Steven Grossman

Incident Response Playbook Sharing Helps the Community Respond to Threats Without Having to Reinvent the Wheel

Many enterprises have been taking stock of their security architecture as well as assessing gaps and redundancies (see last month’s article Wading Through Tool...

A False Sense of Security is Worse Than a Real Sense of Vulnerability

The IRS issued a warning last month about an updated version of the old wire transfer phishing scam, where fake emails are sent to...

Just like all things security, yet another new concept has taken the market by storm, being repeated over and over again. The perimeter is...

How Can a Company Protect its Information and Operations Without Running Askew of Data Privacy Laws and the Concerns of its Customers?

Behavioral Analytics Enables Verification That Users Are Doing the Right Thing, And Promotes Transparency

Over a decade ago, as the digital economy was getting its legs, data loss prevention (DLP) technology was seen as the savior for companies...

It has been yet another busy month in the world of cyber security news. What does it mean when breaches reach private sector and...

Just Because You Passed Your Compliance Audit Does Not Mean That You Are SecureWhen asked why he robs banks, Willie Sutton famously responded, “because...

User and Entity Behavioral Analytics (UEBA) has evolved quite a bit over the past several years. It started as just User Behavioral Analytics, which...

Planning for Cyber Protection and Resiliency is a Large Topic That Requires the Right Framework and a Balance of Strategic and Tactical Thinking

A series of events converged during the past few weeks that reemphasized the need for our industry to do a better job of establishing...

The Starting Point for Any Cyber Risk Management Program Must be Identifying Assets and Their Attributes 

Insider Threats Are a Fact of Life and Are Not Going Away.

Regulators from the New York State Department of Financial Services should be applauded for their update to their upcoming cyber security regulation (if you...

To Make the Most of your SOC and to Truly Minimize Cyber Risk, it Requires All Hands on Deck—Making Security Everybody’s Business. 

During the past year, you may have noticed a shift in the way IT and security professionals talk about cyber security. Historically, firewalls, DLP,...

On November 1, 2016, the latest version of the Payment Card Industry Data Security Standard (PCI DSS 3.2) took effect. The PCI DSS 3.2...