720-891-1663

Battling Insider Threat – The Leak of US Intel Docs

Today the FBI arrested the person they say leaked hundreds of classified documents on US surveillance related to the war in Ukraine. The impact of this leak may rise to the level of the damage caused by Edward Snowden in 2013. They continue to find more classified documents as the investigation continues. What is different […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Federal Civilian Agencies May Have to Comply with CMMC-Like Security Requirements

If you sell to the federal government – any agency – you need to pay attention to this. Until now only DoD contractors were going to have to comply with CMMC or NIST SP 800-171. The standard requires 100% compliance with 110 controls; some of them pretty straight forward like having each user having their […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Security News Update for April 7th, 2023

FDA Will No Longer Approve Digital Medical Devices That Are Vulnerable Starting last month, the FDA will REJECT all new applications for any cyber medical device that does not include a cyberattack protection plan. Of course this won’t be perfect, but at least manufacturers will have to make an effort at it. Given that the […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Do You Think Your Customers Care WHY it Took You 2 Years to Tell Them Their Data was Breached?

This is a secondary problem of vendor cyber risk. The first problem is that you are dependent on a lot of vendors. You have to depend on those vendors. If they screw up, you get sued. And you lose customers. To make matters worse, when one of your vendors gets breached, you are only one […]

Continue reading → [DISPLAY_ACURAX_ICONS]