Blog Information Security

Tag: cybersecurityX

• Security Leadership Series: Overcoming the Curse of Knowledge 11/19/2018  |  By: Mark Burnette, CPA, CISSP, CISM, CISA, CRISC, CGEIT, ITIL, QSA, Shareholder, Practice Leader of Risk Services

  Making cybersecurity a topic of conversation with C-level leaders is one of the most important goals for cybersecurity professionals. Ultimately, those are the people who are…
  read more >

  Posted in: Security Consulting

  Tagged with: cybersecurity leadership, curse of knowledge
• How Dressing Like Batman Can Help You Be Better at Cybersecurity 11/06/2018  |  By: Mark Burnette, CPA, CISSP, CISM, CISA, CRISC, CGEIT, ITIL, QSA, Shareholder, Practice Leader of Risk Services

  A few years ago, on the day after Halloween, my wife bought a Batman costume off the clearance rack. It was heavily discounted, and she figured I might be able to use it for a…
  read more >

  Posted in: Security Consulting

  Tagged with: cybersecurity, cybersecurity leadership
• Boards and Cybersecurity: Does Your Company Have a Comprehensive Cybersecurity Program? 11/05/2018  |  By: Mark Johnson, CISSP, Shareholder, Information Security

  There are no one-size-fits-all cybersecurity programs. I wish I could tell you to “Do this. Do that. Don’t do these other things.” But, that’s not reality. Just like a tailored…
  read more >

  Posted in: Security Consulting, Compliance and Audit

  Tagged with: boards and cybersecurity
• Security Leadership Series: Be a Code Talker, Not Chicken Little 10/22/2018  |  By: Mark Burnette, CPA, CISSP, CISM, CISA, CRISC, CGEIT, ITIL, QSA, Shareholder, Practice Leader of Risk Services

  If you’re not familiar with the popular children’s fable Chicken Little, it’s the tale of a chicken who walks around proclaiming, “The sky is falling!” because he believes…
  read more >

  Posted in: Security Consulting

  Tagged with: cybersecurity warnings, cybersecurity leadership, cybersecurity communication
• Security Leadership Series: An Important Principle for Every Cybersecurity Leader to Remember 09/20/2018  |  By: Mark Burnette, CPA, CISSP, CISM, CISA, CRISC, CGEIT, ITIL, QSA, Shareholder, Practice Leader of Risk Services

  Here’s a principle every cybersecurity leader needs to acknowledge: Cybersecurity is not the single most important element of your company’s business. In reality, most businesses…
  read more >

  Posted in: Security Consulting

  Tagged with: information security leadership, cybersecurity
• Question for the Boardroom: Is Management Involving the CISO in Strategic Business Decisions? 09/11/2018  |  By: Mark Johnson, CISSP, Shareholder, Information Security

  Big decisions happen quickly. As a Board of Directors, you know that. Often, big decisions don’t involve key leadership within the company like the security team. This leaves them…
  read more >

  Posted in: Security Consulting

  Tagged with: cybersecurity in the boardroom, CISO
• Why Boards Should Stop Searching for the ROI on Cybersecurity 08/14/2018  |  By: Mark Johnson, CISSP, Shareholder, Information Security

  Stop. Just stop. If you’re looking for the ROI on cybersecurity, you’re not going to find it. These are not words you’d expect to hear from a shareholder at a cybersecurity…
  read more >

  Posted in: Security Consulting

  Tagged with: cybersecurity ROI, boards and cybersecurity
• How to Build a Cybersecurity Program from the Ground Up 03/21/2018  |  By: Mark Burnette, CPA, CISSP, CISM, CISA, CRISC, CGEIT, ITIL, QSA, Shareholder, Practice Leader of Risk Services

  Building an effective cybersecurity program is like building a three-legged stool. It requires a commitment to people, processes, and technology. All three must be working…
  read more >

  Posted in: Security Consulting

  Tagged with: building a cybersecurity program
• The 2018 Guide to Cybersecurity Operations Best Practices 01/24/2018  |  By: Jason Riddle, CISSP, President, Information Security

  Identifying and utilizing best practices for cybersecurity operations is more complicated than it was a few years ago. Between constant patch updates, attacks that have never been…
  read more >

  Posted in: Managed Security Services

  Tagged with: cybersecurity best practices
• Key Differences Between SOC 2 and SOC for Cybersecurity 10/30/2017  |  By: Mark Burnette, CPA, CISSP, CISM, CISA, CRISC, CGEIT, ITIL, QSA, Shareholder, Practice Leader of Risk Services

  The potential danger and frequency of data breaches have increased exponentially over the past few years. According to the Identity Theft Resource Center, the number of recorded…
  read more >

  Posted in: Security Consulting

  Tagged with: SOC for Cybersecurity, Risk Assessments, SOC 2, data breach