Security – Security Economics

CMMC’s worst ‘best practices’

There is a buzz around the DoD’s reported review of the Cybersecurity Maturity Model Certification (CMMC) program. It is unclear

If you were in Lockheed Martin’s offices in 2009 you may remember seeing a number of unfamiliar, well-dressed people milling

The other day I got a FedEx package containing a USB drive and handwritten note. The note said: Please provide

Ransomware attacks on hospitals have been in the news a lot lately. Have security professionals done a good job of

I got a call from a friend the other day. We’ll call him the Undercover CISO. He is a polymath

If you attended business school any time over the last 50 years you probably read the timeless Harvard Business Review

In my previous post I outlined why the most cost-effective way to recover from a ransomware attack is to pay

Recently, travel management company CWT became yet another victim of a ransomware attack. The company paid the attackers over 400

In 2002, Donald Rumsfeld, who was the US Secretary of Defense at the time, was asked a question about the

It hit me as I stepped outside the Reagan National Airport terminal. Just five hours earlier I’d been in the