While conducting new business development and educating people on the field of cybersecurity, a predictable pattern has emerged. This pattern is a preconception about the size and complexity of cybersecurity. From the outside, people tend to view cybersecurity as a narrow field. It seems fair to say that people don’t realize the magnitude of what’s…
Managed Security Services Providers (MSSP) protect businesses by focusing on cybersecurity, compliance, and risk. IT Managed Services Providers (IT MSP) keep technology running by providing end-user support and back-end operations. Many organizations falsely believe that accountability for the security program shifts to their IT MSP. As a result, businesses are putting themselves at increased risk…
The CMMC is a new security model from the Department of Defense. It helps to define a modern approach to cybersecurity programs. A close inspection reveals some intriguing details, which are worth highlighting. So in case you missed it, here two of them. Control frameworks first, followed by program frameworks. References to NIST SP…
Business Associate Agreements and PHI. To sign, or not to sign? That is the question. Many of us often find ourselves making decisions with legal implications. Of course we consult with our legal counsel to be sure, yet sometimes things are a double-edged sword. Such is the case when signing legal documents. Today we’re going…