Blog Topic: Cybersecurity

Who Should Manage the Firewall?

Explore the benefits of a managed firewall service. Discover how firewall management can streamline your operations and safeguard against cyber threats.

Cybersecurity, Firewall, Managed One, Managed Services, Security

Navigating the Cybersecurity Landscape: Strategies for Building a Resilient Organization

Discover key strategies to fortify your organization against a tough cybersecurity landscape. Learn how to integrate cybersecurity into your company's DNA.

Cybersecurity, IT Leadership, Organizational Resilience, Policies, Security Awareness

SEC Cybersecurity: Guidance for Compliance

SEC cybersecurity guidance for new disclosure rules and regulations. Ensure compliance, protect investor trust, and manage risks effectively.

CISO, Compliance, Cybersecurity, Finance, IT Leadership, vCISO

Beyond SIEM: How XDR Maximizes Threat Detection and Response

Discover how XDR overcomes the limitations of traditional security monitoring tools and provides a more robust approach to threat detection and response.

Cybersecurity, Managed One, Managed Services

Increasing Cyber Resilience with Virtual Security Engineers

Discover how virtual security engineers fortify organizations by providing around-the-clock protection, threat monitoring, and strategic cybersecurity support.

Cybersecurity, Data Safety, Incident Response, Organizational Resilience, vCISO, vSE

HIPAA and Cybersecurity: What’s Changing

HHS is proposing major HIPAA updates to strengthen cybersecurity, encryption, and testing. Learn what’s changing and how to prepare your organization.

Compliance, Cybersecurity

HBS Continues as Iowa Cybersecurity Leader

HBS is proud to be a leading Iowa cybersecurity partner, powered by a local SOC, the Secure Iowa Conference and more than 15 years of protecting Iowa organizations.

Cybersecurity, IT Leadership

The Wild West of Non-Human Identity Security

Non-human identities are the silent workhorses of your business, but they're also a security risk. Learn how to secure them before attackers exploit them.

Cybersecurity, Identity Access Management

What to Know About the FCC’s $200M K-12 Cybersecurity Pilot Program

Learn about the FCC’s new $200M pilot program to enhance cybersecurity in K-12 schools, what it is, what to expect, and how to prepare for the application.

Cybersecurity, E-Rate, Ransomware, Schools

Most Common Vulnerabilities Uncovered During Penetration Testing

Read about the top vulnerabilities our HBS pen testers find during their work. Learn how to protect your business from common security threats.

Cybersecurity, Penetration Testing, Security

How Microsoft Is Helping Rural Hospitals Combat Cyberattacks

Learn how Microsoft's new program helps rural hospitals defend against rising cyber threats with grants, discounts, and advanced security.

Cybersecurity, Google, Microsoft, Ransomware

AI Phishing: The New Frontier of Cyber Threats

Discover how AI phishing is evolving cyber threats and learn strategies to protect your organization against these sophisticated attacks.

AI, Cybersecurity, Email, Phishing, Security Awareness

The CISO Evolution

The role of CISO has evolved from a behind-the-scenes position to a key business enabler. Get insights from top CISOs on balancing security and everything else.

CISO, Cybersecurity, IT Leadership

Canary Tokens and Honeypots: Pieces of the Cybersecurity Puzzle, NOT the Ultimate Solution

Canary Tokens and Honeypots are valuable tools for use in your cybersecurity arsenal, but they should be part of a layered defensive strategy.

Cybersecurity, Data Safety, Ransomware

What Is a Human Firewall?

A Human Firewall is your first line of defense against cyber threats. Learn how to train employees to spot phishing, report suspicious activity, and build a strong security culture.

Cybersecurity, IT Leadership, Security, Security Awareness

Why It Is Essential to Simplify Cybersecurity and How to Achieve It

Key principles to simplify cybersecurity without compromising security. How IT leaders can streamline their cybersecurity approach for effective protection.

Cybersecurity, IT Leadership, Security

Avoid Data Breaches in 2024: Key Takeaways from Some of 2023’s Biggest Cyberattacks

Explore key takeaways from 2023's significant cyberattacks to enhance your cybersecurity strategies and prevent data breaches in 2024.

Cybersecurity, IT Leadership, Phishing, Ransomware, Security Awareness

Securing the Future: The Convergence of Physical and Cyber Security

Explore how the convergence of physical and cyber security is essential to effectively manage the intertwined challenges of modern-day organizations.

Cybersecurity, IT Leadership, Physical Security, Security

Strengthening the Cybersecurity Workforce: Meeting Today’s Challenges

Expert insights on the cybersecurity workforce—the importance of diverse skills, continuous learning, adapting to evolving threats in the industry.

