SIX THINGS TECH START-UPS CAN DO TO IMPROVE THEIR SECURITY POSTURE

The Internet of Things (IOT) and Cloud (more…)

Cindy Kaplan2025-06-17T21:56:50+00:00Tags: Cyber security, intellectual property, security review|

PREPARING FOR YOUR DATA BREACH

PREPARING FOR YOUR DATA BREACH. 

Most InfoSec professionals don’t want (more…)

Cindy Kaplan2025-06-19T20:18:51+00:00Tags: Advanced Malware, Breach, checklist, cyber security training, data breach, fraud, Hackers, HIPAA, Incident response, Incident response plan checklist, IR incident response planning, IR Plan Checklist, IR planning, malware, Malware threat assessment, MEdical Identity Theft, MIT, pen testing, penetration testing, pentest, PHI, Protected HEalth Information, risk management|

Lessons in Risk Management: What We Should Learn from the FAA Fire

Too often in information security we focus on the confidentiality of (more…)

Cindy Kaplan2025-12-22T19:05:04+00:00Tags: FAA, information risk, Risk Assessments, risk management, security incident|

Code Spaces Spaced Out On Data Security

The information security community is abuzz with the news of Code (more…)

Cindy Kaplan2024-07-03T20:42:46+00:00Tags: Amazon, AWS, Code Spaces, hack, security|

Vendor Risk Management Hype Extends Beyond Target®

(more…)

Cindy Kaplan2026-03-18T19:17:13+00:00Tags: hacking, NIST, Risk Assessment, security, Target, third party risk management, third party vendor management, TPRM, vendor risk management|

Universities Remain a Rich Target for Hackers

(more…)

Cindy Kaplan2025-12-23T18:14:12+00:00Tags: breaches, Hackers, intellectual property, personal information, PII, W-2|

Darrell Issa Just Learned the Difference Between Compliance and Security. Let’s Hope for a Payoff.

Darrell Issa’s House Committee on Oversight and Government Reform has been (more…)

Cindy Kaplan2024-08-01T18:56:59+00:00Tags: ATO, CISO, Committee on oversight, Darrell Issa, department of health, government reform, Healthcare.com, human services, ISO27000, Issa, NIST, PCI, PII|

A Word about the Target Data Security Breach

What happened to Target^® last week is (more…)

Cindy Kaplan2024-07-03T20:42:47+00:00Tags: Antivirus, cardholder, data breach, Hackers, security awareness, security breach, Target|

California’s New “Do Not Track” Privacy Law is Weak … As Expected

If (more…)

Cindy Kaplan2024-06-28T19:18:57+00:00Tags: CalOPPA, Personally Identifiable Information, PII, Privacy, Privacy law|

Common Hazards in Risk Management: The Selfish Risk Assessment

Information security laws and regulations are telling us to conduct cyber (more…)

Cindy Kaplan2024-07-03T19:22:46+00:00Tags: Breach, identity Theft, Information Security, ISO 27005, NIST SP 800-30, Risk Assessment, risk management|