About Us | Contact Us
View Cart
Archive for 'Incident Response' Category

The Changing IT Landscape and Endpoint Detection and Response (EDR)

By Steven Jakubin - Last updated: Monday, May 9, 2022

Threats are changing, EDR can help us adapt . . . Today’s advanced persistent threat (APT) understands that the IT landscape has changed. In the post-COVID age, more and more organizations have adopted some form of work from home.  While WFH offers many conveniences, it also imparts increased risks. BitSight conducted a 2021 study of […]


Managing Software Supply Chain Risk

By Steven Jakubin - Last updated: Monday, April 25, 2022

Software Bill of Materials (SBOMs) are becoming more and more important. . . We are all very familiar with one aspect of the software supply chain – updates.  New features, bug fixes, and performance upgrades are a regular occurrence to any device’s lifecycle, however what if these kinds of updates also include deliberately malicious code? […]


Pandemic Woes Add To The Cybersecurity Job Retention Struggle

By Vigilize - Last updated: Monday, April 18, 2022

According to a new survey, more organizations than ever are reporting problems with cybersecurity staffing… An article review. While pandemic related mandates and restrictions are gradually being lifted across the country, many organizations are still feeling the effects in one important area: staffing.  That’s according to ISACA’s annual State of Cybersecurity survey, which asked over […]


My Take on the 36 Hour Rule

By Dan Hadaway - Last updated: Wednesday, March 9, 2022

It doesn’t cover us. . . . . . but we’ll agree to it anyway. Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . I thought I’d write a quick DNL about the new 36 hour rule.  It’s due in May, so I am not […]


How the New Rule Applies to infotex

By Adam Reynolds - Last updated: Monday, February 21, 2022

(It does not) But it’s “crazy complicated and seemingly circular.” A new article meant to inspire thought about IT Governance… Note: You can read the article where Adam discussed the rule itself here: FDIC and OCC Release New Incident Notification Rules. The new interagency Computer-Security Incident Notification Requirements rule includes requirements not only for banking organizations, […]


Behind Your Credit Union’s Recent NCUA IT Exams Findings Webinar Registration

By Vigilize - Last updated: Monday, February 14, 2022

A Webinar-Movie In 2018 the NCUA started reviewing credit unions with $1 billion or more in assets using a tool known as the Automated Cybersecurity Examination Tool, or as we call it: the ACET. The expansion to smaller credit unions is inevitable. In the new year, credit unions should now think about how they can […]


FDIC and OCC Release New Incident Notification Rules

By Adam Reynolds - Last updated: Monday, January 31, 2022

An update to your Incident Response and Business Continuity Plans will be required . . . . . . but will not replace any previous rules! A new article meant to inspire thought about IT Governance… Note: We have included a copy of the publication for your full review at the end of the article. Click […]


Regulators Approve New Cybersecurity Reporting Rules

By Vigilize - Last updated: Monday, November 22, 2021

New changes will decrease the amount of time an organization has to report incidents to regulators and customers… An article review. Citing the increasing frequency and pace of cyberattacks in recent years, the FDIC, Federal Reserve Board of Governors and the OCC have issued a Final Rule requiring financial organizations to notify their primary regulator […]


The One Test Movie

By Bryan Bonnell - Last updated: Monday, November 15, 2021

Truth In Disasters

By Dan Hadaway - Last updated: Monday, October 25, 2021

How Do We Know What We Know? Making Sure You Can Understand What Happened in an Incident. Another one of those Dan’s New Leaf Posts, meant to inspire thought about IT Governance . . . . Until I reclined on my front yard, looking at the sky, following the instructions on how not to look […]