CISO, Cybersecurity, IT Leadership, vCISO

How You Can Improve Your Cybersecurity Posture: Insights from Leading CISOs

Dive into a candid discussion with CISOs from various industries as they share their strategies and experiences in optimizing cybersecurity posture.

CISO, Cybersecurity, IT Leadership, vCISO

Employee Responsibilities in Information Security

Employees are the first line of defense against cyber threats. Learn how targeted security awareness training and an employee security quiz can reduce risks, prevent social engineering attacks, and strengthen your organization's security culture.

Cybersecurity, Education, IT Leadership, Security Awareness

Managing Cybersecurity Risk in America’s Modern Railroads

Learn about a massive cybersecurity experiment where two prominent security companies created a fake railroad system online and watched the attacks against it.

Cybersecurity, Operational Technology, Ransomware

SMiShing Attacks: How to Identify and Respond

Here are just a few ways to respond to attacks, including actionable steps to lower your risk and ensure personal, private information is never leaked.

Cybersecurity, Education, Phishing, Ransomware

2023 Cybersecurity Threats and Trends

State-sponsored and criminal cyberattacks made operations difficult for businesses in 2022. NordLocker named 7 cybersecurity threats and trends to watch in 2023.

Cybersecurity, Operational Technology, Ransomware, Security Awareness

Cybersecurity in the 21st Century Transportation Industry

As technology in the transportation and logistics sectors grow increasingly interconnected, the risk of cyber attacks rise and companies defend themselves.

Cybersecurity, Operational Technology

How to Fix the Java Log4j Vulnerability

Stay updated on the Log4j vulnerability. Learn how it affects your systems and the steps to patch it for enhanced cybersecurity.

Cybersecurity, Incident Response

How to Get Lower Cyber Insurance Premiums

Lower your cyber insurance premiums with strategies that enhance your security posture. Implementing a cybersecurity framework, engaging experts, adopting 24x7 monitoring all make you more attractive to insurers.

Cybersecurity, Insurance

7 Tips for Building a Cybersecurity Culture

Educate and motivate every employee to make security part of their daily responsibility rather than counting on IT to handle it on their own.

Cybersecurity, IT Leadership, Security Awareness

CISO Insights of Cybersecurity Executives

Leading information security executives gathered at the 10th Annual HBS Secure Iowa Conference 2022 to discuss the corporate and technical role of the CISO.

CISO, Cybersecurity, IT Leadership, vCISO

Ask the FBI: Cybersecurity Tips

An FBI Special Agent shares cybersecurity tips covering what to do when you suspect an attack, plus preventative steps that can prevent most breaches.

Audits, Cybersecurity, Incident Response

The Importance of Email Encryption

One way that some businesses fall short is by not encrypting emails. In this article we’ll explain how you can start securing your emails now.

Cybersecurity, Email, Security

Establish Cybersecurity Culture On An Employee’s First Day

Learn how to prioritize cybersecurity during employee onboarding and how HR and IT collaboration can create a cybersecure work environment from day one.

Cybersecurity, IT Leadership, Security Awareness

Your Best Practices for Information Security Risk Assessments

If you’re considering how to get the most value from your information security risk assessment—or whether you even need one—use these best practices.

Audits, Cybersecurity, IT Leadership, Risk Assessment

XDR, MDR and EDR: What’s the Difference?

Discover the key differences between XDR, MDR and EDR solutions so you can ensure that you’re using the right tools to secure your environment.

Cybersecurity, Managed One, Managed XDR, Ransomware

Risk Assessment: Likelihood and Impact

Assess risk effectively with the risk assessment likelihood and impact matrix. This decision-making matrix assesses risk based on the likelihood and impact of threats in your organization.

Cybersecurity, Risk Assessment

How to Prepare for Russian Cyberattacks

Discover these best practices to secure your organization's operations and data against potential attacks linked to Russia’s invasion.

Cybersecurity, Incident Response, Ransomware

9 Tips for Preventing Ransomware

Have all the ransomware headlines convinced you it’s time to strengthen your defenses? We have the tips to help you prevent ransomware.

Cybersecurity, Ransomware

Why Intrusion Detection and Prevention Systems are Still Important

Despite claims of IDS/IPS being dead, they persist. Learn how to leverage these tools effectively in a modern environment.

Cybersecurity

Don’t Get Hooked by Phishing: Identify Safe Internet Domains

Learn how to evaluate URLs, recognize phishing domains, and stay safe online. This guide breaks down internet domains and offers tips to avoid phishing scams.

