Security Safeguard Expectations from our Vendors

Dateline: May 11, 2018 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. We all know that cybersecurity is our job, but as we move more and more of our work to apps, the cloud, and other external hosts, what cybersecurity can we expect these vendors to provide? Recently, The Conversation published an article from Indiana University Associate Professor … [Read more...]

Cybersecurity Insider Threats From Contingent Workers

Dateline: May 4, 2018 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. By now, if you have been following this blog, you are well aware that one of the biggest cybersecurity threats is the people inside your organization.  Experts predict that as our businesses grow, so does our contingent workforce; by 2020, the contingent workforce is expected to be … [Read more...]

Increasing Cybersecurity Requires Organizations to Collaborate

Dateline: April 13, 2018 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. It's becoming increasingly clear that one 'feature' of our business environment is making it possible for the cyber-criminals to be successful:  Our public and private organizations are hesitant to collaborate and work together.  Our competitive business ecosystem, regulations, … [Read more...]

GDPR as a Forcing Function for Things That Should Have Happened Already

Dateline: April 6, 2018 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. This week we saw new announcements of data breaches affecting millions of individuals.  Delta, Sears, and Under Armor all reported hacks that impact information privacy, highlighting the fact that for just about every company, the question is not "if" but "when" they are hacked.  … [Read more...]

No Silver Bullet to Cyber Security: It’s a Shared Responsibility

Dateline: March 30, 2018 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. Recently we have focused on cybersecurity governance in this blog and this week, we share a thought about the broader executive responsibility for keeping our companies cybersafe.  Cybersecurity doesn't have a 'silver bullet' answer: keeping our organization secure requires a … [Read more...]

Cybersecurity Governance a Priority for CISOs in 2018

Dateline: March 16, 2018 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. We have been focusing on cybersecurity management and leadership lately.  With increasing focus on breaches, attacks, and ransoms, it's clear that cybersecurity leaders are being stretched very thin.  Figuring out how to get ahead of these issues is paramount.  And it's more than … [Read more...]

The Count and Cybersecurity

Dateline: January 26, 2018 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. This week I'm teaching a short course at MIT on the managing and leading cybersecurity.  One key theme of this program is the importance of managing the people in the ecosystem since it's been observed over and over that the human risk is significant (and possibly much larger … [Read more...]

Balancing Innovation and Cybersecurity

Dateline: January 19, 2018 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. Balancing innovation and cybersecurity can be a challenge.  Product design prioritization means that that difficult decisions have to be made about what to include in the design, and often cybersecurity is not above the cut line.  Recently, TechTarget interviewed Alissa … [Read more...]

Executive Mistakes After a Data Breach

Dateline: January 12, 2018 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. We have a long way to go before we can be sure our data and systems are secure.  In the meantime, executives can take some comfort in knowing that many before them have had to made tough decisions to both protect and recover from sever cyber attacks.  Harvard Business Review … [Read more...]

Cybersecurity: Don’t Leave the Keys Under the Mat

Dateline: September 22, 2017 Welcome to our Friday WRAP – one thought-provoking idea to think about over the weekend. With information security in the headlines over the past few weeks, it's also time to remind ourselves that all the technology in the world won't help our organizations be cyber resilient if the people in the organization inadvertaintly create vulnerabilities.  That was the … [Read more...]