In Safeguard 7.1, we discussed the difference between running a vulnerability scanner and operating a vulnerability management program. A scan may identify weaknesses, but the organization still needs a documented process that explains what happens next. That brings us to CIS Safeguard 7.2: Establish and Maintain a Remediation Process. The safeguard calls for a documented, risk-based remediation strategy that is reviewed at least monthly. The phrase “risk-based” matters. Most organizations...
The Shift: From Defense to Economics In South Florida’s manufacturing economy, the conversation around cybersecurity has changed. It’s no longer...
As security leaders, we’re constantly pitched tools that promise productivity gains. OneStart, an AI-powered browser, claims to integrate ChatGPT,...
By Heath Gieson, CISO / EVP of Operations, Forthright Let’s be honest—no one ever needs a backup… until they do. Backups are one of those things we...
By Heath Gieson, CISO / EVP of Operations, Forthright Welcome back to our Cyber Security Action Month series. So far, we’ve talked about enabling...
By Heath Gieson, CISO / EVP of Operations, Forthright As we continue our Cyber Security Action Month series, we’re shifting our focus from login...
Nobody builds a house on a weak foundation, so why operate your business based on unreliable data? According to research, bad data costs US firms...
By Heath Gieson, CISO / EVP of Operations, Forthright October is widely recognized as Cyber Security Awareness Month—a time when organizations and...
Without realizing it, technology can drain your business budget. One day, everything seems manageable, and the next, you’re left wondering where all...
Your office thermostat, conference room speaker, and smart badge reader are convenient, but they’re also doors into your network. With more devices...
