Employees are one of the biggest threats to your company’s information system security. This isn’t a matter of insider threats or malicious actions to sabotage the company; it’s from accidental, unrealized actions that occur on a daily basis:
Connecting USB thumb drives and other removable devices to company-maintained computers poses a significant risk to your organization’s network. Even allowing employees to plug peripherals into the USB port for charging personal devices may infect their machine and compromising the entire network. This week we turn our focus to the impact user training has on unauthorized USB use in the office
The National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) has become an essential resource for U.S. businesses in developing a company-wide cybersecurity program. The guidance can be tailored to businesses of any size and has been recognized by many states and industry associations as a “best practice” for many business types.
Few environments are as stressful and frenzied as what you’ll find during a cyber incident response. All hands are on deck trying to stop an attack while attempting to keep the business operational. Where is the attacker now? What data are they after? Which systems are affected? There are hundreds of questions and rarely absolute answers. Time speeds up and yet somehow slows down at the same time. Each new finding brings new questions.
