GRC 2/4

Local Government Officials Guide to Cybersecurity (Oct 2022 Update)

Ron and I recently presented at the MISAC conference in Monterey and were thrilled to see that our session on involving governing bodies...

Managing Cyber Risks in Today's Digital Age: Insights from PwC Pulse Survey

In today's digital age, businesses face a myriad of risks that can disrupt operations and damage reputation. With the rapid pace of...

The Local Government Officials Guide to Cybersecurity

Ron, Cesar, and I (Don) are currently collaborating on a new professional guide for executives in local government on the topic of...

The SEC Proposes Cybersecurity Expertise: Why Cyber Literacy is Critical for Council Members

"The SEC is proposing to force boards to do what they haven't done themselves, govern cyber risk." - Forbes The Securities and Exchange...

Prioritizing Cyber Risk Management: Prevention and Response to Incidents

Summary This article discusses the complex question of whether having a cyber incident indicates a failure to evaluate and mitigate cyber...

New Roles in Local Government Cybersecurity: A Guide to the CISO, BISO, CPO, and CSO

The rapidly changing cybersecurity landscape has forced local governments to reevaluate their approach to cybersecurity. With the...

Finding the Right Fit: Exploring Local Government Cybersecurity Reporting Structures

In a previous post entitled, "Why Cybersecurity Needs to be Separated from IT in Local Governments," I discussed the importance of...

Why Cybersecurity Needs to be Separated from IT in Local Governments

"The days of the CISO being completely IT-centric and as such being in a role under the CIO is gone. Managing security effectiveness and...

Managing Cyber Risks in Local Government: The Need for Comprehensive Risk Management Programs

As the world continues to move towards digital government, there is a growing need to ensure that cybersecurity is adequately addressed....

The Crucial Role of CISOs in Local Governments: Ensuring Good Governance and Cybersecurity

"The single biggest threat to cybersecurity is misunderstanding." - ANSI ISA In recent years, the importance of cybersecurity has become...

Annual Cyber Reports

Reporting to Council: Why Local Governments Should Use the NIST Cybersecurity Framework

Webinar: The Board or Council's Role in Cyber Risk Management

Why Cybersecurity Needs to be Separated from IT in Local Governments

The Crucial Role of CISOs in Local Governments: Ensuring Good Governance and Cybersecurity

Does Security Awareness Work?

The Visible Ops Handbook

Cybersecurity Takes Teamwork

What you need to know about ransomware

Notes on Ransomware