SMB Cybersecurity
Cybersecurity for small and mid-sized businesses. Checklists, programs, and budget-aware controls.
36 articles
Tabletop Exercises That Don't Waste Anyone's Time
A bad tabletop is a two-hour status meeting in costume. A good tabletop is the cheapest insurance you can buy.
Securing Remote Workforces in 2024
Hybrid work is permanent. The security model that worked in 2020, VPN, corporate laptop, occasional office visit, is showing its age.
The Anatomy of a Business Email Compromise
A typical BEC investigation we run unfolds in five acts. Recognizing them in progress is the difference between a near-miss and a six-figure loss.
Email Security Beyond DMARC
DMARC is necessary and not sufficient. Once your domain is no longer spoofable, attackers shift to lookalike domains, compromised vendor mailboxes, and conversation hijacking.
The Truth About Penetration Testing for SMBs
Most penetration tests sold to SMBs are vulnerability scans with a manual write-up. Real pentests are scarcer, more expensive, and more useful, when you actually need one.
Insider Threat Programs Without the Surveillance Theater
The phrase "insider threat program" conjures keystroke loggers and screenshot monitors. The version that actually reduces risk looks more like good HR plus targeted detections.