A vCISO offers a wide range of scalable cybersecurity services, including risk management, program development, training, incident response, and staff augmentation.
Staying up-to-date on security knowledge is pivotal to being proactive in information security. Provided are links and dashboards to keep handy for any security program.
Having trouble getting started on security documentation? Sample documentation for governance, risk, compliance and architecture documents has been provided.
Security can be intimidating at first. The words “I feel like the sky is falling, just tell me where we need to start” are often said. One of the goals of the security program should be to have a positive employee experience that makes an impact on the organization to disrupt your industry with using…
One of the most common techniques of vendors is to immediately up sell going to the cloud; however, is the cloud always the best choice? To understand the true benefits of the cloud, one must first understand what the cloud is. Often this is alluded to a mega-structure with Fort Knox style security as well…
The words “Reasonable Security” often come up in executive meetings to help understand “what do we need to do?” As a security professional, our goal is to make things as secure based on a risk-based approach but risk can be defined differently based on where one is. In 2019, a big scramble was made by…
Often times an organization is asked “Do you have a SOC 2?” when one wants to find out about an organization’s information security state; however, do we know what benefit that really provides? A SOC 2 Report is a report that helps prospective customers, current and future auditors, investors, and company stakeholders understand the controls…
Did you know 6 in 10 small businesses go out of business within six months that fall victim to a cyber attack? Do not let that be you. Read more here to learn how to avoid becoming a cyber-statistic. Read the white paper Avoid Being a Cyber-Statistic to learn more.