If you want to have a shot at qualifying for cyber insurance and get the best possible rates, you have to show that your company is effectively managing cyber risks. Unfortunately, it’s getting harder and harder to get cyber insurance even if you’re trying to renew an existing policy. If you don’t believe it, just have a look at a current application. When they’re considering your risk profile, insurance underwriters want to know what security controls you have in place. The answers to the questions on the application get technical really fast. In fact, most insurance companies are asking you […]

When it comes to creating a cybersecurity process that can consistently translate security expectations into actionable tactics, you need a framework. Frameworks are how regulations for data confidentiality and safety are communicated and enforced in many industries. For example, any company that gathers and stores information about your health or medical care must be compliant with HIPAA. What is a Compliance Framework? A cybersecurity compliance framework is a set of guidelines and best practices that enable consistency and clear communication about security expectations. Compliance frameworks communicate cybersecurity standards, but they don’t provide instructions for exactly how those standards should be […]

What do cyber-criminals do when they need more computing power? They steal it, of course, and something connected to your network could be captured and enslaved in a global botnet army if you haven’t hardened your systems. This is what occurred in 2016 when a huge Denial of Service attack targeted high profile websites and hosting providers.* Here’s how it happens. A cyber-criminal searches the internet for devices that have weak, default or no passwords or other holes that can be exploited. When they find an open door, they confiscate the computing power and turn it in the direction they […]