No matter how much money and time you spend on trying to avoid and prevent a cybersecurity incident, it is inevitable that one will occur. Our mindset must be “when” and not “if” because it really is just a matter of time before something happens, whether it is our fault or not. When I was learning to ride motorcycles, I learned that there are only two types of riders: those that have crashed and those that are going to crash.
The difference is preparedness, and we tend to spend too much time and money focusing on the “before” of an…
We hear endlessly about how we must keep our systems up to date with the latest, stable versions of applications and the most current security patches available. Indeed, nearly every security framework, standard, and set of mitigation strategies mention patching and updating in some format. Some businesses exist solely to provide patch management solutions and procedures, and these are often cornerstones in managed services offerings.
Even the Australian Cyber Security Centre (ACSC) Essential Eight includes two strategies that revolve around patching, including operating systems and applications. …
It is not a secret that I’m not a fan of Social Media of any description, but the one platform I used daily for 15 years was the professional networking site LinkedIn. Initially signing up in 2006 and, over time, cultivating my profile and connections like a well-manicured garden, I felt LinkedIn was a solid foundation upon which to build my online presence.
Over the past few years and the last 12 months, that well-manicured garden has all but died. My virtual plants are in a state of despair despite my best efforts to maintain them. …
