Quantitative risk assessments and how they can help your SMB's information security posture.

Qualitative risk assessments - the ones that produce those "heat maps" with the red (high risk), yellow (medium risk) and green (low risk) are a standard method for communicating information security risk. But they have limitations.

Information security risk assessments - why are they important?

SOC1, SOC2, what do they mean for your small business?  Find out in this week's installment of The vCISO Minute.

A recent breach highlights the need for incident response testing, particularly about notification.

Microsoft released a patch for out-of-support operating systems this week, but that's usually not the case. If your business requires running old operating systems, usually due to legacy software or systems,  you need to reduce the risk running an outdated operating system brings by not relying on patches. Music by https://www.bensound.com/

The annual Verizon Data Breach Investigation Report will come out soon. What is it, and how does it benefit small and midsized businesses?

vCISO Services, LLC Principal Greg Schaffer discusses information security opportunities at the 2018 InfoSec Nashville conference. The Virtual CISO Moment (Minute) video series/podcast spun off from this discussion.

vCISO Services, LLC Founding Principal Greg Schaffer explains Information Security as Risk Management at the National Cybersecurity Summit, Huntsville, Alabama, June 2018

Presentation at the Middle Tennessee State University Cyber Summit 2013