A Case Study in MFA Rollout If you ask any cybersecurity professional for the single most effective, low-hanging fruit to secure an organization, Multi-Factor Authentication (MFA) usually tops the list. Adding that extra verification step stops the vast majority of automated credential attacks dead in their tracks. It’s the digital equivalent of adding a second […]
CMMC Paused But Not Forgotten
CMMC Paused But Not Forgotten If you work anywhere near the defense industrial base (or spend your days tracking federal cybersecurity mandates just for fun like I do), the recent headlines around the Cybersecurity Maturity Model Certification (CMMC) probably gave you a sudden case of deadline-induced deja vu. Just as organizations were revving their engines […]
Learning How to Build A Cybersecurity Program: Lessons from The Princess Bride
Learning How to Build A Cybersecurity Program: Lessons from The Princess Bride Everything I know, I’ve learned from The Princess Bride. It’s how I landed my first job, played a key role in my wedding proposal, and inspired me to learn how to swordfight, which led to an Olympic Gold Medal. I’ll let you figure […]
Death, and Disruption of Your Cyber Supply Chain
Two Things Are Certain in Life 1) Death, and 2) Disruption of Your Cyber Supply Chain Benjamin Franklin famously wrote that nothing in this world is certain except death and taxes. If Ben were around today managing an enterprise IT network, he’d almost certainly add a third item to that list: supply chain disruption. We […]