Complacency and Cybersecurity Awareness

Are we being too complacent in our feeling of “nothing will happen to us” with regard to Cybersecurity? 2 stories tie this theme together: Phishing awareness training  wears off after a few months Apparently retraining is required after 6 months. Ransomware and Observations from Recent IR investigations Businesses are still getting ransomware, not how it … Read more

Is Psychology of Security Causing Cybersecurity Problems?

What do I mean by Cybersecurity problems?  How about not patching  or upgrading your devices, taking inventory of your devices.  Making changes to the network or systems and not thinking about security. Or just plain old errors, mistakes, issues that arise after something new happens. Why would we not pay attention to these things? What … Read more

Cybersecurity Must be Attended to Or? Can the Unthinkable Happen to You?

Should Cybersecurity have some attention if you have not been hacked before? Does your business really need  more Cybersecurity awareness? I.e. So What… Cybersecurity!!! Is this what you are thinking? That does not matter to me ? I guess if this is your default thinking after every new headline of Breaches and attacks… For example … Read more

Is Cybersecurity a Problem? or a Management Issue?

Is cybersecurity a problem to be dealt with or is it to be managed? (these questions were slightly changed from the presentation at RSA Conference in Asia – https://www.rsaconference.com/apj/agenda/how-to-tell-the-right-cyber-story-to-executives-and-board-members  Ian Yip CEO of Avertro – he brings up some good questions.   Let us delve a bit deeper into this question. Why should we care … Read more