2 min read
Over the years, I have become wary of the term “best practice” when it is applied to technology and cybersecurity. The term “best practice” is supposed to mean that what is being described aligns with the actions of the best in the industry. The...
Read More2 min read
Networks rely on encryption to ensure that data is kept private and cannot be changed while at rest or in transit. In most cases this encryption...
2 min read
2 min read
When the Gramm-Leach-Bliley Act was implemented, each regulatory agency adopted a set of interagency guidelines and regulations required for...
2 min read
2 min read
Asset Management is one of the foundations of a sound Information Security Program, but it is also often neglected in the rush to replace or...
2 min read
We recently have seen an increase in “typosquatting” activity targeting financial institutions. Typosquatting is when someone registers a domain with...
1 min read
2 min read
3 min read
Information security programs are like onions. They have layers. Understanding the control layers of an information security program helps management...