Today’s rapidly evolving digital world requires organizations to build a robust cybersecurity plan to safeguard internal infrastructures and oversee third-party vendors’ cyber health. The Essential 8 is a cybersecurity framework developed by the Australian Signals Directorate designed to help organizations… Read More "Meeting the Third-Party Requirements of the Essential Eight"
A post-data breach questionnaire is essential for evaluating the impact of a third-party breach on your organization. This due diligence also ensures complaints with expanding data breach protection standards sweeping across government regulations. This post outlines a template to inspire… Read More "Vendor Post-Data Breach Questionnaire (Free Template)"
If you’re considering partnering with a service provider, it’s essential also to consider the security risks they could introduce to your organization. In this post, we outline the primary cybersecurity risks associated with service providers and provide tips for managing… Read More "Evaluating & Managing Service Provider Security Risks"
.jpeg?w=1140&resize=1140,855&ssl=1 "What is FIPS 140-2? Cryptographic Module Validation Program")
FIPS 140-2 is a federal information processing standard that manages security requirements for cryptographic modules. The National Institute of Standards and Technology (NIST) published the security standard in November 2001 to develop coordinated requirements for hardware computer components. NIST replaced… Read More "What is FIPS 140-2? Cryptographic Module Validation Program"
.png?w=1140&resize=1140,855&ssl=1 "What is the Vendor Risk Management Lifecycle?")
The vendor risk management lifecycle (VRM lifecycle) is an end-to-end system that categorizes critical VRM or third-party risk management processes into three phases: vendor onboarding, ongoing risk management, and continuous monitoring. This organized lifecycle, sometimes called the third-party risk management… Read More "What is the Vendor Risk Management Lifecycle?"
Short-Answer Quiz Instructions: Answer the following questions in 2-3 sentences each. Your answers should be based on the concepts presented in the study materials. ——————————————————————————– Answer Key ——————————————————————————– Essay Questions Instructions: Prepare a detailed, essay-format response for each of the… Read More "Security+ Domains 1-5 Study Guide"
Like most large-scale organizations, colleges and universities often rely on a network of third-party vendors for day-to-day business operations. These vendors may handle various tasks, ranging from hospitality and food services to facility management and IT infrastructure. Regardless of the… Read More "Vendor Risk Management for Universities: Leveraging Tech Solutions"
Vulnerability management is the process of identifying, evaluating, prioritizing, remediating and reporting on security vulnerabilities in web applications, computers, mobile devices and software. Continuous vulnerability management is integral to cybersecurity and network security and is on the Center for Internet Security’s (CIS) list of basic security controls,… Read More "What is Vulnerability Management? | UpGuard"
Two people allegedly linked to China’s infamous Salt Typhoon espionage hacking group seem to have previously received training through Cisco’s prominent, long-running networking academy. Meanwhile, warnings are increasingly emerging from United States lawmakers in Congress that safeguards on expanded US… Read More "AI Toys for Kids Talk About Sex, Drugs, and Chinese Propaganda"
.jpg?w=1140&resize=1140,855&ssl=1 "Crafting a Comprehensive Web Application Security Questionnaire")
One of the foundational areas of cybersecurity is securing web applications. Millions of users visit different websites daily, exchanging sensitive information and data. Securing your organization’s web applications includes many tools like authentication protocols, data encryption, network defenses, and more.… Read More "Crafting a Comprehensive Web Application Security Questionnaire"
