In my 11 years of helping customers pen test their network, oftentimes I have seen that companies choose to test only the bare minimum. I understand that companies have a need to satisfy some compliance like PCI or reassure customers and security budgets can be tight. However, why not get more value out of your pen test?
Topics: Penetration Testing, Threat Management
If you received an email from your company CEO asking you to perform a task or pay a vendor, would you proceed without question or would you verify? “It’s an email from the CEO, I have to do this” you might think. You might be better off verifying that request if it involves money or confidential information.
Topics: Ethical Hacking, Penetration Testing
A few years back I had a lunch meeting with two IT Security veterans. One remarked, “There’s been no Pearl Harbor or 9/11 in cyber security. Nobody has ever died because of hacking.” If there was, there would have been a “rallying cry” or a massive response.
Topics: Information Security, Threat Management, Threat Advisory, Healthcare