Zero trust implementation – lessons from our 2-year journey
We completed our zero trust implementation after 2 years of work. It was harder than expected but the results are worth it. Here are our…
Phishing simulation results shocked our management
We ran our first phishing simulation and 43% of employees clicked the link, 28% entered their credentials. Management is shocked. Now they want to “punish”…
Should we pay the ransom? Ethical and practical considerations
This is a genuine ethical dilemma many organizations face. Our hospital was hit by ransomware and patient care is being affected. The FBI says don’t…
Dark web monitoring – is it worth the investment?
Our CISO wants to invest in dark web monitoring services. Vendors are quoting $50-100K/year. Is this actually useful or is it mostly marketing? What’s your…