The Value of a Business Impact Analysis
The risk of playing security guesswork.
Cybersecurity
SubscribeCybersecurity articles and notes.
Collaboration, Communication, and Culture in Cybersecurity
How building trust, communication, and shared ownership transforms security from a technical task into an organizational culture.
CVE CVSS and KEV Explained
CVE CVSS and KEV Building Your Vulnerability Management Foundation
A New Approach to SaaS Security
Taking a look at a new approach to securing SaaS applications with complete visibility and control.
Understanding the OWASP Top 10
Understanding the OWASP key web application security risks and how to mitigate them.
Responding to Events in the Cloud
A framework for responding to alerts in the cloud and maintaining operational excellence.
Access Control Gaps Lead To Data Breaches
Overly permissive users lead to Salesforce data breach and the importance of SSPM solutions.
The Anatomy of SSPM Checks
Exploring the crucial components within SSPM security checks and how they secure SaaS environments.
SaaS Termination
What to look for when you are ending a SaaS contract to maintain security and compliance.
SaaS Vendor Security Checklist
A checklist to assess SaaS vendor security during the due diligence process.
Integrating a New System into an Existing Security Boundary
Ensure a secure and compliant integration when introducing a new system into an existing security boundary.
A Cybersecurity Program Framework
A reusable starting point for building a cybersecurity program using Assess, Manage, and Validate pillars.
Software Development Life Cycle (SSDLC) in Cloud Security
Integrating security into every phase of cloud software development with SSDLC best practices.