Security Guides
Practical, hands-on cybersecurity guides for small and mid-sized businesses.
42 articles
The Case for Privileged Access Management
PAM tools are expensive and operationally heavy. They are also, by a wide margin, the control with the highest evidence base for reducing the impact of an intrusion.
Tabletop Exercises That Don't Waste Anyone's Time
A bad tabletop is a two-hour status meeting in costume. A good tabletop is the cheapest insurance you can buy.
PCI DSS 4.0: What Changed and What to Do
PCI DSS 4.0 became mandatory in early 2024 with a long tail of "future-dated" requirements landing March 31, 2025. If you are still operating to 3.2.1, the gap is wider than it looks.
Securing Remote Workforces in 2024
Hybrid work is permanent. The security model that worked in 2020, VPN, corporate laptop, occasional office visit, is showing its age.
Cyber Hygiene Metrics Your Engineers Will Trust
Engineering teams treat most security metrics like marketing numbers, directionally true, locally meaningless. Here are five that survive engineering scrutiny.
Email Security Beyond DMARC
DMARC is necessary and not sufficient. Once your domain is no longer spoofable, attackers shift to lookalike domains, compromised vendor mailboxes, and conversation hijacking.