Blog Topic: Security

Who Should Manage the Firewall?

Explore the benefits of a managed firewall service. Discover how firewall management can streamline your operations and safeguard against cyber threats.

Cybersecurity, Firewall, Managed One, Managed Services, Security

Your NAC Shouldn’t Make a PEAP: EAP-TLS Is the Better Authentication Solution

Discover why EAP-TLS is the superior authentication method for NAC solutions like ISE and ClearPass over PEAP. Enhance your network security today with HBS.

Authentication, Networking, Security

Stop Saying “Yes:” How to Prevent MFA Fatigue

Learn how to shield yourself from MFA fatigue attacks with practical tips and advanced authentication methods. Stay secure online with HBS.

Authentication, MFA, Phishing, Security, Security Awareness

Shadow IT: Identifying, Evaluating, Managing

Explore strategies to manage Shadow IT, balancing security, innovation & user satisfaction. Learn to mitigate risks while fostering a culture of transparency.

BYOD, Policies, Security, Shadow IT

Microsoft 365 Business Premium Gets Stronger: Renamed Suites and New Security & Compliance Add-Ons for SMBs

Microsoft 365 Business Premium now includes new Defender and Purview add-ons, bringing enterprise-grade security and compliance to SMBs.

Microsoft 365, Microsoft Licensing, Security

SaaS Security: Don’t Allow Convenience to Compromise Your Data

Learn about the increased threat landscape in SaaS applications and the necessity to monitor and defend.

Managed One, Managed Services, SaaS, Security

How Managed SaaS Security Solves Your SaaS Monitoring Problem

Discover how Managed SaaS Security provides continuous monitoring, threat detection, and robust protection for your SaaS applications.

Google, Managed Services, Microsoft 365, SaaS, Security

Quishing: The Scam You (Probably) Haven’t Heard Of

Learn about quishing, the new QR code phishing scam targeting individuals and organizations. Discover how to protect yourself and stay safe from these attacks.

Email, Phishing, Security

AI in Physical Security: Efficiently Transforming Safety

AI can transform physical security with advanced tools for enhanced safety and efficiency. Read about current applications, benefits, and challenge solutions.

AI, Physical Security, Security

Unseen Vulnerabilities: The Critical Need for OT Security

Discover why Operational Technology security is crucial for your organization. Learn about common OT vulnerabilities, challenges, and best practices.

Operational Technology, Security

Most Common Vulnerabilities Uncovered During Penetration Testing

Read about the top vulnerabilities our HBS pen testers find during their work. Learn how to protect your business from common security threats.

Cybersecurity, Penetration Testing, Security

What to Look for in a Cloud-Based Access Control System

Learn the key features of a great cloud-based access control system, how it enhances security, and why Verkada is the best choice.

Physical Security, Security, Verkada, Verkada Partner

A New Visitor Management System: Which Features Matter Most

Explore some important factors when choosing a Visitor Management System. Enhance security, compliance, and efficiency while providing a great first impression.

Physical Security, Security, Verkada, Verkada Partner, Visitor Management

E911 Compliance: Considerations when Upgrading Your Communications System

A guide to understanding and achieving E911 compliance when upgrading communication systems.

Communication, Compliance, Security

What Is a Human Firewall?

A Human Firewall is your first line of defense against cyber threats. Learn how to train employees to spot phishing, report suspicious activity, and build a strong security culture.

Cybersecurity, IT Leadership, Security, Security Awareness

Why It Is Essential to Simplify Cybersecurity and How to Achieve It

Key principles to simplify cybersecurity without compromising security. How IT leaders can streamline their cybersecurity approach for effective protection.

Cybersecurity, IT Leadership, Security

Navigating and Mitigating End of Life Software Risks

Using end of life (EOL) software increases your exposure to cyberattacks, data breaches, and compliance fines. Learn the risks, hidden costs, and best practices to manage outdated systems.

End of Life Software, IT Leadership, Security

Elevating Your Cloud Security Strategy: Insights and Actions

Explore insights into enhancing cloud security, tackling challenges, and implementing strategic approaches for robust data protection in the cloud era.

Cloud, Data Safety, IT Leadership, Security

Securing the Future: The Convergence of Physical and Cyber Security

Explore how the convergence of physical and cyber security is essential to effectively manage the intertwined challenges of modern-day organizations.

Cybersecurity, IT Leadership, Physical Security, Security

Keeping Information Security at the Heart of IT Strategy

Explore insights from a panel discussion with top infosec leaders from Ruan, Intoxalock, and Growers Edge, highlighting the critical integration of information security in corporate strategy.

IT Leadership, Security, Third-Party

K-12 Schools Focus on Unified Physical Security

Every K-12 school faces physical security challenges. You must develop a life safety strategy and execute a security plan that protects your district.

Physical Security, Schools, Security

Microsoft Office 365 Security Best Practices and Recommendations

Secure your Microsoft 365 with our guide. Implement multi-factor authentication, conditional access policies, and detect suspicious activities.

