One of the benefits of old(er) age is perspective and experience.  (As we age, we have to find the positive reasons to tout).  If there is one thing (of many) the compliance profession has demonstrated, it is that compliance professionals are nimble. It comes with the territory.  Building and maintaining a compliance program, requires compliance professionals to adjust their focus and prioritize resources and time...

If you read about the world of hackers and cyber threats, you will quickly become numb to the creativity and variety of techniques that may threaten your organization.  Like all risks, however, the key is to consider practically the real and significant threats to your organization.  If you attempt to address each and every possible threat, you will drive yourself crazy.  It is important to...

The ransomware attack on Colonial Pipeline demonstrated yet again the failure of government and business to anticipate cybersecurity issues through traditional tools – risk and vulnerability analysis, implementation of technology and planning to minimize a cyber event, and crisis response protocol.  In the aftermath of this debacle, the public lined up to purchase gallons of gasoline because of a short-term shortage in gasoline.  These scenes of panic...

Webinar: Cybersecurity Threats and Compliance July 17, 2018, 12 Noon EST Sign Up Here Cybersecurity threats are evolving and creating significant risks to companies. The FBI estimates that ransomware will generate at least $1 billion for criminals. Businesses stand to lose at least $400 billion each year from hacks. Each year there is an average of 1.5 million cyber attacks, or approximately 4000 per day. Companies...

Companies are correctly focused on cybersecurity risks.  Notwithstanding this focus, companies are struggling with how to respond to threats and risks.  Cybersecurity threats are quickly evolving – akin to the time when countries engaged in military arms races.  As they evolve, companies have to embrace proactive strategies and cannot rely on a compliance strategy that reacts to events and threats. Cyber criminals are quickly embracing...