Incident Response Tabletop Exercise: The “Fire Drill” of Information Security An Incident Response Tabletop Exercise is a “Fire Drill” for a company’s Incident Response Plan (IRP) as an effective training procedure. With the complexities of AI and evolving cyber threats,…
Information Security Terminology: Key Terms Every Business Needs to Know In today’s interconnected world, where digital threats are an ever-present danger, understanding information security terminology is essential for anyone involved in securing data, systems, or networks. As a business owner,…
Information Security vs. Cyber Security: Understanding the Key Differences and Overlap In today’s rapidly evolving digital landscape, safeguarding data and information is more critical than ever. With the rise of cyber threats, data breaches, and a growing reliance on digital…
Latest version now available for download: CAN/DGSI 104:2021 Rev 1 2024 The latest version of CAN/DGSI 104:2021 Rev 1 2024 framework is now available to download. It outlines baseline cyber security controls for small and medium organizations with fewer than…
Canadian defence and federal contractors are starting to face new cybersecurity compliance requirements under the Canadian Program for Cyber Security Certification (CPCSC). Developed by the Canadian Centre for Cyber Security, CPCSC is Canada’s counterpart to the U.S. DoD’s CMMC. Phase…
What is cyber insurance? Cyber insurance enables businesses to mitigate the costs that arise from cyber incidents, including ransomware. This type of insurance is essential to any business – regardless of the size or industry. A cyber incident ranges from…
And could it have been avoided? What happened with the Snowflake breach? 34 million users (already) were recently compromised in a data breach of the cyber security firm Cylance. Attackers breached Cylance by attacking a third-party vendor of theirs, known…
Is your business cyber secure, or cyber resilient? Cyber security refers to the defensive measures to protect your business against cyber attacks. Think next-gen endpoint protection, spam filtering, multifactor authentication, application control, password security, security awareness training, etc. But what happens when an…