Making Vendor Risk Management Part of Your Security Strategy When we think of Vendor Risk Management (VRM), there’s usually a policy or a procedure, possibly even a process to … Read More
How the pandemic changed everything and nothing This is a quick look back over the last six months or so: what’s changed in the world of work … Read More
Examining the How of NIST Privacy Last time I discussed why you should consider using the NIST Privacy framework as both a foundation and methodology for … Read More
NIST Privacy Framework – Your Foundation for Future Privacy Compliance In preparing to write an article about the NIST Privacy Framework I asked some friends who work in infosec and … Read More
Are You in the Dark About Visibility? You can’t have good posture without good visibility. This is not a phrase I’ve picked up during those hours of … Read More
CCPA is now in effect. What you need to do about it The California Consumer Privacy Act, or CCPA, seemed to take an age between being signed into law in 2018 and coming … Read More
Ransomware Going Nowhere – Healthcare Beware! My friends who are lucky enough to still be employed throughout the pandemic appear to be split into two camps. Read More
TBG Data Breaches Part 2: It’s not (necessarily) your fault Last time I discussed the ‘Did they really do that?!’ kind of data breach, the one where you can’t quite … Read More