Boards Are Interested in Cybersecurity Too

Dateline: September 29, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. With all the media attention focused on recent cyber events, it's no wonder our Boards are getting involved.  Certainly a catastrophic event such as Equifax experienced recently shows Board leaders that a large vulnerability might exist in their company.  Making sure these … [Read more...]

The Business Mindset of Cyber-Criminals

Dateline: July 21, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. Cyber-criminals are organized, smart and well-funded.  If we think of cyber attacks as the 'service' of a 'well-organized business' then we can come up with strategies to 'compete' against it.  By compete, we mean become more cyber-resilient, not go into the cyber-crime business, … [Read more...]

Threat Hunting Needs Technology and People

Dateline: July 14, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. Continuing on our theme of the organizational side of cybersecurity leadership, this week we look at threat hunting.  A blog titled Threat Hunting and the Pyramid of Pain (written by flOx2208, a "common human being wanting to share my knowledge and experience") suggests that … [Read more...]

Cybersecurity Basics

Dateline: July 7, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. Next week I'm leading a session on building a cybersecurity culture at of the annual meeting of the Cybersecurity Consortium at MIT's Sloan School (Full disclosure: I am the Executive Director of the Consortium, you can learn more about (IC)3 activities and membership here).   In … [Read more...]

Changing Corporate Perception of Cybersecurity

Dateline: June 30, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. This past week a new ransomware cyber threat made its way through hundreds of computers.  While not surprising that another attack was launched, what was surprising is that NotPetya exploited the same vulnerability as WannaCry just a few weeks earlier.  It was successful because … [Read more...]

Cybersecurity is Not Just a Technical Problem

Dateline: June 23, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. Getting our hands around cybersecurity is a top priority for many executives.  CIOs and CISOs understand cybersecurity is more than a technical problem to solve.  Other C-suite executives are quickly coming up to speed, understanding that being cyber-resiliant is the … [Read more...]

IoT: Internet of Threats?

Dateline: June 2, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. For several years now, as the Internet of Things (IoT) connects many of our seemingly harmless devices to the web in order to add features and functionality, cybersecurity professionals have  pointed out how much more vulnerable to attacks we have become.  No one makes this point … [Read more...]

The Widening Cybersecurity Workforce Gap

Dateline: May 26, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. Cybersecurity concerns always increase when there is a widely publicized event such as the WannaCry ransomware attack a week or so ago.  But according to a recent article, published by SecurityIntellignece.com,  the cybersecurity workforce needed to help us protect our … [Read more...]

Cloud May Not Be the Solution for Cyber Security Concerns

Dateline: May 19, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. For the past few weeks, we've shared startling statistics published in a blog at Information Week titled, Nearly 90% of organizations victim of data breaches.   Many managers believe their security concerns are eliminated if they move to the cloud, because cloud providers will make … [Read more...]

Ransomware Succeeds Due To People-Oriented Mistakes

Dateline: April 28, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. Have you been the target of ransomware? Recently a post by Greg Slabodkin, the managing editor of Health Data Management, suggested that the epidemic of ransomware is not showing signs of slowing down in a post at Information Management titled, Ransomware epidemic will continue … [Read more...]