Cyber Supply-Chain Attacks

Cyber Supply-Chain Attacks

Should we be Afraid of our Third Party Vendors? The biggest threat in cybersecurity might be under our noses. According to a recent Ponemon Institute study, US organizations are failing to assess the risk of attacks and data breaches from vendors in their supply...
PCI DSS version 3.2.1 replaces version 3.2

PCI DSS version 3.2.1 replaces version 3.2

Today the PCI Security Standards Council published a minor revision to the PCI Data Security Standard (PCI DSS). PCI DSS version 3.2.1 replaces version 3.2 to account for effective dates and Secure Socket Layer (SSL)/early Transport Layer Security (TLS) migration...
Tackling the Top Cybersecurity Threats of 2018

Tackling the Top Cybersecurity Threats of 2018

Industry experts predict the unpredictable and share ideas on threat mitigation 2017 was a terrible year for security managers. Vulnerabilities and exploits blew up, malware infections accelerated, and data breach costs reached well into the billions. So what’s in...
Hacking the Human – How Social Engineering Owns Our Users

Hacking the Human – How Social Engineering Owns Our Users

Highly targeted Social Engineering attacks are wreaking havoc in cybersecurity. In one recent incident, hackers used Social Engineering to defraud a US company out of nearly $100 million. The increased use of these techniques is directly related to the fact that they...
10 Habits of Great CISO’s

10 Habits of Great CISO’s

I’ve had the good fortune to collaborate and work with many truly great CISO’s. Here are some observations of the personal habits that make them great and the attributes that anyone in Cybersecurity can emulate. They make time. No one in IT security has enough...
The FUD Factor

The FUD Factor

Recently I had the opportunity to lead a panel at the Global CISO Forum in Atlanta, GA. Our panel topic was a discussion on how to avoid FUD in selling security. FUD is an acronym for Fear, Uncertainty and Doubt. The topic focused on CISO’s “selling” security to the...