The SEC Proposes Cybersecurity Expertise: Why Cyber Literacy is Critical for Council Members
"The SEC is proposing to force boards to do what they haven't done themselves, govern cyber risk." - Forbes The Securities and Exchange...
Prioritizing Cyber Risk Management: Prevention and Response to Incidents
Summary This article discusses the complex question of whether having a cyber incident indicates a failure to evaluate and mitigate cyber...
New Roles in Local Government Cybersecurity: A Guide to the CISO, BISO, CPO, and CSO
The rapidly changing cybersecurity landscape has forced local governments to reevaluate their approach to cybersecurity. With the...
Why Cybersecurity Needs to be Separated from IT in Local Governments
"The days of the CISO being completely IT-centric and as such being in a role under the CIO is gone. Managing security effectiveness and...
The Crucial Role of CISOs in Local Governments: Ensuring Good Governance and Cybersecurity
"The single biggest threat to cybersecurity is misunderstanding." - ANSI ISA In recent years, the importance of cybersecurity has become...
The Importance of Active Involvement from Local Government Leaders for a Cyber Safe Future
In today's digital age, every local government is a digital government. With the increasing reliance on information and technology,...
The Importance of the CISO
A survey by ThreatTrack demonstrates that the role of CISO is misunderstood and underappreciated by C-Level peers. It seems business...
Cybersecurity Supporting Documentation
Cybersecurity Supporting Documentation In previous posts, I outlined the required topics for cybersecurity policies and procedures. In...
Cybersecurity Procedure Coverage
In a previous post, I outlined the required topics for cybersecurity policies. In this post, I will cover the required procedures from...
Who should setup access in the ERP (Financial Application)?
As an IT auditor for local governments, one of the most often asked questions I get during audits is this: “Who should set up user access...