Incident Response

Data Breach Laws: A State-by-State Framework

What you need to know for compliance coast-to-coast. Starting back in the year 2020 we unwittingly began an annual tradition by posting an article containing links to data breach laws...

They Clicked: Here’s What Happens Next

The Real Story of What Goes On After Someone at Your Institution Falls for a Phish In The Art of Phishing, I walked through how we build a phishing campaign: recon, psychology, lures,...

Tabletop Testing: A Key to Cyber Resilience

Testing What You Are Expecting An Article Review Working largely in a regulated industry such as financial services...

Indiana Code 28-10-3-2: What It Means for Community Financial Institutions

A New Law... A new Indiana law passed last year which flew under our radar, but has important implications for most of our Clients. Indiana Code 28-10-3-2 introduced new state reporti...

Data Breach Laws: A State-by-State Framework as of September 2025

What you need to know for compliance coast-to-coast. Starting back in the year 2020 we unwittingly began an annual tradition by posting an article containing links to data breach laws...

The Four Basic Truths of System Security

System Security and Cybersecurity are not the same thing. . . Another one of those Dan's New Leaf Posts, meant to inspire thought about IT Governance . . . . ...