by deb_infosec | Apr 8, 2024 | Compliance, Threats
After a debilitating ransomware attack at United Healthcare that has caused some health care providers to lose up to $1 billion a day, the US Office of Health and Human Resources is investigating the hack. United Healthcare paid $22 million to the Russian ransomware...
by deb_infosec | Mar 8, 2023 | Compliance
A business continuity or incident response table top is a simulated scenario-based exercise designed to test an organization’s ability to respond to a potential crisis or disaster situation. The exercise typically involves a group of key stakeholders and...
by deb_infosec | Feb 28, 2023 | Compliance
SOC2 (Service Organization Control 2) has become the de facto audit requirement for the cloud in the commercial space. Whether your company has a SaaS product or you are evaluating a cloud service offering, you need to understand what SOC2 is and how to evaluate a...
by deb_infosec | Jan 27, 2023 | Compliance
Two Factor Authentication Did you know that you can prevent 99% of account attacks by using multi-factor authentication (MFA)? MFA also known as two factor authentication is one of the most important security measures you can take. 99.9% of account attacks are...
by deb_infosec | Dec 5, 2022 | Compliance
A virtual chief information security officer (vCISO) is a third-party cybersecurity expert who provides organizations with strategic advice and guidance on information security matters. Typically there are one of three reasons to hire a vCISO: Your company’s...
by deb_infosec | Sep 14, 2022 | Compliance
By Debra Baker CryptoDoneRight is now a nonprofit and has found a home at the Cloud Security Alliance. Ever wonder what cryptographic algorithms to use? What is better for symmetric encryption, AES-CTR or AES-CBC? For that matter what is symmetric...
