Why Infrastructure Monitoring is Critical to Your Business

What is Infrastructure Monitoring? Infrastructure monitoring refers to the collection and review of information on infrastructure components to measure performance and efficiency. It gauges how healthy a system is by collecting the performance information and data from servers, databases, [...]

Why Infrastructure Monitoring is Critical to Your Business2023-01-17T11:17:50-08:00

Why Firewall Patching (Updating Firmware) is Critical for Your Business

Firewall patching (updating firmware) is one of the most prudent aspects of network security management that, if neglected, can have dire consequences for your company. Now more than ever, consistent firewall patching is a must have for every business, big [...]

Why Firewall Patching (Updating Firmware) is Critical for Your Business2022-02-27T23:57:39-08:00

Ransomware recovery at Las Vegas casinos

We have seen a lot of ransomware attacks across across various industries. When it comes to ransomware, no industry is safe. Recently, there was a suspected casino ransomware attack in Las Vegas. Yes, it turns out some casinos are just [...]

Ransomware recovery at Las Vegas casinos2021-01-27T16:32:08-08:00

SMBs Risk of Cyberattacks is Significant

Cyberattacks are becoming an increasing risk for SMB owners. Unfortunately, the majority think they are immune to these attacks and continue using free cybersecurity software. It’s only when it becomes too late, and when the company is already victimized [...]

SMBs Risk of Cyberattacks is Significant2021-02-28T20:56:59-08:00

The Evolution of Ransomware: How to Stay Protected

What is Ransomware? Ransomware is a tradename for potentially entity killing malware of a variety of classes. In general, the cybercriminals infect computers with malware that can spread and take over an organization’s entire computing environment, from desktops and [...]

The Evolution of Ransomware: How to Stay Protected2021-01-27T16:48:23-08:00

The Importance of Third-Party Software Patching

And Why Executives Should Care... Threats to network security seem to get announced weekly. Global ransomware attacks like WannaCry cause havoc around the world and billions of dollars in losses. Businesses are actually shuttering due to network attacks that [...]

The Importance of Third-Party Software Patching2021-01-27T21:17:55-08:00

Imran Awan case shows lax security controls for Congressional IT staff

By Kevin McDonald Investigations into the conduct of the IT staff of the House of Representatives raised alarms. Kevin McDonald explains what we can learn from the case of Imran Awan. Those who operate with high-level system access, [...]

Imran Awan case shows lax security controls for Congressional IT staff2020-05-18T15:07:45-07:00

I Am a Non-Technical Executive: What Seven Things Should I Be Asking My IT Guys About IT Security?

Irvine, CA - Overseeing IT and security is a daunting task, even if you are an IT professional. If you are an executive to whom IT reports, then the task becomes near impossible. The list of following questions is designed to empower you to have a meaningful discussion with your IT team so you can be an informed and responsible manager pursuing your due diligence role in protecting the assets of your firm. If you are an IT professional, these are questions you should be prepared to answer.

1.       Q. When did we last do a risk assessment? Please share that document with me. I would particularly like to see the Risk Assessment Table.

A.      Make sure your IT team is periodically assessing the risks to your IT systems.  They should be recommending upgrades and new solutions for you from time-to-time, and you should be listening.  They need to be able to express the threat in operational and economic terms in order to justify the expenditure.  If your team can’t give you a clear and coherent answer on when and how they last did this, send them off with a task and a deadline.

2.       Q. When did we last do a Vulnerability Scan? What were the results of that scan? I would like to see the report.  Who did the remediation? When is our next scan planned?...

I Am a Non-Technical Executive: What Seven Things Should I Be Asking My IT Guys About IT Security?2021-01-28T18:23:01-08:00

What nineteen audiences in twelve months taught me?

Navigating Fear in the Security and Compliance World

In advancing technology it is fear of having a project go sideways, over budget or fail to accomplish the stated objective that has many frozen. What if that technology we recommend doesn’t work as we hope? What if it is something required by law (such as encryption in healthcare) that we fear an unknown outcome so much that we won’t act? What if we miss a key component of a project or underestimate the effort required and the entire project goes over our budget?

What nineteen audiences in twelve months taught me?2014-12-17T23:02:14-08:00