The Virtual CISO Moment

The security posture of a company is rooted in the company's culture - its approach and attention to information security across all levels of the organization.

Morning thoughts on how the virtual CISO fits in an organization, using the Three Lines of Defense (3LoD) model to illustrate.

Business Continuity Table Top Exercises (or BCP TTX, since it's easier to type) are important for identifying gaps in business continuity, disaster recovery, and incident response programs. Don't ignore this essential exercise, and don't treat it as just an information technology exercise.

The virtual CISO is not a new discipline, but it is evolving. Like other security specialties, there are different approaches and skills offered. This is the first of several upcoming discussions on the virtual CISO space.  [email protected]

After a hiatus, The Virtual CISO Moment returns with useful information from security experts who understand small and midsized business (SMB) security needs. No frills, no glamour, no transparent whiteboard text, no complex graphics, and no script - just a few minutes every Tuesday discussing SMB information security risk issues.

Metrics - security leaders talk about them often. But what is the one critical question they, and you, should ask about information security metrics?

The episode compares COVID-19 and information security risks...through a Chihuahua.

Many small business owners are frightened now, unsure of how their business will survive. Many in the United States have applied for the PPP. But the combination of economic calamity, fear of infection, stress from lives upended , all create an environment for criminals to exploit. It's okay to be afraid, but don't let it lead you to becoming a victim.

The COVID-19 pandemic has disrupted business operations on an unprecedented scale. It also presents an opportunity to learn and grow business operations. This will end, and the time to prepare for the "new normal" is now.

The "hacker in a hoodie" image has been used for years by the media to call attention to articles about cyber security incidents. It's time that graphic is retired. Here's why.