Audits, Authentication, MFA, Microsoft, Microsoft 365, Security

Combatting MFA Bombing

Identify and prevent MFA bombing attacks. Stay vigilant and protect your accounts by recognizing legitimate MFA requests and following best security practices.

Authentication, MFA, Security, Security Awareness

What You Should Expect With SOC 2®

Knowing what to expect from a SOC 2 audit may seem overwhelming, but with the correct readiness process you can have a successful report.

Audits, Education, Risk Assessment, Security

Security Concerns from Biohacking & Implanted Microchips

Should your security plan account for the threat of implanted microchips? An ethical hacker breaks down the facts and fiction.

Physical Security, Security

Securing Your Supply Chain

Efficient operations increasingly require showing your clients that you handle data securely and ensuring that your suppliers do the same.

CMMC, Operational Technology, Risk Management, Security, Third-Party

The Importance of Email Encryption

One way that some businesses fall short is by not encrypting emails. In this article we’ll explain how you can start securing your emails now.

Cybersecurity, Email, Security

Why to Embrace Multi-Factor Authentication (MFA)

Multi Factor Authentication (MFA) is a simple and effective way to improve the cybersecurity of your environment.

Authentication, MFA, Security, Security Awareness

Work-From-Home Security Lessons Learned

Learn about the best data security practices that IT leaders have identified after two years of managing teams working from home.

Education, Remote Work, Security, Security Awareness

Security Awareness, Training, and Education – A Learning Continuum

In the realm of information technology (IT) and information security, the distinction between “security awareness” and “training” is crucial. Learn why.

Education, NIST, Security, Security Awareness

Why an Information Security Policy, Standards, and Procedures Should Be Top Priority

How can a strong information security policy, standards, and procedures protect your business, ensure compliance, and reduce risks? We'll show you.

CMMC, IT Leadership, Policies, Security

Why Do You Need a SOC 2® Report?

Do you need to get a SOC 2® report? Discover six reasons why you may need a SOC 2® security report to create a competitive advantage and attract new clients.

Audits, Education, Risk Assessment, Security

Don’t Get Hooked by Phishing: Identify Safe Internet Domains

Learn how to evaluate URLs, recognize phishing domains, and stay safe online. This guide breaks down internet domains and offers tips to avoid phishing scams.

Cybersecurity, Phishing, Security, Security Awareness

How Software Supply Chain Attacks Work

Learn how supply chain attacks happen and what you can do to protect your system from these threats that can come from your most trusted vendors.

Cybersecurity, Operational Technology, Physical Security, Security

Internal Penetration Testing vs External Penetration Testing: Why You Need Both

Understand the purpose and value of internal and external penetration testing for weaknesses that come from inside and outside of your environment.

Cybersecurity, Penetration Testing, Security

IT Security Single Pane of Glass: Aspirational or Achievable?

Is it possible to achieve a SPoG? How smart integrations and continuous improvement bring your organization closer to complete visibility and control.

Cybersecurity, IT Leadership, Security

What to Include in an Effective BYOD Policy

Discover key concepts that should guide your BYOD policy. Write a clear BYOD policy with these tips to protect. company data accessed through personal devices.

Authentication, BYOD, IT Leadership, Policies, Security

Are Passwords Obsolete?

Passwords don’t have many fans. They’re hard to remember and don’t even keep data safe. So what will replace them? Here are a few access tools coming on strong.

Authentication, MFA, Security

Essential Sources for Vulnerability and Threat Intelligence

Discover the top resources for vulnerability and threat intelligence, from automated scanning and XDR solutions to essential databases like NVD and CVE.

Cybersecurity, Security, Vulnerability Scanning

False Positives: What They Are, How to Identify Them and Why They Need to be Addressed

What are false positives, how do I identify them, and why do I need to address them? Get the SIEM answers here.

Security

The Smart Power Grid, Part 1: Risks & Rewards

Learn how IoT devices make a smarter power grid—and a power grid with more cybersecurity risks as hackers exploit vulnerable connected devices.

Operational Technology, Security

Mobile Device Security Best Practices

Mobile device security, along with tracking all hardware and software in your environment, is key in securing your organization.

Authentication, BYOD, Cybersecurity, Data Safety, Hardware, Security

The Security Challenges of IoT

The security risks of IoT (Internet of Things) devices must be a key part of the security plan in every business and home-office setting.

Authentication, BYOD, Cybersecurity, IT Leadership, Operational Technology, Security

Why Consider Live Acquisition for Your Next Digital Forensics Case

Explore the evolving landscape of digital forensics, including live system analysis and the impact of encryption. Learn how technology changes have shifted our approach to forensic examinations.

Digital Forensics, Incident Response, IT Leadership, Security

The Value of an Information Security Risk Assessment

An Information Security Risk Assessment is a great way to get a thorough look inside your organization and could help protect your business from cyber attacks.

