The prevalence of security incidents and hacking continues to increase, as financially-motivated attackers continue to target businesses with everything from social engineering attacks to data harvesting. Small-to-Medium-sized Businesses (SMBs) remain easy targets due to the ease with which adversaries can launch attacks. These organizations are fighting an uphill battle when trying to protect themselves, as […]
Many of our clients come to us when a client or third-party vendor requires a penetration test, and they have to provide proof to them that they have completed a penetration test. The conversation ranges from “I have no idea where to start” to “what the heck is a penetration test” to “we currently conduct […]
What is the Visa Merchant Servicer Self-Identification Program (MSSIP) and how can I get my company included on the list? This is a great question and today we will explore what this is, the benefits for your company, and how you can get on the list. What is the Visa MSSIP? The Visa MSSIP was […]
On August 3, 2018, Governor John Kasich signed Senate Bill 220, also known as the “Ohio Data Protection Act“. Unfortunately, this caused some confusion for businesses operating in Ohio, so today, we will discuss the act and how it may apply to you. This act IS NOT meant to lay forth a minimum security requirement for businesses in Ohio. In fact, […]
Penetration testing requests for proposals (RFPs) or requests for quotes (RFQs) can be a great way to bid on and potentially win penetration testing projects as a business. Many pen testing vendors rely on capturing business solely, or mostly, through RFP submissions. Most RFPs are for government entities such as local municipalities, state run schools, […]
In our last blog on tackling the broad topic of how do I protect my company’s sensitive information, we reviewed several ways to get started with this process. Before you can protect your sensitive data or “crown jewels”, you’ve got to know what you have and where it lives. We covered creating an asset inventory […]
Today, we’re going to try and tackle the million dollar question of how to protect your organization’s sensitive data. Keep in mind, this isn’t going to be a single, magical answer. There is no silver bullet when it comes to security, but when it comes to tackling a broad topic like this, we’ll try and […]
The question of “do startups need a penetration test” comes up quite often when speaking with entrepreneurs and folks in the startup scene. Unfortunately, startups can be a natural target for would-be hackers as they know that the security posture of startups can often be immature or non-existent. Sometimes the pressure to build and get […]
Unlike the financial analysis of a “normal” project or investment, it is tough to ultimately determine the return on investment of a penetration test. We like to relate a penetration test to your annual physical with your doctor. You go to your doctor to get a check-up as a preventative measure with the hope that […]
How do I fill out a vendor security assessment questionnaire? As company’s are beginning to become more security focused and realize that suppliers/vendors represent potential security threats, we are constantly being asked how to fill out a supplier assessment related to information security. While we think this is great for the security industry, it often […]
