Organizations invest a lot of time and energy conducting risk assessments to ensure they’re adequately protecting their assets from attack. And while risk assessments are helpful for identifying how “at risk” an organization might be—it can be difficult for IT professionals to identify and address specific threats and vulnerabilities. The Risk Assessment Framework is a
When it comes to the asset management aspect of cybersecurity, most organizations focus on two areas: hardware and software. It’s an obvious concept that you can’t protect something you don’t know you have. Most companies with a cybersecurity program in place at least have a hardware inventory. For licensing purposes, most companies also maintain some
There are numerous steps to developing an effective cybersecurity program. From building out the appropriate security controls to maintaining compliance with specific industry regulations, developing a plan for protecting your data requires a comprehensive understanding of a number of important security processes. Data classification is a critical enabling process that many companies sidestep. As a
In March of 2017, Roger Severino was appointed to be the new Director of the Department of Health and Human Services Office for Civil Rights (HHS OCR), the office responsible for enforcing the Health Insurance Portability and Accountability Act (HIPAA). The change made headlines in the healthcare IT space after Mr. Severino stated that his
We’re happy to announce the release of BALLAST 3.1.0, which includes many exciting new features and enhancements that will help you streamline your risk assessment process. This latest wave of new features for BALLAST makes it even easier to add, assign and complete assessments. The enhanced design makes assessments easier to read, and navigation is streamlined
Ransomware is getting an upgrade. The future of ransomware is coming, and while it’s bad news for organizations, it stands to be highly profitable for cyber-criminals. What Makes Ransomware 2.0 Different? While Ransomware 1.0 attacks were simplistic and haphazard, Ransomware 2.0 is likely to employ more specific, highly-targeted attacks against predetermined organizations. According to Klick, “The