Vulnerability scans are very good. They tell you what might be wrong. However, a penetration test shows you what actually happens when someone tries to get in. Pen testers use the same techniques real attackers use, from phishing to firewall bypasses to physical access tricks, then hand you a report with proof of exposure and a prioritized roadmap to fix it.
What are the different types of pen testing? What does a real engagement look like step by step? How can you tell the difference between a penetration test that moves your security forward from one that just adds noise.
Setting up automation in Microsoft 365 used to mean opening Power Automate and wiring together triggers and connectors by hand. The new Copilot Workflows agent skips that step entirely. Type what you want in plain language, something like "every weekday morning, flag my high-priority emails and send me a summary on Teams," and Copilot builds the working automation across Outlook, SharePoint, Teams, and Planner. No code, no connector setup, full visibility into every step before it runs.
Pentagon suspends Phase II reqs, which were set to begin Nov. 10 of this year.
The Department of War announced on July 13 that it has suspended the rollout of mandatory CMMC third-party assessments, pausing the November 10 deadline while a 60-day task force reviews the program.
If your organization handles Controlled Unclassified Information, your NIST SP 800-171 obligations remain unchanged. HBS has the details on what this means for contractors already assessed, mid-assessment, or still building toward compliance.
Organizations with unlicensed OneDrive for Business accounts are at risk of those accounts being deleted after 365 days in archive—regardless of active retention policies or eDiscovery holds.
Case Study
Troy University Wanted Testers Who Wouldn't Take It Easy
Tough Targets Deserve Better Testers
Troy University already had strong security fundamentals. What its CTO wanted was a testing partner who wouldn't hand back a templated report, someone who'd actually try to break in.
What happened:
HBS ran black-box network and web app testing, giving testers almost no starting information
A phishing campaign targeted 1,100+ employees, plus spear-phishing messages aimed at 30 top-ranking staff
33 people gave up credentials, proving even trained users can be fooled
Troy's security team caught the intrusions in progress and isolated the affected networks
MFA and network segmentation stopped compromised credentials from turning into broader access
The results gave Troy a clear list of training gaps to close next
Cyber threats keep evolving. Your risk strategy has to keep up.
Join us for lunch and a straight-talk convo about IT risk assessments. Joe Gunnells (HBS Information Security Consultant) and Ben Hall (HBS GRC Practice Manager) will show you how to spot vulnerabilities, weigh their impact and fix what matters most, all while keeping your tech decisions tied to real organizational goals.
Lucas Jadin is the Co-founder of Jadin | Jones Coaching and Consulting, where he helps highly competitive people in business, sports and education maximize performance through mental skills, culture and leadership development. His book, The Twin Thieves: How Great Leaders Build Great Teams, is a bestseller in high-performance coaching. His work with elite business leaders and world champions has appeared on CNN, ESPN and Sports Illustrated. He currently serves as a Leadership Consultant for the Los Angeles Dodgers.
A Freedom, Wisconsin native, Lucas also founded Inspire Sports, a non-profit that has brought athletic opportunities to more than 10,000 individuals with disabilities.
Join us at Innovate Green Bay to hear Lucas share how great leaders build great teams.
The Heartland Invitational season is wrapping up—we'd love to see you!
We're bringing clients, partners, and technology and security experts together for great golf, real conversations, and networking that actually leads somewhere. Catch us before the season ends.
.svg.png?upscale=true&width=420&upscale=true&name=Microsoft_OneDrive_Icon_(2025_-_present).svg.png){kind=icon}
