A Q&A with David Lineman, Information Shield Public entities are equally at risk for data loss incidents as organizations in the private sector, yet PEs are often far less prepared to handle these events. I spoke to David Lineman, president of Information Shield, about how PEs can strengthen their cyber security posture.

A Q&A with David Hylender 2017 marked the tenth year for the Verizon Data Breach Investigation Report, an invaluable resource for understanding the current landscape in cyber security. This year 65 organizations from around the world reported 1,935 confirmed breaches and 42,068 data loss incidents. I asked David Hylender, senior risk analyst at Verizon Business,…

A Q&A with Ben Beeson of Arceo Analytics As the cyber insurance industry has grown, so has the need for smarter approaches to risk assessment. I asked Ben Beeson, Head of Insurance at Arceo Analytics, about the role technology can play in better understanding clients’ security risks in real time.

NetDiligence® Security Advisory – October 17th, 2017 KRACK WPA2 Wi-Fi Exploit Status and Protection Tips This NetDiligence Security Advisory is published for the benefit of our cyber insurance carrier/broker clients and their insureds. We urge clients to take special note of the details included in this Advisory and take preventative/remedial action on a timely basis….

A Q&A with David Zetoony of Bryan Cave LLC Every year the Data Breach Litigation Report offers a needed view into the reality of the legal risk associated with data security incidents. I spoke with David Zetoony, attorney at Bryan Cave LLC, about this year,s edition and its most notable findings.

A Q&A with Simon Oddy of RGL Forensics Business interruption (BI) can be a costly side effect of a cyber-attack, and insurance companies are responding in kind with BI policies. I spoke with Simon Oddy, partner of RGL Forensics, about how insurers assess BI and what organizations can do to avoid it.

Q&A with Zach Olsen of Infinite Global Let’s face it: PR, and it’s fancier sibling, crisis communications, is the red-headed stepchild of the data breach family. Everyone accepts that you need a seasoned breach coach to help navigate the maze of state-specific disclosure laws and avoid third-party litigation, and we can all agree that a…

A Q&A with Quest More organizations are adopting Microsoft’s cloud-based Azure Active Directory (AD) but maintaining on premises AD deployments to support legacy systems or applications without internet access. We call this a hybrid Active Directory deployment.  Hybrid ADs may pose a security risk if not managed properly. Unexpected changes to the AD environment, such…

A Q&A with Asaf Cidon of Barracuda The recent reports about Popcorn Time—a ransomware attack that involves a Ponzi scheme encouraging targets to in turn spread the malware to contacts—show that criminals are becoming ever more creative in their approaches to cybersecurity exploits. I spoke with Asaf Cidon, VP of Content Security at Barracuda about…

Q&A with Chris Novak of Verizon Even as public awareness around ransomware grows, many companies find they are still unprepared for this malicious exploit when it hits. Often, organizations find that despite their best intentions to cooperate with the perpetrators, they still may not get their data back. I talked to Chris Novak, global director…