The Top Five SOC 2 Compliance Questions Answered

Mar 5, 2018 | Compliance, Security Management

Is compliance slowing you down? Read about our FedRamp compliance services or reach out directly with any questions about your journey to compliance. Do you ever feel like your job involves a lot of hammering on the same few key points over and over? Well, that’s the...

Vulnerability Management for the Win

Nov 11, 2014 | Security Management, Vulnerability Management

Attackers exploit weakness.  This age-old concept applies equally to castles and battleships, as it does to applications and networks.  The more vulnerabilities a network has, the easier it is to attack and compromise.  Nearly all of the recent high-profile attacks...

Why Do Retailers Keep Getting Breached?

Sep 11, 2014 | Business of Security, Industry Analysis, Opinion, PCI, Security Leadership, Security Management

Every week it seems a new breach is announced with a big load of credit cards or healthcare data popping up on the various criminal exchanges.  This erodes confidence in retailers and healthcare providers everywhere, as well as the integrity of the PCI DSS.  Consumers...

Qualities of Successful IT Security Leaders

Sep 9, 2014 | Security Leadership, Security Management

What makes a successful IT security leader?  Intelligence, experience, integrity?  With 20 years of experience working with security people, I’ve had the fortune to see both highly successful security programs as well as highly dysfunctional ones.  The...

Surviving the Next Target Breach

Aug 12, 2014 | Breaches, Security Leadership, Security Management

There has been a lot of hiring and firing within Target’s executive leadership after their publicly acknowledged data breach earlier this year.  The CEO and CIO officially resigned, though were likely pressured to leave their positions as damage control all the bad...

How to Get a Meaningful Security Assessment

Aug 18, 2013 | Business of Security, Penetration Testing, Security Analytics, Security Management

The curriculum of business schools are filled with case studies of companies that took short cuts to become competitive and accomplished the exact opposite.  For the information security world, there is a similar “penny-wise, pound-foolish” behavior in the notorious...