News

Kevin McDonald has just published his latest article of DFARS (Defense Federal Acquisition Regulations Supplement) at SearchCompliance.TechTarget.com. If you fall into this category, a recently implemented rule from the Department of Defense called the Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012 will impact how you handle controlled unclassified information (CUI). Kevin writes to the important issue

Kevin McDonald writes for TechTarget SearchCompliance on Aligning IT and compliance procedures increasingly a business priority. He says, “When I’ve asked IT pros about HIPAA Security Rule compliance within their organization, they’ve typically responded with, “That is the compliance officer’s realm” or “Risk handles compliance.” If you ask executives about the IT functions required under the Security Rule, you

Irvine, CA – IT solution providers have never been a shy bunch. In this article by CRN – Solution Providers Cheer Trump Tech Summit, Hoping It Will Help Channel Partners Create More Jobs, many share their thoughts on where our president-elect and big tech leaders should take policy. Alvaka’s COO/CISO Kevin McDonald is one of those

Data Privacy: What are the Risks? If you are handling PII (Personally Identifiable Information) for your clients or anyone else you should read this article. It is delivered in the context of a sweepstakes type of program, but it is applicable to anyone handling PII. The article is care of The Morningstar Law Group. Promotions

Kevin McDonald guest writes a blog for Dave Berkus’ Berkonomics Phishing, a play on the word “fishing,” is a dangerous form of executive or CEO email fraud, and is negatively impacting individuals and companies worldwide. You certainly have seen some form of this social engineering – where criminals pretend to be an organization or individual

As cybersecurity breaches surge, it’s important that company leadership know what IT is up to. Kevin McDonald explains why IT process documentation is a must-have best practice. It seems that not a day passes without news of another high-profile hack, embezzlement of monies and data, or even the sabotage of a corporation or government entity. These

Fortunately OpenSSL is publishing a fix on Tuesday – OpenSSL versions 1.0.2g, 1.0.1s – to deal with the protocol flaw. Many systems are vulnerable to an attack that may be comparable with Heartbleed. “This flaw is more than a product vulnerability; it’s a protocol flaw,” according to Ivan Ristic, a software engineer and founder of

If you have Cisco ASA firewalls and VPNs you better assess your patching on these devices. Click here to read the story: Firewalls running Cisco Adaptive Security Appliance (ASA) software can be compromised remotely with malformed UDP packet