Overall Security Principles Regarding security, it is important to discuss our approach to risk mitigation. To mitigate risk, we need to focus on building our overall situational awareness. To build situational awareness, we should look … Read more
In the simplest terms, risk connotes the possibility of harm. How we account for risk and manage it is the result of understanding and quantifying the consequences. What are the effects likely to occur in … Read more
Pentesting is an ever-evolving field, just like all fields in technology. Traditional pentesting revolved around networks and endpoints, the old basis for technology infrastructure in a company. Now, as COVID-19 pushed technology to change even … Read more
In the past few years, cybersecurity automation in many spheres of Cybersecurity increased dramatically. However, pentesting remains stubbornly immune to this. While crowdsourced security has evolved as an alternative to pentesting in the past 10 … Read more
An old proverb tells us, “You know nothing until another knows you know it.” Sometimes, though, you don’t want that someone to know sensitive details – just the “fact of.” For example, take April 1942. … Read more
For at least the past 15 years, a primary goal of cybersecurity teams was to block threat actors from gaining access to the growing amount of personal information collected about consumers. Meanwhile, threat actors focused … Read more
Strategy is Tiered and Targeted Over Time Change Management for enterprise security sensitivity or awareness involves strategically framing the internal and external environment. Within this framework, there must be a clearly defined external villain as … Read more
The cyber-extortion plague involving file-encrypting ransomware has hit some major roadblocks since it went pro in 2013. It survived a series of successful law enforcement operations, a sharp turn toward the enterprise as the primary … Read more
(This article is an updated version of a prior publication to reflect new legal developments.) Organizations in the United States face a growing web of complex foreign, federal, and state privacy and data protection laws … Read more
You are violating my privacy! This is a phrase typically thrown around without an understanding of what privacy really means and whether it applies in a situation or not. The prerequisite and necessity for privacy … Read more
