data security

Top 16 Ways SMBs Can Mitigate Cyber Risks and Threats.

April 28, 2022

CISO, Cyber Security, InfoSec, SMEInfosec

Fig 1. NIST CSF, NIST, 2022. Sign up for DHS CISA e-mail alerts specific to your company and industry needs and review the alerts:Sign up here.Use the free DHS developed CSET (Cybersecurity Evaluation Tool) to assess your security posture – High,…

Cybersecurity Firm Imperva Discloses Data Breach

August 29, 2019

databreach, Imperva, web application firewall

No Comments

Imperva, formally Incapsula, disclosed on 08/27/19 a data breach impacting its many customers. The company focuses on cyber-security and DDoS mitigation and consulting, heavily via its cloud web application firewall (WAF). Imperva, 2019. The breach was discovered 08/20/19 via a…

Nine Third Party Risk Management Tactics That Work Well!

December 21, 2018

3RD party risk tips, Disaster Recovery Program, RBAC, Vendor Risk Management

No Comments

Fig. 1. Third Party Risk Mgmt Inputs. In this increasingly complex security landscape with threat actors and vendors changing their tools rapidly, managing third-party risk is very difficult, ambiguous, and it’s even more difficult to know how to prioritize mitigation spend.…

Eight Tips to Detect Crypto Mining Scams

November 25, 2018

bitcoin miner scam, Power Mining Pool, secure coin mining

No Comments

Whether it’s Power Mining Pool today or Bitconnect yesterday, the crypto space is festering with parasitic scams and opportunistic swindlers. The conditions are ripe for them and there’s money to be made. Fig. 1. BTCProMiner Free Scam research, 2018. Among the…

Two Equifax Leaders Charged with Insider Trading Amid Data Breach Mess

June 28, 2018

equifax and Lifelock, equifax data breach, equifax insider trading, Project Sparta

No Comments

A former software developer for Equifax, Sudhakar Reddy Bonthu, faces insider trading charges related to the company’s massive data breach last year, according to the SEC and federal prosecutors. Allegedly, in August 2017, Bonthu was asked to participate in Project…

Secure360 Inspires Collaboration and Innovation: Three Best Talks

May 10, 2018

CIO, CISO, parallel technologies, Secure360 Twin Cities, Silicon Prairie Online

No Comments

The Secure360 Conference is happening in Minneapolis next week from 05/15/18 to 05/17/18. It is the professional conference of choice for comprehensive security, risk management and collaboration education for your entire team. It focuses on the following areas: cybersecurity, governance, risk and…

Abstract Forward Consulting Now Open For Business!

March 14, 2018

Abstract Forward Consulting, CIO, CISO, cto, I.T. Consulting, InfoSec

No Comments

Over 14 years, Mr. Swenson had the honor and privilege of consulting at 10 organizations in 7 industries on progressively complex and difficult problems in I.T. including: security, proj. mgmt., business analysis, data archival and governance, audit, web application launch…

5 Things Equifax Could Have Improved to Prevent Their Data Breach

November 23, 2017

Apache Struts, equifax, equifax data breach, Lifelock

No Comments

Minneapolis, MN – 11/22/17. The recent Equifax data breach impacted one-third of the U.S. population with more than 143.5 million records exposed. This epic hack started on 05/13/2017 and lasted until 07/29/2017, all the while the company was clueless. As…

The Danger of Thinking Title Makes You A Leader (expanded)

February 16, 2017

CIO, cto, leadership

No Comments

Leadership is about enabling the potential in others and getting out of the way so their dreams can enable something bigger. Having people paid to report to you does not mean you are a leader but more likely a manager,…

Three Points on Artificial Intelligence and Cyber-Security for 2017

January 31, 2017

africa, emerging technology, ICIT

No Comments

Although I have been known for longer posts, I would like to offer only three things to watch out for related to artificial intelligence and cyber-security for 2017, followed by sharing two videos. 1) Cyber attackers have long used machine learning…

data security

Recent Posts