Topic: Industry & Business Best Practices

From the Fall 2018 Issue

Small Business Strategies for Protecting Computer Credentials

Author(s):

Eric Hipkins, Founder and Chief Executive Officer, R9B

Hipkins-article-header-165991109

Small businesses are rapidly becoming a prime target for malicious actors. The 2018 Verizon Data Breach Investigations Report (DBIR) estimated 58% of all breaches in 2017 took place within small businesses.1 From some perspective, the 2016 DBIR mentioned small businesses only in passing and the 2017 version pointed to small businesses as making up more … Read more

From the Fall 2018 Issue

The Industrialization of Cybersecurity Red and Blue Teaming

Author(s):

Brian Contos, Chief Security Officer, Phosphorus Cybersecurity

brian-contos-article-header

The industrial revolution was brought on by purpose-built machinery and automation. A similar revolution has occurred in cybersecurity, leading to the industrialization of red and blue teaming. In large part, this industrialization has been realized through security instrumentation platforms (SIP). Security Instrumentation Platforms SIPs validate that a security system is working as needed: providing foundational … Read more

From the Fall 2018 Issue

Data Classification That Honors Business Value, Part 2

Author(s):

Bill Bonney, President, CISO DRG, Inc.

Bill-Bonney-article-header

Why Is Data Valuation Important? In an excellent article in the MIS Sloan Management Review1, the authors cite three reasons why data valuation is important – to guide decisions around 1) direct monetization, 2) internal investments, and 3) mergers and acquisitions. As noted in a previous article in this series2, there is a fourth reason … Read more

From the Summer 2018 Issue

Cybersecurity Compliance: Defending Your Small Business

Author(s):

Joy Galliford, Vice President of Cyber Programs, Joy Galliford

Young-hacker-in-data-security--168105173

We see it in the news almost daily — malicious cyber activity, security breaches, and privacy violations. But that only impacts large enterprises like Target, Citibank, and Facebook, right? Wrong. In an ever-evolving digital world, small businesses have their own set of cybersecurity responsibilities that must be met in order to do business. This is … Read more

From the Summer 2018 Issue

Building a Security Program for Small to Medium Businesses

Author(s):

Wilson Bautista, Director of Information Technology and Information Security, i3 Microsystems, a division of i3 Electronics

programer-block-header

According to a recent study from 2017 by the Enterprise Strategy Group1, 45 percent of organizations have a critical shortage of cybersecurity skills. This impacts the ability of IT teams supporting small and medium businesses (SMB) to acquire talent to fill their cybersecurity gaps. As more organizations are improving their third-party risk assessment programs, there … Read more

From the Summer 2018 Issue

Data Classification is the Key to Data Protection, Part I

Author(s):

Bill Bonney, President, CISO DRG, Inc.

bill-bonney-data-protection

“No, no!” said the Queen. “Sentence first – verdict afterwards.” “Stuff and nonsense!” said Alice loudly. “The idea of having the sentence first!” The value proposition for data is not in its protection (sentence), but in its use (verdict). In this series of articles, we’re going to explore an alternate value proposition for data classification … Read more

Insider Threat – The Unseen Risk

Author(s):

Caleb Townsend, Staff Writer, United States Cybersecurity Magazine

Giant shadow finger pointing at an employee who is an insider threat. Man is in a suit sitting at a desk on a chair. Grey background.

When it comes to threats in cybersecurity, the insider threat is not the first one that comes to mind. Malware, ransomware, hacking, and denial-of-service attacks dominate the headlines. But more often than not, an insider threat is the cause of many of these attacks. In fact, insider threats are responsible for around 43% of all data … Read more

From the Spring 2018 Issue

Better than (Project) Zero: A Cybersecurity ROI Roadmap

Author(s):

Chris Castaldo, Senior Director of Information Security, 2U

castaldo feature image

Since 2014 the mission of Google’s Project Zero has been to make the Internet a more secure place through the discovery and responsible publishing of vulnerabilities. While Google works with vendors to ensure a patch is available before details of a vulnerability are released, nothing is actually made more secure until that patch is applied … Read more