As I’ve said before, I haven’t been hands-on-keyboard for some time. (That’s a term I heard used for the people that do the amazing work of defending networks against the bad guys and I really like it.)
I deal at the business level. I protect the ability of the business to create value. Most of the time in cybersecurity, that is about minimizing risk enough that management can sleep at night. We call that reaching the tolerable risk level. It DOES NOT mean eliminating risk! The only way to eliminate risk is to close that line of business down. If anyone claims to eliminate all risk, run away…fast!
One thing to keep in mind is that some of “the bad guys” are usually much better at attacking then any company is in defending. If a good nation state sets their sites on your company, you better have your ducks in a row! Fortunately, the majority of the attackers out there are not nearly that skilled.
To be completely honest, you can protect yourself from most of the threats out there by doing a hand full of things. It is this list and other advice that I will cover in these postings. The goal here is to help protect all those businesses out there that can’t afford cybersecurity staff.
A CISO can demand $200k-500k a year. Most small-mid sized businesses can’t afford that. I understand but it’s all about demand. My hope is that these posts will help companies put a little security in place until they get talent onboard.
-
Would You Ignore a 1-in-3 Chance of a $250,000 Loss?
If someone told you that you had a one in three chance of an accident this year that could cost your business $250,000, what would you do? Would you roll the dice and hope it doesn’t happen?Or would you buy an insurance policy that dramatically reduces your risk? That’s the same calculation every small and…
-
The cybersecurity reality for SMBs
In today’s digital environment, SMBs can no longer assume “we’re too small to matter” when it comes to cyber-threats. Microsoft’s report underscores how the risk has become pervasive and how the stakes are significant for organizations with limited resources yet major responsibilities. The findings reveal both awareness and a gap between knowing the risk and…
-
Protecting Yourself from FinTech Fraud: Five Common Scams and How to Stay Safe
Financial technology, or FinTech, has made managing money faster and easier than ever. Apps can send money, invest, or pay bills in seconds. That same convenience can also make you a target for fraud. According to Stripe’s Guide to FinTech Fraud Detection, criminals use many different tricks to steal money or personal data. Understanding how…
- Would You Ignore a 1-in-3 Chance of a $250,000 Loss? – October 23, 2025
- The cybersecurity reality for SMBs – October 21, 2025
- Protecting Yourself from FinTech Fraud: Five Common Scams and How to Stay Safe – October 14, 2025