Let’s talk about Recovery from a cybersecurity incident. Recovery is the last part of the third phase of an effective Incident Response Plan. Recovery involves restoring systems and operations back to normal after the threat has been contained and eradicated. Recovery is more than just turning systems back on. You Read more…
Let’s talk about Eradication. Eradication is a critical part of the third phase of an effective Incident Response Plan. It involves eliminating the root cause of the security incident, ensuring that the attack vector is fully removed to prevent further damage or recurrence. Eradication is often more involved than Read more…
Containment, Eradication, and Recovery is the third element of an effective Incident Response Plan. Let’s talk about Containment. The strategies you choose to contain an ongoing security issue must be tailored to the specific type of incident your organization is facing. For example, the approach to containing a ransomware attack Read more…
Detection and Analysis is the second phase of a robust Incident Response Plan. This phase is where the groundwork laid during preparation pays off. Imagine that a security incident has happened. Now your organization must quickly identify and accurately assess the issue. Without effective detection and analysis, incidents can go Read more…
A Shared Responsibility Matrix is a simple but powerful tool. It clearly shows who is responsible for what in a partnership between a customer and a managed service provider (MSP). This is especially important for CMMC compliance. Think of a Shared Responsibility Matrix as a checklist that spells out who Read more…
A Shared Responsibility Matrix is a simple but powerful tool. It clearly shows who is responsible for what in a partnership between a customer and a managed service provider (MSP). This is especially important for CMMC compliance. Think of a Shared Responsibility Matrix as a checklist that spells out who Read more…
This week’s release of the first three post-quantum encryption standards by NIST—FIPS 203, 204, and 205— marks a significant step in securing data against the threat of quantum computing. These standards aim to protect encryption and digital signatures from quantum attacks, ensuring that sensitive data remains secure as technology evolves. Read more…
In battle, there is little room for error—and even less for overconfidence. The “Behind the Firewall” report by the DoD highlights a significant gap between perceived and actual cybersecurity readiness in the DIB. Despite 76% of manufacturers expressing confidence, only 16% have detailed cybersecurity policies. Cybersecurity demands methodical attention. Standards, Read more…
Do you work with the DoD? Have you noticed that cybersecurity practices are often shared through “tribal knowledge” rather than being well documented? This is about to change. The report “Behind the Firewall” highlights an urgent issue. 86% of DIB manufacturers lack detailed cybersecurity policies. 41% call their policies limited. Often, Read more…
🚨 Only 22% of SMBs keep up with cybersecurity laws and regulations. 🚨According to the DoD’s June 2024 report, “Behind the Firewall: Assessing Cyber Resilience in U.S. Manufacturing,” a shocking 78% of small to medium-sized businesses (SMBs) do not closely monitor changing cybersecurity laws and regulations.Why does this matter?Because regulations Read more…