I recently had the honor of being selected to participate in a panel discussion on assessing, mitigating, and disclosing cybersecurity...

The blog post discusses how the NIST Cybersecurity Framework can be an effective tool for reporting on cybersecurity to council members.

In today's digital age, every local government is a digital government. With the increasing reliance on information and technology,...

As an IT auditor for local governments, one of the most often asked questions I get during audits is this: “Who should set up user access...

Some standards like PCI and NIST require policies that cover specific topics. Sometimes you will see a requirement for a policy and...

Many practitioners use these terms governance and management synonymously. While there is some overlap in practice, there are key...

People often ask for advice regarding information security or cybersecurity policies. For the remainder of this article, I will use...

Here is a sample high-level cybersecurity policy for a city, district, or county. It is designed to be a high-level statement adopted by...

According to the Verizon 2018 Data Breach Report, 93% of data breaches are linked to phishing or social engineering. With stats like...