Readiness and response
The phone belongs in phishing training
Security advice has to work in the mobile applications people use, including when the job takes them away from a desk.
Read articleCSBG perspectives
The CSBG blog
Perspectives on cybersecurity, technology, and the decisions that connect them to business.
Technology and decisions
The finding is only the beginning
AI can help security teams find and validate weaknesses. The useful question is what the organization can do with the finding.
Read articleMore from CSBG
Supplier assurance
A familiar supplier still needs a verified request
A trusted business relationship helps work move quickly. It also makes the boundaries around a supplier's requests worth examining.
Read article
Readiness and response
What did the exercise actually test?
A practical exercise can reveal something useful about readiness, provided we are clear about what participants were asked to do.
Read article
Readiness and response
Make verification part of the job
People need a practical way to act when they recognize a suspicious request.
Read article
Threat intelligence
Who needs the warning?
A security analyst and an operations director can use the same threat information to answer different questions. A useful briefing should recognize the difference.
Read article
Operational resilience
Who owns the connected equipment?
A refrigeration alert exposes a question that belongs in the management meeting: who is responsible for the equipment the business depends on?
Read article