4 min read
A partner at a mid-size CPA firm pulls up a Written Information Security Program during a client due-diligence review, or worse, during an FTC inquiry after a breach. The document looks fine on its surface. It has section headers for risk...
Read More
5 min read
Disclaimer: This post is not legal, tax, or compliance advice. Regulatory questions should go to your attorney and compliance consultant. Some of the...
5 min read
Small business owners tend to treat a firewall as the finish line for cybersecurity. Install it, point it at the network, and move on to the actual...
4 min read
Most small business owners don't think about their network until it goes down. Then, in the middle of a Tuesday afternoon with customers waiting and...
5 min read
Accounting firms hold a strange position in the threat landscape. They don't process credit cards like a retailer or store medical charts like a...
11 min read
TL;DR: Small businesses are involved in nearly half of all breach incidents, and most of them had antivirus software when it happened. The tools that...
4 min read
Small business owners hear a lot of noise about cybersecurity, most of it either too technical to act on or too vague to matter. A risk assessment...
4 min read
Microsoft has been busy reshaping how organizations manage data governance, security, and regulatory risk inside Microsoft 365. Over the past several...
11 min read
TL;DR: Most small businesses treat managed IT as overhead: something that keeps the lights on and stays out of the way. The firms that treat it as...
4 min read
Arizona business owners often assume data protection law applies only to companies in California or New York. That assumption gets expensive fast....
