CIS Controls 7 CIS RAM

CIS RAM (Center for Internet Security® Risk (more…)

Cindy Kaplan2024-06-27T15:41:02+00:00Tags: CIS Controls, CIS RAM, DoCRA, Risk Assessment|

• 

We Just Gave Away Our Cyber Security Intellectual Property. It was the right thing to do.

Why a Chicago-Based Cyber Security Firm (more…)

Cindy Kaplan2026-01-16T22:03:57+00:00Tags: Center for Internet Security, CIS, CIS Controls, CIS RAM, Critical Security Controls, Cyber security, DoCRA, due care, duty of care, duty of care risk analysis, intellectual property, multi-factor balancing test, negligent, reasonable security, SANS top twenty|

• 

EMPLOYEE SOCIAL MEDIA ACCOUNTS MAKING YOUR NETWORK VULNERABLE?

Social media seems (more…)

Cindy Kaplan2025-07-09T18:59:42+00:00Tags: Phishing, phishing attack, Social Engineering, Social Media, Spear Phishing|

PRIVACY VS SECURITY – WHAT’S THE DIFFERENCE?

The ever-increasing demands from laws and regulations to protect personal information comes with (more…)

Cindy Kaplan2024-08-13T19:36:09+00:00Tags: Compliance, Cyber security, Privacy, Privacy law, Security Rule|

• 

What Kind of Security Assessment Do I Need?

What kind of security assessment do I need? It’s a question (more…)

Cindy Kaplan2025-07-16T22:01:31+00:00Tags: compromise assessments, cyber security risk assessment, gap assessments, malware, penetration test, penetration testing company, Reasonable, Risk Assessments, security assessments, vulnerabilities, vulnerability scanner, vulnerability scans|

THE FTC IS TELLING US THAT PCI DSS CERTIFICATION IS NOT ENOUGH. NOW WHAT?

(more…)

Cindy Kaplan2024-07-02T17:48:38+00:00Tags: certification, certifications, Compliance, FTC, GLBA, HIPAA, ISO, lifelock, NIST, PCI, PCI DSS, reasonable and appropriate, Risk Assessments, safeguards|

THE JP MORGAN CHASE HACKER INDICTMENTS EXEMPLIFY HOW BACKWARD THE INFOSEC SPACE IS

HACKER INDICTMENTS – Cybersecurity audits mean nothing to hackers. And in (more…)

Cindy Kaplan2024-06-28T19:10:45+00:00Tags: Breach, Hackers, JP Morgan Chase, Personally Identifiable Information, PII|

REDUCING RISKS THROUGH COMPENSATION: HOW TO INSTITUTIONALIZE RISK MANAGEMENT IN EMPLOYEE INCENTIVE COMPENSATION PLANS

(more…)

Cindy Kaplan2024-08-01T19:59:38+00:00Tags: CISA, CISM, CISSP, Compensation, compensation plan, Compliance, goals, HIPAA, ISO 27002, Key performance indicators, KPI, NIST, PCI, risk, risk management|

SIX THINGS TECH START-UPS CAN DO TO IMPROVE THEIR SECURITY POSTURE

The Internet of Things (IOT) and Cloud (more…)

Cindy Kaplan2025-06-17T21:56:50+00:00Tags: Cyber security, intellectual property, security review|

PREPARING FOR YOUR DATA BREACH

PREPARING FOR YOUR DATA BREACH. 

Most InfoSec professionals don’t want (more…)

Cindy Kaplan2025-06-19T20:18:51+00:00Tags: Advanced Malware, Breach, checklist, cyber security training, data breach, fraud, Hackers, HIPAA, Incident response, Incident response plan checklist, IR incident response planning, IR Plan Checklist, IR planning, malware, Malware threat assessment, MEdical Identity Theft, MIT, pen testing, penetration testing, pentest, PHI, Protected HEalth Information, risk management|