Articles on enterprise risk, business continuity, operational resilience, incident response and policy, including OT and critical infrastructure.
Ransomware attacks are preventable more often than they are prevented. This article sets out the practices that stop them: backups, patching, access control, awareness and response plans.
Best Practices For Preventing Ransomware Attacks Read More »
Ransomware-as-a-Service lets criminals rent attacks. This article assesses its impact on small and medium enterprises and the controls that reduce exposure.
Ransomware-as-a-Service: Assessing Impact on Small and Medium-Scale Enterprises Read More »
AI-powered ransomware targeting IoT devices raises the scale and speed of attacks. This article assesses the threat and the controls that reduce it.
The Rise of AI-Powered Ransomware Attacks in IoT: A New Wave of “Cyber Armageddon”? Read More »
Ransomware attacks explained: what they are, why they succeed and how they unfold, with the controls that stop them at each stage.
Ransomware Attacks: Understanding The What, Why, and How Read More »
As warnings of an imminent Russian attack on Ukraine makes headlines, it also poses major cyber risk to U.S. and western nations with possibility of nation state sponsored attacks on the critical infrastructure. The joint Cybersecurity Advisory (CSA)—authored by the Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), and National Security Agency (NSA)—
Risk of Russian Cyber Attacks: Need for Extra Vigilance with a Focus on Cyber Resilience Read More »
Era of Automated Security Risk and Posture Management
Era of Automated Third Party Risk Management: Trust but Verify
Era of Automated Security Plans, Standards, Policies and Procedures
