Making the Most of Tight Budgets: Key Cybersecurity Risk Levers

Cybersecurity professionals everywhere find themselves in a precarious situation, grappling with two major forces that will continue into 2023: These challenges are common among my clients. Many of them are looking for ways to address financial scarcity while trying to protect their organizations from evolving global threats. I’m advising them to leverage cybersecurity risk levers […]
Cybersecurity Budget Redux

It’s that time of year again: budget season. And as organization stakeholders look ahead to 2023, cybersecurity might not be at the top of their budget priorities, despite research showing evidence that cybercriminals can penetrate 93% of company networks. Getting buy-in from all company leaders is the best way to build a robust cybersecurity strategy, […]
How to Budget the Right Amount to Address your Cyber Posture

According to a study released by Deloitte (FS-ISAC/Deloitte Cyber & Strategic Risk Services CISO Survey Reports; 2019 and 2020; Deloitte Center for Financial Services analysis), the average company will spend somewhere between 6% and 14% of their annual IT budget on cybersecurity. Moreover, according to Deloitte, the average annual security spending per employee increased from $2,337 in 2019 […]
Keeping The Lights On: Reducing The Likelihood Of Cyberattacks In The Utility Energy Sector

The services that make up the energy sector are vital to America’s function and progress. Virtually every aspect of daily life is reliant on the uninterrupted availability and flow of energy, whether it’s electricity, water, or natural gas. At the same time, this reliance makes the energy sector a prime target for malicious actors and […]
Don’t Feel Obligated To Jeopardize Your Identity Just To Get Your Teeth Cleaned Or Join A Gym

As a tenured technology professional, who has specialized in third-party risk for the past few years, I am always interested in strategies that organizations use to procure and protect sensitive information. Upon check-in at my most recent dental cleaning, the receptionist asked me to hand over my driver’s license so that she could scan my […]
A Pocket Guide to Risk and Compliance Automation

You don’t have to be an expert to know that risk management and corporate compliance are different things. Risk management refers to events that can result in some unexpected or undesirable consequence, and how your organization keeps those threats at bay. Corporate compliance is about conforming your business operations to various rules or requirements set […]