I have been thinking for months about the latest challenges faced by organizations with regards to the increased cybersecurity risks, what is at stake, how unprepared they are, and how the cyber insurance companies are responding to the changing landscape.

As I have had conversations with business decisions makers, they often think that they have little to risk. Many businesses feel that they are not under much if any regulatory framework that requires them to take action. It seems that each week I see another cybersecurity insurance risk assessment questionnaire that nearly every organization will fail. Compliance frameworks are incomplete and horrifically confusing.

There is no compliance framework that will get you the fundamentals. There is no security control framework that tells you how to have effective network layer security. The gap between guidance and successful execution is wide.

It occurs to me that the only real defense for small and medium businesses are organizations like QPC which have virtual information security officers and full remediation services on offer backed by ongoing management. There are plenty of penetration testers or those that will sell you MDR services. Execution of fundamentals is where it is at. There is little value in pursuing the frameworks until you have addressed the fundamentals. After you have the fundamentals in place, then review your status against frameworks and you will probably find that many items have already been addressed.

Regardless, I'm always on the hunt for helping the SMB organization leader. It occurs to me that no matter what data you think you have a risk or don't at risk, there is one thing you don't have which is at risk. Listen to the show to find out the real reason you cannot afford to have a cybersecurity incident.

Updated on 8/8/2021

The Disturbing Facts About Small Businesses That Get Hacked

I will warn that their documented risk mitigations measures are H.S.

And check out this excellent article on more reasons why you cannot afford to be hacked.

10 Terrifying Cybersecurity Stats | Cybersecurity | CompTIA

Topics:

facial recognition

Systems with Windows Defender compromised

11 recent security vulnerabilities highlight the necessity of viable network layer security strategy

https://www.msn.com/en-us/news/us/fbi-ice-find-state-driver-s-license-photos-are-a-gold-mine-for-facial-recognition-searches/ar-AADZk0d?li=BBnb7Kw

https://www.newstarget.com/2019-07-29-americans-already-in-fbi-facial-recognition-database.html

https://www.forbes.com/sites/daveywinder/2019/07/31/windows-10-warning-250m-account-takeover-trojan-disables-windows-defender/#325add6f6fef

Why network layer security and microsegmentation is critical

Also why to use a good quality security appliance

https://armis.com/urgent11/#foobox-4/0/bG6VDK_0RzU

URGENT11 - Takeover of a Xerox Printer

Originally aired: 8/2/2019

Real world examples of small business security compliance problems

Originally aired 5/1/2020

Evaluate your purchases to see if they have UPnP and understand why you should not buy devices that use UPnP technology

Update on the Capital one data breach

Adverse business impact and higher fees associated with subscription based software licensing versus perpetual

Originally aired: 7/3/2020

How easy is it to not get hacked?

Originally aired 9/4/2020

Location services issues and how it relates to personal physical security

Originally aired 1/3/2020

Email security and cyber risk insurance

Originally aired 10/11/2019

The dark side of smart cities

A clothing line designed to distract the panopticon

Geofencing warrants

Horror stories of hospital IN-security

Originally aired 9/6/2019

Why many IT business decision makers make mistakes

Over 25 years, bar none, the business decision makers that have regular meetings with us are vastly better decision makers. This directly leads to them saving money by not wasting money.

Why bidding out IT jobs often fails

Sim jacking

More AWS data breaches affect hundreds of thousands of people

Hacking using smart light bulbs

IoT bricker

MFA options

https://simjacker.com/

https://www.sciencedaily.com/releases/2019/10/191023075139.htm

Originally aired 11/1/2019