Deploy and Maintain Anti-Malware Software Anti-malware is the one security control almost every business already believes it has. So the question worth asking isn't whether you have it. It's whether what you have can catch what actually shows up today, and whether it's running on everything, not just the obvious computers. A lot of organizations are protected on paper and quietly exposed in practice. Control 10.1 is deliberately foundational. It doesn't ask for anything exotic. It asks...
CIS IG1 Control 2.3 — Why Unauthorized Software Is a Hidden Threat Lurking on “Trusted” Devices
Most organizations assume that corporate devices only run approved software. In reality, that assumption is often wrong. Users are inherently...
CIS IG1 Control 2.2 — Why Running Supported Software Is a Security Requirement, Not an IT Preference
Most security conversations focus on what software exists in an environment. CIS Control 2.2 pushes the conversation one step further by asking a...
CIS IG1 Spotlight: Why a Software Inventory Is More Than a Security Requirement
One of the themes we keep hitting in the CIS IG1 series is simple: you can’t protect what you don’t know you have. That’s true for hardware—and it’s...
CIS IG1 Control 1.2: Why Addressing Unauthorized Assets Matters—and How to Do It Easily
When we kicked off this series with Control 1.1: Establish and Maintain a Detailed Enterprise Asset Inventory, we focused on the Identify security...
CIS IG1 Control 1.1: Establish and Maintain a Detailed Enterprise Asset Inventory
By Heath Gieson If you don’t know what you have, how can you protect it? That simple question is why the very first control in the Center for...
CISOs’ Security Priorities: The Augmented Cyber Agenda—and How Forthright Is Leading the Way
Cybersecurity leaders are facing a rapidly evolving threat landscape. According to CSO Online’s latest Security Priorities Study, CISOs (Chief...
The Root of All Operational Problems: Misalignment Between Technology, People, and Process
By Heath Gieson What if I told you that the biggest challenges in your growing business most likely are not about money, talent, or even...
Creating Meaningful Processes: The Three Keys to Success
By Heath Gieson Creating process is a process itself. It’s not just about writing steps on paper—it’s about building something people will follow,...
Operationalizing Security and Compliance: Why You’re Already Doing It
By Heath Gieson What if I told you your organization is already practicing cybersecurity—even if you’ve never written a single security policy?...