Cybersecurity, Phishing, Security, Security Awareness

How SIEM/XDR Tuning Reduces Alert Fatigue

Learn how trained SOC analysts leverage SIEM tuning to turn out-of-the-box rules into meaningful tools that reduce alert fatigue.

Cybersecurity, Managed XDR

What Is the Civil Cyber-Fraud Initiative?

Learn what new breach reporting regulations mean for you under the just-released Civil Cyber-Fraud Initiative and new FDIC regulations.

Cybersecurity, Finance

10 Questions with a CMMC Registered Practitioner

Learn how changes in CMMC 2.0 affect you in this conversation with a CMMC Registered Practitioner.

CMMC, Cybersecurity, IT Leadership, Policies, Risk Management

Cost Advantages of Managed XDR

Learn about key ways that managed XDR makes good business sense, not only by improving your security posture, but by actually saving you money.

Cybersecurity, Managed One, Managed XDR

What Are Fileless Malware Attacks?

Learn about the growing issue of fileless malware attacks, how they work and how you can create an effective defense against this slippery enemy.

Cybersecurity, Education, Security Awareness

How to Spot Business Email Compromise

Learn how business email compromise attacks work, as well as the red flags you can use to spot an attack before falling for it.

Cybersecurity, Education, Email, Security Awareness

Why You Need a Data Flow Diagram (DFD)—and How to Create One

Data flow diagrams (DFDs) reveal risks, simplify complex systems, and enhance security. We'll show you step-by-step guidance so you can create your own DFD.

Cybersecurity, Data, Data Security

Lessons Learned from Ransomware Attacks

Step inside two organizations’ war rooms as they manage a ransomware attack. Learn best practices to follow to stop these attacks, or at least limit the damage.

Cybersecurity, Education, Ransomware, Security Awareness

Your 2025 CISO Roadmap

Plan your organization's cybersecurity for 2025 with an actionable roadmap. Quarterly milestones, best practices, and ongoing essentials to build resilience.

CISO, Cybersecurity, IT Leadership, Policies

How to Test Your Cybersecurity Incident Response Plan

Here’s how to choose the right test in order to confirm that your cybersecurity incident response plan actually works like you think it will.

Cybersecurity, Education, Incident Response, IT Leadership

How Software Supply Chain Attacks Work

Learn how supply chain attacks happen and what you can do to protect your system from these threats that can come from your most trusted vendors.

Cybersecurity, Operational Technology, Physical Security, Security

Internal Penetration Testing vs External Penetration Testing: Why You Need Both

Understand the purpose and value of internal and external penetration testing for weaknesses that come from inside and outside of your environment.

Cybersecurity, Penetration Testing, Security

IT Security Single Pane of Glass: Aspirational or Achievable?

Is it possible to achieve a SPoG? How smart integrations and continuous improvement bring your organization closer to complete visibility and control.

Cybersecurity, IT Leadership, Security

Mobile Device Security: Phishing, Mishing, and More

Protect your business from evolving mobile threats. Learn the top mobile security risks, best practices to mitigate them, and how HBS can help.

Authentication, BYOD, Cybersecurity, MFA, Phishing

How a Hacker Conned an Accountant with $400,000 Phishing Attack

See how the hacker got away with a small fortune for nearly a week—and how good incident response and digital forensics work got most of it back.

Cybersecurity, Finance, Incident Response, Phishing, Security Awareness

Essential Sources for Vulnerability and Threat Intelligence

Discover the top resources for vulnerability and threat intelligence, from automated scanning and XDR solutions to essential databases like NVD and CVE.

Cybersecurity, Security, Vulnerability Scanning

How Managed XDR Makes the Most of the Latest Endpoint Protection Tools

Managed XDR helps endpoint detection reach its full threat-hunting potential as human experts tune the rules for ever-changing situations.

Cybersecurity, Managed One, Managed XDR

Cybersecurity Trends: The Next Generation of Endpoint Protection

Extended Detection and Response (XDR) is one of the year’s top cybersecurity trends, spotting threats throughout your technology stack and shutting them down.

Cybersecurity, Managed XDR

Power Grid Cybersecurity: New Rules to Protect Critical Infrastructure

A recent presidential order aimed at protecting critical infrastructure bans the use of some foreign parts in the power grid. How will this affect your business?

Compliance, Cybersecurity, Operational Technology

Mobile Device Security Best Practices

Mobile device security, along with tracking all hardware and software in your environment, is key in securing your organization.

