How Mobile Devices Put Your Business at Risk
Statistically speaking, 53% of everyone reading this article is on a mobile device. A short 10 years ago, the average person didn’t even own a
SQL Backup Notifications – The Next Step in Data Security
Data integrity and protection are two of the most important tenets of using SQL databases. In most cases, IT will set up daily backups and
Cyber Extortionists Targeting Small Businesses
You may have seen recent news articles about large organizations, such as manufacturing giant Norsk Hydro, Garfield County, Utah, and the City of Albany, New
Office 365: Breach Detection with Cloud App Security
I previously wrote about reviewing Office 365 accounts that you suspect being compromised using the Audit Log. This is useful when you are doing remediation
Tornados and Hackers
Earlier in March, tornado emergency sirens went off across a couple of cities in Texas in the middle of the night, waking people up and
Creating and Using Key Pairs in Windows
Instead of sharing passwords for files, public-key encryption provides a great way to securely exchange files, documents, and other sensitive data. The following is meant
New Capability in Email Breach Investigations Within Office 365
Dealing with account breaches is never an enjoyable activity. It typically gets even more sour when you can only get limited information on what happened.
Office 365: Compromised Account Review with Audit Log
Imagine this scenario that System Administrators are more commonly being faced with: An end user forwards along an e-mail inquiring about its legitimacy. The e-mail
Regarding Security Breaches and Passwords
Two of the most frequently asked questions that come across my desk are “Do I need to worry about the ‘fill in the blank’ security
Why Private Equity Firms Need to Include Cybersecurity in Their Due Diligence Process
The threat of a cybersecurity breach is often overlooked in the chaos of an acquisition, despite the potential risk such breaches can have on the
Best Wireless Security Practices While Traveling
Today’s modern workforce is mobile. Whether it is an out-of-town business trip or simply a quick visit across town to meet with colleagues or clients,
Meeting PCI DSS Requirements Using a DevOps Model
The Payment Card Industry Data Security Standard (PCI DSS) is a set of compliance requirements against which merchants, payment gateways, issuers and other organizations who
What Is Mobile Phone Tabnabbing and How Can I Prevent It?
Tabnabbing is a type of social engineering attack where a hacker replaces the contents of a dormant browser tab with a spoofed website intended to
Stop Security Threats Before They Start
Like it or not every company deals with security threats on a regular basis. Some companies focus on remediation and cleanup, while others focus on
New Office 365 Feature: Attack Simulator for Office 365 Threat Intelligence
As sad as it sounds, Sikich has been involved in many breach remediation efforts related to Office 365. Not that the infrastructure or service was
How to Use PowerShell to Report Active User and Computer Accounts
It is best practice to periodically review the security accounts held in Active Directory so that inactive accounts can be disabled or deleted. This regular
Obtaining GDPR Compliance with Dynamics 365
On May 25, 2018, the General Data Protection Regulation (GDPR) privacy law for Europe will go into effect and set a new global standard regarding
A Risk-Based Approach to Maximizing Security Control Investments
Buying the latest and greatest, best-of-breed security solutions without employing a risk-based approach to security is not a sound strategy for an information security program.
Protecting Yourself Against Data Breaches
As an advisor to middle-market businesses, I have become increasingly aware of the new risks that face our business owners, one of which is the
Vulnerability Scanning Scope – The ASV Program Guide and Sampling
When you’re wading into the external vulnerability scanning requirement of the Payment Card Industry Data Security Standard (PCI DSS), the most frequent question we hear
