M2 is the bridge between Technology, Leadership, and Process. M2 provides a standardized method to understand, implement, and work toward continued improvement in CyberSecurity
CMO – The Cyber Management Office provides the ability to governance and manage the individual efforts your organization must execute to achieve continued improvement in CyberSecurity
CM – Controls Management aligns your organization to the frameworks and regulatory controls they have voluntarily, or are required to follow.
PM – Policy Management provides the ability to document and communicate how policy relates to organizational controls.
AM – Audit Management sets the ownership, governance, schedules, and processes for auditing that the policies and controls in effect.
RM – Risk Management allows the organization to understand and manage the events, triggers, impacts, potential reductions, reduction progress, response plans, and documented testing of those plans.
ITAM – IT Asset Management allows for the discovery, heterogeneous data source integration, data normalization, white listing, categorization, ownership, lifecycle management, and vendor management related to hardware and software assets.
VAC – Vulnerability and Compliances provides the mechanisms to identify Software, hardware, and configuration based vulnerabilities through integrations and interfacing to IT Asset Management, IT-Pedia®data, Open Source Vulnerability Scanning, and SCAP Scanning.
CC-Cyber Culture leverages included InfoSec Institute CyberAwareness Training to eliminate risk at a key CyberSecurity breach vector, people. CC starts with the rapid, engaging, and short training sessions. CC follows with testing progress using documented scores and Phishing simulation testing across the organization.
DM – Data Mapping allows the organization to associate key granular data with other data, making collected information more powerful and meaningful to pre-built and custom dashboards and representations.
CyberSecurity isn't about tools, it's about reducing risk to your organization. Collaborative integration of key functions will dramatically improve your CyberSecurity posture. The orchestrated result is measurable risk reduction, vulnerability
Software Vulnerabilities Risk Remediation from Bruce Hafner
Pragmatic CyberSecurity and Risk Reduction from Bruce Hafner
The House Energy and Commerce Committee sent a letter to Equifax CEO Richard Smith formally requesting testimony before Congress. The cybersecurity breach, which was first discovered on July 29, targeted
How would your organization defend itself in a court of law or to regulators in the event of a CyberSecurity incident? This is a question that many organizations
CEOs and Boards have identified CyberSecurity threats as a significant enterprise risk, governed with the same rigor and discipline as other corporate risk. Effective governance depends upon robust
It is estimated that Cybercrime will cause losses in excess $6 trillion by 2025. Many of these losses can be avoided through the implementation of effective CyberSecurity policies.
With the Easter and Passover holidays approaching, it is important to be wary of holiday-related scams. Some of the most commonly seen scams include: Electronic “greeting card” software
With tax season upon us, it is wise to be on guard for phishing and other attacks that can make it easy for others to assume your identity. Phishing,
CIS and NIST recently updated their critical security controls and framework. The critical security controls and framework make us CyberSecuirty and Network Mangement Best Practices. Cybersecurity breaches into energy, industrial,
A Team-Based Approach to CyberSecurity: C-Level Executives, General Counsel, and Decision Makers – Security Challenges CyberSecurity breaches mean big losses for companies, including headlines that drive away customers,
