Policy and Procedure

A CISO’s Guide to Secure Remote Work

How to Ensure security while your Workforce is Remote Due to the recent COVID-19 outbreak, many people are now working from home for the first...

Inherent Risk Tiering for Third-Party Vendor Assessments

It can be a challenging and overwhelming task to adequately manage the risk associated with outsourcing technology or business processes,...

Stop By Booth 118 @ AWS re:Invent and Speak to Our Team of Cybersecurity Experts

BCDR Series: The intersection of Incident Response and Business Continuity

When most people think of Continuity, they think of bringing a business back online after a fire or a flood....

Hacking Hillary: Recent Breaches against Democratic Political Groups

A recent leak of thousands of Democratic National Committee emails cast a long shadow over the Democratic Convention in Philadelphia...

Electronic Voting for the 21st Century

With the election year ahead it behooves us to take a look at the security of our voting systems and...

Privilege Escalation via Group Policy Preferences (GPP)

While this is not a new topic in the penetration testing world by any means [Chris Gates (@carnal0wnage) and others...

Wikileaks: How I Learned to Worry More…

Wired’s Danger Room blog recently acquired a “Cyber Control Order” penned by Major General Richard Webber, commander of Air Force...

A Requirement By Any Other Name….

Since we’ve covered FISMA and NIST recently, I thought it would be a good time to discuss policies, standards, guidelines,...