Board members need to insist on understanding IT / Cybersecurity risks. Only with this knowledge, can they properly discuss those risks at board level and achieve a consensus on setting the enterprise’s risk tolerance. When it comes to cybersecurity strategy, perhaps the single most important goal for boards and CEOs is defining the enterprise’s IT […]
Action Item Checklist Function Summary Description User Name and Password Protection Strictly enforce robust password security as per NIST Standards that include Upper and lower case letters, numbers and symbols Minimum of 8 characters, avoiding common words and dates Password not used for any other log in’s Changing passwords regularly – 3 months Using 2 […]
We are currently working with two large companies and it is interesting on my behalf on how little emphasis there has been on asset registers. An asset register of IT equipment is one of the foundations of your IT systems and security, if you dont know what you own, then you dont know what keys […]
Much of the business discussion around cybersecurity relates to protection of key assets such as customer information and intellectual property, often after the news that another company has suffered a large data breach. While strengthening defenses against cyber attackers is important, companies also must be prepared to handle the reputational and financial hits that a […]
Cybersecurity/ IT Risk Management is (or should be) on the agenda of boards. Information Technology is ranked by many as a top 10 risk, but does your board treat it accordingly? Working on and with Boards of Directors, I understand that the agenda is pretty full on, despite Zoom decreasing the actual meeting times. Since […]
Employee Data Theft When most of us think about a cybercriminal, we usually think of a person from home, and probably not in your own country. But did you ever consider that a hacker could be inside your own organisation? While most business owners assume that attacks on their company, data, website or operations are […]
SME’s need advice and assistance in identifying and defining suitable actions to mitigrate the risk of Information Technology risks, data loss and the issues where the loss of an IT function brings to any organisation. Cyber crime poses a severe risk to all types of enterprises. Preventing these risks requires implementing initiatives based on both education and awareness.
You know you need a risk assessment to show that you’re secure and to find the problems that expose your enterprise to risk. But how do you sell your CEO or the board on that expensive proposition?
Does your credit union lack the resources to hire or retain a full-time It Manager? Are your current IT expert(s) overwhelmed by their responsibilities? Have you ever wondered what virtual Chief Information Officer, vCIO as a service is? This post is for you! vCIO as a service is a unique approach to providing consultation around […]
Every organisation should take a fresh look at the impact specific cyber events can have and whether management’s response plan is properly oriented and sufficiently supported. This review includes an assessment of internal processes and capabilities to determine whether proactive steps should be taken to make necessary improvements — both near term and long term.
Control Frameworks must be regimented but flexible enough to tackle the risk that organisation faces. This aspect challenges the previous two control mechanisms.
Harvard Business Review (HBR) published an article on the security breaches with respect to what it means for the company. HBR stated, “Recent high-profile data breaches like those at Target and Home Depot have exposed the private sensitive information of millions of employees and consumers. While consumers are rightfully worried that their personal information may […]
All industries are affected by the threat from a Cyber-attack. These threats and the impact of an incident is increasing each year. There are many organisations that monitor the threat impact and a few that give frameworks for all of us to work towards. NIST, National Institute of Standards and Technology, NIST, based in USA. […]
Our vCIO service gives your organisation a competitive advantage because it gives you something that your business truly lacks: an expert opinion. Technology has become a major line item on your budget. If your organisation doesn’t have the on-staff technical expertise to direct or cost-effectively implement the technology solutions you need in a manner that […]
Life of a CIO, Chief Information Officer, Head of IT, and or basically the most knowledgeable IT person in the building on that day, is what I call being a responsible for your IT, go-to tech expert. I am partner with Mark Duffy and we work with our clients to understand their IT systems, computers, […]