Examines frameworks, methodologies, and practical approaches for identifying, assessing, and mitigating cybersecurity risks. Topics include risk assessments, threat modeling, vulnerability management, and building a risk-aware organizational culture.
posts
The Breach That Started With a Spreadsheet App In 2023, a midsize healthcare company discovered that an employee had been syncing patient records to an unauthorized cloud storage service for over eight months. The service had no encryption, no access controls, and no audit logging. By the time the security
Your Employees Already Built a Second IT Department In 2023, a Gartner survey found that 41% of employees acquired, modified, or created technology outside of IT's visibility. By now, that number has only grown. If you're asking what is shadow IT, the short answer is this:
