SecurePragmatic vs. “tin foil hat” cybersecurity
Pragmatic security advice balances risk, usability and cost. “Tin foil hat” advice chases unlikely threats. How to tell the difference.
INSIGHTS · TOPIC
Secure
Security testing, identity, email and the basics that stop most attacks.
33 posts on Secure
Secure
SecurePenetration testing: the audit your cybersecurity needs
Why a penetration test is to security what an audit is to your finances, what a real manual test includes, and how to choose a firm.
SecureFor account takeover, multi-factor is not enough
How a man-in-the-middle phishing page steals a password and an MFA approval in real time, and the controls that stop it.
SecurePassword FAQs
Should you force password changes every 90 days? How long should passwords be? Our answers, based on NIST guidance.
SecureHow to implement effective security awareness training in your business
Build security awareness training around your real risks: key topics, phishing simulations, leadership buy-in, role-based content and measured results.
SecureCommon small-to-medium business data breach incidents and how to prevent them
Phishing, weak or stolen passwords and unpatched systems cause most small business breaches. How to prevent each one.
Secure4 ways we make cyber spend decisions
Popular wisdom, the news, personal bias or a trusted vendor: four common ways security budgets get spent, and why data-driven risk modeling beats all four.
SecureA cyber rose by any other name
A client paid for a penetration test and got a vulnerability scan. Why security service names are so loose, and what buyers should ask before they sign.
SecureSmall business security in 5 minutes, day 1: know thy stuff
Day 1 of our small business security series: spend 5 minutes listing every digital platform, account and device your business relies on.
SecureDigital assets, day 2: know thy stuff
Day 2 of our small business security series: clean up your list of digital assets and delete the accounts, apps and services you no longer use.
SecureSmall business security in 5 minutes, day 3: know thy stuff, part 3
Day 3 of our small business security series: rank each digital asset by how much harm its loss or exposure would cause your business.
SecureDigital asset protection, day 4: know thy stuff, part 4
Day 4 of our small business security series: data you keep is a risk as well as an asset. What to wipe, delete or encrypt first.
SecureFirewall settings, day 5: basic hardening, part 1
Day 5 of our small business security series: check that workstation, server, network and home-office firewalls are turned on and set correctly.
SecureDigital asset access, day 6: who can do what? Part 1
Day 6 of our small business security series: review who can access each digital asset, and remove old, duplicate and over-privileged accounts.
SecureDay 14: take out the trash
Day 14 of our small business security series: find equipment past its end-of-life date, record it, and replace what no longer gets security updates.
SecureDay 15: security awareness
Day 15 of our small business security series: short, regular training and simulated phishing give the best return for most small businesses.
SecureSmall Business Security in 5 Minutes - Day 7 - Who can do what?: Part 2
Howdy, if you are new to this series start with past me on Day 1 ! For the rest of you...you are stuck with present me.
SecureSmall Business Security in 5 Minutes - Day 2 - Know Thy Stuff: Part 2
Day 2: if you are new to this series please start with Day 1 If you are returning, welcome back! So you have pulled together a list of your digital assets, applications and systems...now what to do with the list.
SecureSmall Business Security in 5 Minutes - Day 14 - Take out the trash: Part 1
If you are new to the series please start with Day 1 . If not, welcome back!
SecureSmall Business Security in 5 Minutes - Day 3 - Know Thy Stuff: Part 3
Hello! If you are new to this series please start with Day 1 or if you missed any other days they can all be found Here .
SecureSmall Business Security in 5 Minutes - Day 4 - Know Thy Stuff: Part 4
Hello! If you are new to this series on securing your small business in 5 minutes per day than you should start with Day 1 .
SecureSmall Business Security in 5 Minutes - Day 6 - Who can do what?: Part 1
Hello! If you are new to the series make sure to check out Day 1 .
SecureSmall Business Security in 5 Minutes - Day 15 - Security Awareness: Part 1
Howdy, if you are new to the series start here . If you are caught up, welcome back!
SecureSmall Business Security in 5 Minutes - Day 8 - Basic Hardening: Part 2
Salutations, if you are new to the series start here Day 1 . To those who are caught up let's get to it.
SecureSmall Business Security in 5 Minutes - Day 11 - Stopping Malware: Part 1
Hello! If you are new to this series please start with Day 1 .
SecureSmall Business Security in 5 Minutes - Day 9 - Security Visibility: Part 1
Hail! If you are new to the series start with Day 1 .
SecureSmall Business Security in 5 Minutes - Day 10 - Basic Web Security: Part 1
Hello! If you are new to the series start with Day 1 .
SecureAre You Taking These 7 Steps to Prevent Ransomware?
Ransomware saw a disturbingly significant increase in both popularity and impact in 2020.
SecureSmall Business Security in 5 Minutes - Day 16 - Plan for success: Part 1
Hello! If you are new to this series start with Day 1 .
SecureSmall Business Security in 5 Minutes - Day 12 - Digital Crisis Recovery: Part 1
Howdy! If you are new to the series start with Day 1 .
SecureSmall Business Security in 5 Minutes - Day 5 - Basic Hardening: Part 1
Welcome, if you are new to the series start with Day 1 . For those who are all caught up let's continue.
SecureSmall Business Security in 5 Minutes - Day 1 - Know Thy Stuff: Part 1
To get right to it skip the first paragraph... This is the start of a simple mission to reveal, in plain language, the actions you can take to protect your business.
SecureSmall Business Security in 5 Minutes - Day 13 - Digital Crisis Recovery: Part 2
Salutations! If you are new to the series start with Day 1 .
Talk to a Principal Engineer
Got a question one of these posts didn't answer? Ask the engineer who would do the work.
Talk to a Principal Engineer
Prefer email? Send us a note instead.