky…
  read more >

  Posted in: Security Consulting, Compliance and Audit

  Tagged with: cybersecurity leadership; IT compliance
• Everything Your Board Should Know about Cybersecurity Insurance 03/12/2019  |  By: Mark Johnson, CISSP, Shareholder, Information Security

  If you purchase a car with good safety features, you hope you never need to use them. In an ideal world, you’d be 100% safe on the road, and those safety features would sit unused…
  read more >

  Posted in: Security Consulting, Compliance and Audit

  Tagged with: cybersecurity insurance, Boards and cybersecurity
• Gaining Comfort Around the Company's Legal Processes 02/11/2019  |  By: Mark Johnson, CISSP, Shareholder, Information Security

  Just look around. That’s all it takes to notice that today’s technological landscape is wildly different from what it used to be. With an abundance of new devices comes an…
  read more >

  Posted in: Security Consulting, Compliance and Audit

  Tagged with: cybersecurity laws, cybersecurity legal processes
• Security Leadership Series: Don't Be the Only Person Carrying the Mantle for Cybersecurity 02/06/2019  |  By: Mark Burnette, CPA, CISSP, CISM, CISA, CRISC, CGEIT, ITIL, QSA, Shareholder, Practice Leader of Risk Services

  It’s easy to feel like a lone wolf when you work in cybersecurity (or a lone wolfpack, if you’re part of a cybersecurity team). While the work you do impacts every area of your…
  read more >

  Posted in: Security Consulting

  Tagged with: cybersecurity leadership
• Tips on Cybersecurity Vendor Risk Management for the Board of Directors 01/08/2019  |  By: Mark Johnson, CISSP, Shareholder, Information Security

  Think about your vendors. Each one presents a unique risk to you. Whether it’s a risk to information security or the availability of your company’s product or service, all vendor…
  read more >

  Posted in: Security Consulting, Security and Risk Services

  Tagged with: cybersecurity vendor risk management, information security vendors
• Security Leadership Series: Don't Say, "No," Say, "Not that Way" 12/10/2018  |  By: Mark Burnette, CPA, CISSP, CISM, CISA, CRISC, CGEIT, ITIL, QSA, Shareholder, Practice Leader of Risk Services

  Security leaders are, by their nature, paranoid. We spend so much time dealing with security issues and seeing our peers dealing with them, that it's natural to want to freak out…
  read more >

  Posted in: Security Consulting

  Tagged with: security leadership, cybersecurity paranoia
• Questions for the Boardroom: Is the Company Fostering a Culture of Compliance and Security? 12/06/2018  |  By: Mark Johnson, CISSP, Shareholder, Information Security

  Here’s a fact: Employees at every organization create, handle, and manipulate sensitive data daily. It’s their job. And, that means employees are the first line of defense for…
  read more >

  Posted in: Compliance and Audit, Security Consulting

  Tagged with: boards and cybersecurity, culture of compliance
• Security Leadership Series: Overcoming the Curse of Knowledge 11/19/2018  |  By: Mark Burnette, CPA, CISSP, CISM, CISA, CRISC, CGEIT, ITIL, QSA, Shareholder, Practice Leader of Risk Services

  Making cybersecurity a topic of conversation with C-level leaders is one of the most important goals for cybersecurity professionals. Ultimately, those are the people who are…
  read more >

  Posted in: Security Consulting

  Tagged with: cybersecurity leadership, curse of knowledge
• How Dressing Like Batman Can Help You Be Better at Cybersecurity 11/06/2018  |  By: Mark Burnette, CPA, CISSP, CISM, CISA, CRISC, CGEIT, ITIL, QSA, Shareholder, Practice Leader of Risk Services

  A few years ago, on the day after Halloween, my wife bought a Batman costume off the clearance rack. It was heavily discounted, and she figured I might be able to use it for a…
  read more >

  Posted in: Security Consulting

  Tagged with: cybersecurity, cybersecurity leadership
• Boards and Cybersecurity: Does Your Company Have a Comprehensive Cybersecurity Program? 11/05/2018  |  By: Mark Johnson, CISSP, Shareholder, Information Security

  There are no one-size-fits-all cybersecurity programs. I wish I could tell you to “Do this. Do that. Don’t do these other things.” But, that’s not reality. Just like a tailored…
  read more >

  Posted in: Security Consulting, Compliance and Audit

  Tagged with: boards and cybersecurity