#Policy

Policy, Procedure, or Plan

Some standards like PCI and NIST require policies that cover specific topics. Sometimes you will see a requirement for a policy and...

Cybersecurity Policies Made Easy

People often ask for advice regarding information security or cybersecurity policies. For the remainder of this article, I will use...

Cybersecurity Policy for Local Governments

Here is a sample high-level cybersecurity policy for a city, district, or county. It is designed to be a high-level statement adopted by...

IT Prioritization Policy

IT staff often have several projects or issues open at a time. IT staff needs a way to prioritize their time with competing priorities. ...

People & Cyber Security

Cyber attacks are on the rise, affecting companies, government agencies and millions of people. Headlines are filled with stories about...

Data Destruction Policy

Question I need a data destruction policy, any suggestions for things to consider? Answer I want to note first that you have some...

Annual Cyber Reports

Reporting to Council: Why Local Governments Should Use the NIST Cybersecurity Framework

Webinar: The Board or Council's Role in Cyber Risk Management

Why Cybersecurity Needs to be Separated from IT in Local Governments

The Crucial Role of CISOs in Local Governments: Ensuring Good Governance and Cybersecurity

Does Security Awareness Work?

The Visible Ops Handbook

Cybersecurity Takes Teamwork

What you need to know about ransomware

Notes on Ransomware