Cybersecurity strategy perspectives for the emerging risks and opportunities of securing our digital world. The insights of today will lead to tomorrow's security, privacy, and safety foundations.
28 Jul 2023 3 minute read 7 comments Matthew Rosenquist
The new SEC Rules establish a framework that requires rapid disclosure of material cybersecurity incidents (4 days), companies will need to be able to explain their cybersecurity posture to manage risks, and for boards to describe their oversight an...
18 Jul 2023 1 minute read 0 comments Matthew Rosenquist
The US National Cybersecurity Strategy Implementation Plan fails to address ransomware. There is a real opportunity for the government to make significant progress in crushing the growing scourge of ransomware attacks which threaten businesses, indi...
11 Jul 2023 1 minute read 1 comment Matthew Rosenquist
The recent HCA Healthcare data breach of 11 million patients’ data is shaping up to be another ugly incident where a company did not promptly communicate with its customers. HCA Healthcare is a large American healthcare services organization that co...
10 Jul 2023 1 minute read 0 comments Matthew Rosenquist
Check the calendar as Richard Stiennon and I discuss the forward-looking cybersecurity predictions for 2023 and beyond! With several decades of knowledge and experience between us, we take a pragmatic look into the crystal ball. Those who have an un...
7 Jul 2023 1 minute read 1 comment Matthew Rosenquist
There are many approaches to conduct a strategic cybersecurity risks assessment. This is one of my favorite ways, using a Threat Agent Risk Assessment (TARA) methodology. This paper was authored by Tim Casey, David Houlding, and I while we were at...
30 Jun 2023 1 minute read 1 comment Matthew Rosenquist
Ever wonder what kinds of things happen when good-intentioned people try to manage cybersecurity? Well, in this case, a High School in Illinois responded to a system error by resetting every student’s password and then communicating it to all the pa...
21 Jun 2023 1 minute read 0 comments Matthew Rosenquist
Cybersecurity Meetup with Richard Stiennon and Matthew Rosenquist The hottest topic of 2023 - Artificial Intelligence. Richard Stiennon and I discuss the relevance and how Large Language Models (LLMs), like ChatGPT, are adding innovation to the use...
19 Jun 2023 1 minute read 0 comments Matthew Rosenquist
In this Cybersecurity Vault episode, I talk with the legendary cybersecurity metrics maestro Wade Baker about the challenges of measuring what is important, manipulation through poor metrics, and where the cybersecurity industry is heading. Wade has...
10 Jun 2023 1 minute read 0 comments Matthew Rosenquist
Hackers are exploiting an un-patchable vulnerability (CVE-2023–2868) in Barracuda Email Security Gateway appliances. Barracuda has announced that customers should discontinue using the email security product or upgrade. Hackers are using multiple ty...
31 May 2023 1 minute read 0 comments Matthew Rosenquist
The game is changing as cybersecurity groups must justify their growing costs and importance during the economic downturn. CISOs are under pressure to do more with much less and need to adapt to show clear competitive advantages. Cybersecurity must...
