In cybersecurity awareness programs, we try to keep people informed of the latest scams.  However, it seems like we are chasing a carrot on a stick.  Scammers are continually changing up their scams, and it is nearly impossible to keep up with the rapid changes.  This...

A survey by ThreatTrack demonstrates that the role of CISO is misunderstood and underappreciated by C-Level peers.  It seems business executives do not have confidence that the CISO understands the business.  It seems many executives make business decisions that have c...

Recently technical guidance was released for CIOs and CISOs on how to prepare for a ransomware attack.  This guide was a joint effort of multiple Federal agencies to address the growing concern of ransomware. In, “How to protect your Networks from Ransomware,” they pro...

Government Imposter Scams

We have all received calls or emails purporting to be from some government agency like the social security administration, IRS, FBI, Medicare demanding immediate attention and often requiring a payment. These scams use threat of government to s...

Cybersecurity Supporting Documentation

In previous posts I outlined the required topics for cybersecurity policies and procedures.  In this post I will cover the cybersecurity related supporting documents.

The table below lists items or topics, that should be address eit...

In a previous post I outlined the required topics for cybersecurity policies.  In this post I will cover the required procedures from various cybersecurity standards and in a future post will cover the cybersecurity related supporting documents.

The table below lists it...

Here is a sample of a ransom email I received, like ones that have been reported to be by others. This one has been called the Cisco Router Sextortion Scam.  This one seems to have better grammar then past ones.  The details don’t make any sense. The only thing in the...

ACH Scam

Vendor ACH request fraud is on the rise.  The scam works this way, cybercriminals stalk their prey (research or intelligence gathering) looking for a new contract award for a vendor or find an existing vendor typically for a local government.  Information lik...

Question from a friend. 

“I have a computer with a 10-year-old processor running Windows 7. I need better performance from my computer. What should I do?”

Computers are not single task machines and pinning down the best system for the desired performance has several fact...

What topics need to be covered in cybersecurity policies?

In this post I will cover the required cybersecurity policies from various cybersecurity standards and in future posts I will cover cybersecurity procedures and cybersecurity related supporting documents.  The ta...