Security Economics

CMMC 2.0 is dead. They just don’t know it yet.

I was pretty excited as I drove onto the sprawling and meticulously landscaped campus. I was heading to a meeting

Back in my days as a cybersecurity consultant, I did a lot of cyber maturity assessments for large organizations. We

I was just settling in for a busy day at the office when I saw the incoming call from the

Google’s announcement that it would be buying security firm Mandiant for $5.4 billion made some waves in the security world

I was just settling back to work after a nice holiday vacation when my phone rang. It was the Undercover

There is a buzz around the DoD’s reported review of the Cybersecurity Maturity Model Certification (CMMC) program. It is unclear

If you were in Lockheed Martin’s offices in 2009 you may remember seeing a number of unfamiliar, well-dressed people milling

The other day I got a FedEx package containing a USB drive and handwritten note. The note said: Please provide

Ransomware attacks on hospitals have been in the news a lot lately. Have security professionals done a good job of

I got a call from a friend the other day. We’ll call him the Undercover CISO. He is a polymath