Cyber Tactics
RSS

Managing Supply Chain Risk

July 1, 2018

When NIST recently updated its Cybersecurity Framework, it added only one new core category: Supply Chain Risk Management (SCRM). Placed within the Framework’s “Identify” function, SCRM encompasses, but typically extends beyond, traditional vendor management approaches. That’s because the supply chain typically extends beyond suppliers to include other external parties, such as integrators and even third-party communications providers.

Revised NIST Cyber Security Framework - Security Magazine

5 Things You Need to Know about the Revised NIST Cybersecurity Framework

Steven Chabinsky

June 1, 2018

To get you quickly up to speed, here’s a list of the five most significant Framework clarifications and revisions.

Is Your Vendor Risk Management Program Working?

Steven Chabinsky

April 1, 2018

Companies remain on the hook for ensuring their vendors are up to task when it comes to cybersecurity, privacy compliance and continuity of operations. This checklist can help determine the maturity of your vendor risk management program.

Please Forget to Change Your Password Every 90 Days

It's Time to Rethink Password Management Best Practices

Steven Chabinsky

March 1, 2018

Some of the most basic tenets of password account management have failed, leaving us with a dreadful combination of poor user experience and inadequate security.

Multi-Factor Authentication - Security Magazine

Multi-Factor Authentication Should Be HARD

Steven Chabinsky

February 1, 2018

How difficult is it for a computer (or a complete stranger) to validate the true identity of a person they don’t know? Very difficult, it turns out, especially when others may be trying to imitate them.

The Top 12 Practices of Secure Coding

Steven Chabinsky

January 1, 2018

The list provides a quick summary of the top 12 security practices to mitigate risks from internal and third-party software.

Dear Encryption, We're Worried About Your Future

Steven Chabinsky

December 1, 2017

Encryption, my friend, there’s a lot riding on your shoulders. It’s true you always bounce back, but for how long?

Traveling with Technology Security Magazine November 2017

Traveling with Technology: An Information Security Guide

Steven Chabinsky

November 1, 2017

Traveling abroad with technology brings with it certain risks and may subject you to government surveillance in ways that are different from domestic travel. According to the FBI, you shouldn’t expect privacy in most countries outside the United States. Your data is less secure when you travel.

Understanding the Distinct and Dependent Roles of Data, Privacy and Cybersecurity Professionals

Steven Chabinsky

October 1, 2017

Taking advantage of technology and digitization involves more than business strategy. It requires strong data governance principles which, among other things, must align the functional demands of an organization’s cybersecurity, privacy and information management teams.

How New York is Shaking Up Cybersecurity

Steven Chabinsky

September 1, 2017

Something potentially groundbreaking is happening in New York, and its impact is being felt globally. Still, if you’re not in the financial services industry, and specifically regulated by the New York State Department of Financial Services (NYDFS), you may have missed it. What is this change? In short, it’s the first of what may become a wave of stringent state cybersecurity regulations that impose “minimum standards” on industry.

With the advent of Internet of Things (IoT) technology and Industrial Internet of Things (IIoT), the cyber security practices are increasingly getting integrated with the physical security practices.

We will provide insight on NDAA Section 889 and how the act has evolved and impacted business, so that organizations can better mitigate risk and stay compliant.