Sorry, your browser is not compatible with this application. Please use the latest version of Google Chrome, Mozilla Firefox, Microsoft Edge or Safari.
Risk Management / Regulatory content
Using Business Impact Analysis to Inform Risk...
Understanding risk starts with knowing how disruptions impact an organization. The Business Impact Analysis (BIA) goes beyond disaster recovery—it helps leaders identify which assets are most critical and vulnerable to…
Learn More
Prioritizing Cybersecurity Risk for Enterprise...
Managing cybersecurity risks effectively is crucial for protecting an organization’s mission, operations, and reputation. The latest NIST Interagency Report (NIST IR 8286B) provides guidance on prioritizing cybersecurity risks within Enterprise…
Learn More
Contec CMS8000 Contains a Backdoor
A critical security risk has been discovered in the Contec CMS8000 patient monitor, commonly used in healthcare settings. The Cybersecurity and Infrastructure Security Agency (CISA) found an embedded backdoor that…
Learn More
The Move Toward Hard Stuff!
The World Economic Forum in January 2025, prioritized global risks for the coming year toward armed state based conflicts and extreme weather events, all of which are hard to risk…
Learn More
100 ATOs Reworked: Ideas on How Security Teams Can...
Federal IT security teams are under immense pressure to keep up with the rapid pace of technological change while ensuring compliance with rigorous cybersecurity frameworks. The traditional Authorization to Operate…
Learn More
Incident Response Plan (IRP) Basics
A well-prepared Incident Response Plan (IRP) is crucial for mitigating cyber threats and minimizing damage. By clearly defining roles, communication protocols, and response strategies, organizations can act swiftly in the…
Learn More
Illicit Finance: Agencies Could Better Assess...
Illicit financial activities fuel criminal networks, corruption, and even national security threats. A recent GAO report highlights gaps in assessing the effectiveness of federal strategies to combat these crimes. While…
Learn More
Malicious Cyber Actors Use Buffer Overflow...
Cyber threats are evolving, but one vulnerability remains stubbornly persistent—buffer overflows. Despite decades of known solutions, many software manufacturers continue to develop products with these security flaws, putting users at…
Learn More
Disaster Contracting: Opportunities Exist for FEMA...
FEMA plays a crucial role in disaster response, but recent reviews have highlighted gaps in contract oversight that could impact efficiency and accountability. With over $10 billion obligated for disaster-related…
Learn More
Interagency Security Committee Compliance Policy...
In an era of evolving threats, the 2024 ISC Compliance Policy and Benchmarks provide a clear framework for securing federal facilities. This guide helps agencies assess their adherence to critical…
Learn More
Supervisory Highlights: Advanced Technologies...
The rapid adoption of AI and machine learning in financial decision-making comes with both opportunities and risks. A recent CFPB report highlights how advanced credit scoring models, used by lenders,…
Learn More
Threat Actors Chained Vulnerabilities in Ivanti...
Cyber threats continue to evolve, and the latest attacks on Ivanti Cloud Service Applications highlight just how determined adversaries are. By chaining multiple vulnerabilities, threat actors were able to bypass…
Learn More
Microsoft Expanded Cloud Logs Implementation...
Cyber threats are evolving, and the ability to detect and respond to them quickly has never been more critical. The Microsoft Expanded Cloud Logs Implementation Playbook empowers organizations to enhance…
Learn More
Food Safety: FDA Should Strengthen Inspection...
The Food and Drug Administration (FDA) plays a critical role in safeguarding the U.S. food supply, but challenges persist in meeting inspection targets. Despite handling approximately 80% of the nation’s…
Learn More
Secure by Demand: Priority Considerations for...
Operational technology (OT) systems are the backbone of critical infrastructure, from energy and water to transportation. However, with their increasing interconnectivity, they’ve become prime targets for cyberattacks. To mitigate these…
Learn More