Cybersecurity is a public health crisis, so why don’t we treat it that way?
What can cybersecurity learn from data and guidance around public health? We break down Adam Shostack’s call to action for a cyber public health framework.
Management, compliance & auditing
Rapid threat model prototyping: Introduction and overview
Choosing a form of threat modeling can help protect your organization from security threats.
Commercial off-the-shelf IoT system solutions: A risk assessment
The Internet of Things (IoT) is growing rapidly. IoT devices provide convenience and can be a more efficient and cost-effective solution to a variety of different...
A school district’s guide for Education Law §2-d compliance
During the 2014-2105 fiscal year, the New York State Education Department enacted Education Law §2-d, which includes a series of provisions designed to enhance...
IT auditing and controls: A look at application controls [updated 2021]
Portions of this article, including many of the definitions and terminology, have been sourced and summarized from ISACA.org and course materials published...
6 key elements of a threat model
Threat modeling is a process for threat discovery and risk management. Any system carries potential risk, and a clear understanding of these risks is essential...
Top threat modeling frameworks: STRIDE, OWASP Top 10, MITRE ATT&CK Framework and more
Threat modeling is an exercise designed to identify the potential threats and attack vectors that exist for a system. Based upon this information, it is possible...
Average IT manager salary in 2021
IT management is a competitive career opportunity. Some companies hire from within, but you can still find job opportunities from IT firms looking for qualified...
Security vs. usability: Pros and cons of risk-based authentication
Risk-based authentication (RBA) has to become part of the enterprise lexicon for a good reason. The authentication measures used to protect access to resources...
Threat modeling: Technical walkthrough and tutorial
Threat modeling is an exercise designed to help an organization identify potential threats and cybersecurity risks within their organization and systems....