Authentication, BYOD, Cybersecurity, Data Safety, Hardware, Security

The Security Challenges of IoT

The security risks of IoT (Internet of Things) devices must be a key part of the security plan in every business and home-office setting.

Authentication, BYOD, Cybersecurity, IT Leadership, Operational Technology, Security

How Multifactor Authentication Stops Hackers: 3 Mini Case Studies

Businesses and organizations must provide their users with tools for best security practices by implementing additional factors to authenticate users to systems.

Authentication, Cybersecurity, MFA, Security Awareness

Why You Should Make Information Security Decisions Based on Risk, Not Fear

To properly manage cybersecurity risk, we must understand the likelihood that a security incident will occur and the potential resulting impact.

Cybersecurity, IT Leadership, NIST, Risk Management, Security

Mergers and Acquisitions (M&A) Now Including Cyber Security Due Diligence as Best Practice

If you are considering acquiring a company, make sure you consider all of the factors that impact valuation, including cybersecurity practices and technologies.

Cybersecurity, Finance, IT Leadership, Risk Management

SOC Reporting Controls of Subservice Organization – Inclusive vs Carve Out Method

Service organizations going through a SOC report should learn about the two methods for handling subservice organizations’ controls: Inclusive and Carve-Out.

Cybersecurity

Cybersecurity Defense in Depth Strategy

Having one technology or policy isn’t enough to ensure that your critical applications and data are safe. A multi-layered approach is the best method of security.

Cybersecurity, Data Safety, Security

Firewall Configuration: Stop Just Patching, Start Securing

Stop relying on patchwork fixes. Learn how firewall debt builds, why it puts your network at risk, and how to regain control with expert firewall configuration.

Cybersecurity, Firewall

Microsoft Secure Score: What It Is, Why It Matters, and How to Improve Yours

Learn what Microsoft Secure Score is, how it works, what a good score looks like, practical ways to improve it. Tips, tools, and managed security options.

Authentication, Cybersecurity, Microsoft, Microsoft 365

Device Code Phishing Explained—And How to Protect Against It

Device code phishing uses real login pages and authentication codes to trick users into granting unauthorized access. Learn how to fight back.

Authentication, Cybersecurity, Phishing, Security Awareness

SIEM Terms and Definitions

SIEM is a powerful tool that provides a holistic view into an organization’s technology security. View our list of definitions of the most commonly used terms.

Cybersecurity, Education, Managed XDR

Penetration Testing vs Vulnerability Scanning

Penetration testing vs vulnerability scanning—both different, but essential for a strong cyber strategy. Regular scans and tests can safeguard your systems.

Cybersecurity, Penetration Testing, Vulnerability Scanning

Stuck In the Middle of CMMC? Here’s How to Get Unstuck

The most common CMMC pitfalls and how the right partner can help you close gaps, reduce risk, and cross the finish line with confidence.

CMMC, Compliance, Cybersecurity

CMMC Compliance: An Overview for Your Business

Is your business part of the defense supply chain? Learn what CMMC compliance is, why it matters for contractors and subcontractors, and how to get certified.

CMMC, Cybersecurity, Policies

SLCGP: Key Takeaways from Congress—And What Local Leaders Should Do Now

Congress just reviewed the State and Local Cybersecurity Grant Program (SLCGP)—and the clock is ticking. Here’s what to know—and steps you should take now.

Cybersecurity

What to Expect in NIST SP 800-53 Revision 5

What's new with the NIST's Special Publication (SP) 800-53 Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations?

Cybersecurity, IT Leadership, NIST

How Does SIEM Work?

SIEM works first by gathering all the event logs from configured devices. They are sent to a collector that typically runs on a virtual machine inside the host network.

Cybersecurity, Managed XDR, SaaS, SaaS Security

Hackers and ACH Fraud

Risk of fraudulent transactions has grown significantly. Learn how to prevent hackers from using Automated Clearing House (ACH) fraud to drain your accounts.

Cybersecurity, Finance

What Is Penetration Testing? A Complete Guide for IT Leaders

Penetration testing helps uncover real security risks before attackers do. Learn what it involves, how it works, and how to find the right testing partner.

Cybersecurity, IT Leadership, Penetration Testing

Learning from 2024’s Cyberattacks to Secure Your 2025

Explore lessons from 2024’s most significant cyberattacks. Learn how to strengthen your defenses with actionable insights and prepare for a safer 2025.

Cybersecurity, IT Leadership, Phishing, Ransomware

The Importance of Egress Filtering at the Firewall

Egress filtering is a basic principle that should be implemented at every organization to prevent hacking activity from leaving your network.

Audits, Cybersecurity, Firewall