Covers the integration of cybersecurity into broader enterprise risk management strategies. Articles address how organizations identify, assess, and prioritize cyber risks alongside operational, financial, and strategic threats, ensuring a unified approach to protecting critical assets and business continuity.
posts
One Unapproved App Cost a Hospital Network $3 Million In 2023, a regional hospital system discovered that a department had been using an unapproved file-sharing tool to exchange patient records for over a year. The tool had no encryption, no access controls, and no audit trail. When an attacker exploited
The SEC Changed Everything — Most Boards Still Haven't Caught Up In July 2023, the SEC adopted rules requiring public companies to disclose material cybersecurity incidents within four business days and to describe their board's oversight of cyber risk annually. Since then, I've reviewed dozens
