Blog Information Security

Tag: cybersecurityX

• Security Leadership Series: An Important Principle for Every Cybersecurity Leader to Remember 09/20/2018  |  By: Mark Burnette, CPA, CISSP, CISM, CISA, CRISC, CGEIT, ITIL, QSA, Shareholder, Practice Leader of Risk Services

  Here’s a principle every cybersecurity leader needs to acknowledge: Cybersecurity is not the single most important element of your company’s business. In reality, most businesses…
  read more >

  Posted in: Security Consulting

  Tagged with: information security leadership, cybersecurity
• Question for the Boardroom: Is Management Involving the CISO in Strategic Business Decisions? 09/11/2018  |  By: Mark Johnson, CISSP, Shareholder, Information Security

  Big decisions happen quickly. As a Board of Directors, you know that. Often, big decisions don’t involve key leadership within the company like the security team. This leaves them…
  read more >

  Posted in: Security Consulting

  Tagged with: cybersecurity in the boardroom, CISO
• Why Boards Should Stop Searching for the ROI on Cybersecurity 08/14/2018  |  By: Mark Johnson, CISSP, Shareholder, Information Security

  Stop. Just stop. If you’re looking for the ROI on cybersecurity, you’re not going to find it. These are not words you’d expect to hear from a shareholder at a cybersecurity…
  read more >

  Posted in: Security Consulting

  Tagged with: cybersecurity ROI, boards and cybersecurity
• How to Build a Cybersecurity Program from the Ground Up 03/21/2018  |  By: Mark Burnette, CPA, CISSP, CISM, CISA, CRISC, CGEIT, ITIL, QSA, Shareholder, Practice Leader of Risk Services

  Building an effective cybersecurity program is like building a three-legged stool. It requires a commitment to people, processes, and technology. All three must be working…
  read more >

  Posted in: Security Consulting

  Tagged with: building a cybersecurity program
• The 2018 Guide to Cybersecurity Operations Best Practices 01/24/2018  |  By: Jason Riddle, CISSP, President, Information Security

  Identifying and utilizing best practices for cybersecurity operations is more complicated than it was a few years ago. Between constant patch updates, attacks that have never been…
  read more >

  Posted in: Managed Security Services

  Tagged with: cybersecurity best practices
• Key Differences Between SOC 2 and SOC for Cybersecurity 10/30/2017  |  By: Mark Burnette, CPA, CISSP, CISM, CISA, CRISC, CGEIT, ITIL, QSA, Shareholder, Practice Leader of Risk Services

  The potential danger and frequency of data breaches have increased exponentially over the past few years. According to the Identity Theft Resource Center, the number of recorded…
  read more >

  Posted in: Security Consulting

  Tagged with: SOC for Cybersecurity, Risk Assessments, SOC 2, data breach
• The Top 3 Cybersecurity Threats of 2017 (and How to Avoid Them)   10/12/2017

  Cybersecurity is no longer a topic discussed only among IT professionals and Chief Information Security Officers. As large-scale breaches such as Equifax and WannaCry continue to…
  read more >

  Posted in: Managed Security Services

  Tagged with: cybersecurity, data breach, phishing, ransomware
• What's the Difference Between SOC for Cybersecurity & Risk Assessments? 09/12/2017  |  By: Mark Burnette, CPA, CISSP, CISM, CISA, CRISC, CGEIT, ITIL, QSA, Shareholder, Practice Leader of Risk Services

  Cybersecurity has become an increasingly important priority for almost every major corporation, hospital, financial institution, law firm, and retailer in today’s world. As a…
  read more >

  Posted in: Security Consulting

  Tagged with: SOC for Cybersecurity, Risk Assessments
• Breaking Down Silos Between Boards & Cybersecurity Teams 08/23/2017  |  By: Jason Riddle, CISSP, President, Information Security

  Cyberattacks and data breaches have become one of the biggest threats to businesses over the past several years. As a result, many senior-level leaders and board directors are…
  read more >

  Posted in: Managed Security Services

  Tagged with: cybersecurity, IT, data management, data breach
• A Brief History of Ransomware (and How to Protect Your Organization in the Future) 07/19/2017  |  By: Bill Dean, CCE, GCIH, GCFA, GPEN, Senior Manager

  After the unprecedented WannaCry cyber attack in May, ransomware has moved from an issue primarily discussed by information security professionals to a persistent topic discussed…
  read more >

  Posted in: Security Consulting

  Tagged with: ransomware, cyber attack, cybersecurity