Audits, Risk Assessment, Security

Compliance is Not Security

Despite common misconceptions, compliance is not security. Knowing the difference and why it matters could mean better, long-term protection for your business.

Compliance, Governance, Security

Analyzing and Assessing Third-Party Security Reports

Assessing and analyzing third-party vendors should be a top priority. Here are a few things to consider while reviewing a vendor's security program.

IT Leadership, Risk Management, Security, Third-Party

Assigning User Roles for Model Driven Apps

When dealing with model-driven apps in the Power Platform, assigning security roles to users is a crucial step. Let’s break down the process.

Microsoft, Security

IAM – Identity and Access Management: Maintaining User Access & Its Importance to Information Security

Identity Access Management (IAM) solutions help enable proper provisioning to reduce the risk associated with an account becoming compromised.

Identity Access Management, Security

Why You Should Make Information Security Decisions Based on Risk, Not Fear

To properly manage cybersecurity risk, we must understand the likelihood that a security incident will occur and the potential resulting impact.

Cybersecurity, IT Leadership, NIST, Risk Management, Security

Remember to Review Your Data Loss Prevention Policies

Data loss prevention (DLP) is a security strategy used to prevent end users from sending confidential information outside the organization.

Data Safety, Policies, Security

Cybersecurity Defense in Depth Strategy

Having one technology or policy isn’t enough to ensure that your critical applications and data are safe. A multi-layered approach is the best method of security.

Cybersecurity, Data Safety, Security

Social Engineering Plays Major Role in Hacking

Discover the psychology behind successful hackers' manipulation and explore social engineering methods and how they complement penetration testing.

Phishing, Security, Security Awareness

Why You Should Hire a Penetration Tester and Which One

Penetration testers can help organizations learn about attacks and the methods used so they can gain insight into their systems’ weaknesses.

Penetration Testing, Security

Cisco Firewall: Big Performance, Small Package—How the 1200 Series Delivers

Looking for a new firewall? Start with features that matter most—then find a solution that fits. What to look for and how the Cisco 1200 Series delivers.

Firewall, Security

Securing AI Identities: Why Lifecycle Management Is the Next Frontier of IAM

AI agents are changing identity security. Learn why lifecycle management is the next frontier of IAM and how to protect people, data and processes in the AI era.

AI, Identity Access Management, Security

ZTNA vs VPN: How to Know When to Use One Over the Other

The differences between ZTNA and VPN, when to use each and how to secure remote access.

Authentication, Security

Microsoft Specializations: What They Really Mean for You

Microsoft Specializations are much more than badges—they’re proof your partner can—and will—delivers results.

Azure, Collaboration, Microsoft, Microsoft 365, Security

Security Requirements of Vendors and Clients

As security awareness rises, so do expectations of vendors and clients. Organizations have begun including information security in their due diligence process.

IT Leadership, Risk Management, Security, Third-Party

3 Tips for Detecting Malware

Detecting malware is becoming more difficult. Discover tips will help you identify malware even if your anti-malware tools fail to detect an infection.

Data Safety, Phishing, Security

The True Role of an Information Security Professional

Information security professionals must understand their role in helping business leaders balance the risk vs reward equation when evaluating cybersecurity efforts.

IT Leadership, Security

CrowdStrike Aftermath: Preparing for the Next Major IT Outage

The recent CrowdStrike outage underscores the importance of resilience. Discover the steps you can take now to better prepare for the next major IT outage.

Business Continuity, Business Impact Analysis, Disaster Recovery, Incident Response, Organizational Resilience, Security, Third-Party

Information Security vs. Information Assurance

Discover the thriving employment prospects in information security, but don’t mistake it for an effortless royal path—building skills and experience is key.

Security

BYOD Security for Employees: Protecting Both Your Work and Personal Data

8 Key steps for employees to secure personal and work data when practicing BYOD. Learn about strong passwords, software updates, VPNs, data separation, & more.

Authentication, BYOD, Security

SaaS User Management Best Practices

Learn the importance of SaaS user management with best practices to streamline your processes. Enhance security, improve efficiency, and ensure compliance.

Managed Services, SaaS, Security

Internal vs. External Threats – Which One Worries You More?

Your organization must determine whether to be more worried about information security threats from internal or external sources. Take a balanced approach.

IT Leadership, Risk Management, Security

Benefits of Log Consolidation in a SIEM Environment

SIEM is a security strategy that seeks to efficiently consolidate and manage network data. Compare reacting to malicious traffic with and without a SIEM solution.

SaaS Security, Security

Building an IT Control Library

Navigating IT control objectives across ISO 27001, 27002, PCI-DSS, and SOX presents challenges. Learn how to build an effective information security management program.

Education, Governance, Policies, Security

The Centralization-Decentralization Cycle

Learn about switching from a centralized approach to IT and information security to a de-centralized approach. Evaluate which type of change to make and why.

IT Leadership, Security