Cybersecurity professionals at every level tend to shy away from involvement in the legal contract review process. For those of us that did not attend Harvard Law School, reviewing a written warranty when renting a vehicle can be enough to induce nose bleeds. We also know information security must be integrated at every level of…
Many people call any program that an attacker uses to their advantage, including publicly available tools, “malware.” That is not a good practice as the term “malware” is far too generic and makes its handling much riskier than needed. Further categorizing the malware better identifies the attackers’ goals and answers the question, “What does the…
When any type of disaster takes an organization offline and disrupts its critical functions, incident response teams scramble to address the issue. While IT attempts to reinstate data and communication capabilities, it may be necessary to activate a secondary recovery site. Astute leadership will have prioritized and allocated obvious resources well in advance. But did…
