In November, defense contractors will be required to meet new security practices outlined in the Cybersecurity Maturity Model Certification (CMMC). As this post details, while the primary source of security …

June 22, 2020 • By Andrew Hoover, Katie C. Stewart

In Enterprise Risk and Resilience Management

Process maturity represents an organization's ability to institutionalize their practices. Measuring process maturity determines how well practices are ingrained in the way work is defined, executed, and....

June 1, 2020 • By Andrew Hoover, Katie C. Stewart

In Enterprise Risk and Resilience Management

A recent study predicted that business losses due to cybercrime will exceed $5 trillion by 2024. The threat to the Defense Industrial Base (DIB)--the network of more than 300,000 businesses, …

March 30, 2020 • By Katie C. Stewart, Andrew Hoover

In Enterprise Risk and Resilience Management

Developing security metrics within an organization is an ongoing challenge. Organizations want to know "Am I secure enough?" While this is the common question, it lacks context....

February 27, 2018 • By Katie C. Stewart

The Internet of Things (IoT) is proliferating exponentially, exposing organizations to an increased risk of IoT-targeted attacks, such as botnets and DDoS attacks. In this blog post, I explore the …

December 19, 2017 • By Katie C. Stewart

In Insider Threat

In this blog series, I explained the five actions your organization can take now to ensure its cybersecurity and address the risk of having unsupported software. These five actions work …

November 7, 2017 • By Katie C. Stewart

In Insider Threat

Although you can accept the risk of running unsupported software, you should treat it as a temporary strategy. In this post, I discuss the importance of establishing a policy for …

October 31, 2017 • By Katie C. Stewart

In Insider Threat

Software whitelists, part of an organization's software policies, control which applications are permitted to be installed or executed on an organization's devices and network. In this post, I describe how …

October 24, 2017 • By Katie C. Stewart

In Insider Threat

In line with its risk management program, an organization might decide to host unsupported applications on its supported or unsupported operating systems. In this post, I describe how organizations should …

October 17, 2017 • By Katie C. Stewart

In Insider Threat

Having a managed software asset inventory helps an organization ensure that its software is identified, authorized, managed, or retired before it can be exploited. In this post, I describe why …

October 10, 2017 • By Katie C. Stewart

In Insider Threat