Brian Petzold

2 min read

The Waning Days of the CAT Arrive

In late August, the FFIEC announced that they would sunset the Cybersecurity Assessment Tool (the “CAT”) on August 31, 2025. It had been apparent for...

2 min read

Control Assessments Vs. Risk Assessments

When we first start working with new institutions, it is not unusual for us to see them struggling because they have focused their efforts on...

2 min read

Is Ransomware Dying?

In December 2023 the US Justice Department announced that they had disrupted operations of ALPHV/Blackcat, a ransomware group that was responsible...

2 min read

Consent Orders Put Focus on Third-Party Risk Management

There have been multiple consent orders issued recently which have made it clear that regulators are starting to enforce new third-party risk...

3 min read

Best Practices to Ace Your Penetration Test

Every institution should have an internal penetration test performed annually. The goal of the penetration test is for the tester to try to gain...

2 min read

Adding Perspective to Tabletop Exercises

2 min read

What is a Good Password Length?

We are often asked what length passwords should be. The answer that we give in general is that we would like user passwords to be at least 14...

1 min read

Is Your M365 Conditional Access Unconditional?

As attackers are finding new ways to get around multifactor authentication in Microsoft 365, conditional access is becoming more important....

3 min read

Helping Board Members Sleep at Night