22 articles
Installing a package often feels as ordinary as picking an ingredient from a supermarket shelf. One command brings thousands of lines of code into an application, and we continue building without meeting the people who wrote them or inspecting every file. The…
Read articleAccess Control Reviews for Small Organizations — Keeping the Right Doors Open In a small organization, access often grows quietly. Someone …
When discussing information security, our attention usually goes straight to firewalls, antivirus, or long passwords. All of that is import…
Vendor Risk Management for Small Organizations — Safeguarding Risks Coming from Third PartiesWhen building a system, our attention is usual…
There's a big difference between knowing that an email account has been compromised and knowing what to do in the first thirty minutes. In …
Business Continuity Plan for Small Organizations — Keeping Going When the Unexpected Comes UpWhen I heard the term Business Continuity Plan…
Information Security Risk Assessment — How to Map Risks Before They Become IncidentsWhen building or maintaining a small system, I'm often …
CIS Controls v8 for Small Organizations — Starting with Security Where it Makes the Most ImpactWhen you hear the term cyber security framew…
Some time ago I was almost tricked. Not because my device is not secure, nor because my password is weak. It all started with one short mes…
I still remember the first time I read the NIST Cybersecurity Framework document several years ago. The number of pages was enough to make …
