Blog

What is a vCISO?

A virtual chief information security officer (vCISO) is a third-party cybersecurity expert who provides organizations with strategic advice and guidance on information security matters. Typically there are one of three reasons to hire a vCISO: Your company's CISO may...

Welcome to TrustedCISO a vCISO Consulting Company

Compliance

Hello and welcome to TrustedCISO! I have 30 years of experience in information security. Having been a Chief Information Security Officer (CISO) at RedSeal, Inc, I decided to launch my own vCISO consulting company in 2022. I am experienced in building SOC2 and...

United Healthcare Ransomware Attack

Compliance, Threats

After a debilitating ransomware attack at United Healthcare that has caused some health care providers to lose up to $1 billion a day, the US Office of Health and Human Resources is investigating the hack. United Healthcare paid $22 million to the Russian ransomware...

Over 2 Million Affected by McLaren Healthcare Data Breach

Threats

In an era where digital information is king, the recent data breach at McLaren Healthcare serves as a stark reminder of the vulnerability of our personal data. In this incident, over 2 million individuals were impacted, marking it as one of the most significant...

Table Top Exercises for Business Continuity and Incident Response | TrustedCISO

Compliance

A business continuity or incident response table top is a simulated scenario-based exercise designed to test an organization's ability to respond to a potential crisis or disaster situation. The exercise typically involves a group of key stakeholders and...

SOC2 Audit Services for Cloud and SaaS Providers – Contact TrustedCISO

Compliance

SOC2 (Service Organization Control 2) has become the de facto audit requirement for the cloud in the commercial space. Whether your company has a SaaS product or you are evaluating a cloud service offering, you need to understand what SOC2 is and how to evaluate a...

Ransomware Attack

Threats

Ransomware attacks are not slowing down because it is a profitable business. According to Cybersecurity Ventures, ransomware damages were $20 billion in 2021 and are projected to be $42 billion by 2024.

Securing Cloud Serverless

Cloud

Here are the best practices for securing cloud serverless architecture: Implement proper access controls: Use identity and access management (IAM) to set up fine-grained permissions for resources and APIs. Secure data in transit and at rest: Encrypt sensitive data and...