A story plays out on r/soc2 every few weeks. A company has been handing every prospect a SOC 2 report, things are going fine, and then a customer’s finance team comes back asking specifically for a SOC 1. Panic spreads through the company’s Slack channels, followed by a post asking what the difference even is….
When Senior Judge Sidney Fitzwater signed off on AT&T’s $177 million data breach settlement on October 2, 2026, the actual numbers from the Memorandum Opinion and Order got lost in the headlines promising payments “up to $7,500.” The real numbers put most claimants in line for between $6.50 and $8.10. Two Breaches, One Bill The…
Cyber insurance rates have now fallen four years in a row, down roughly 5% year to date in 2026 after a 13% drop in 2025, according to Insurance Journal. If you’re renewing a policy this quarter, congratulations, you have the upper hand on price. Now the bad news. Over that same period, average claim severity…
This worksheet has been completed for a mid-market creative and digital media agency (approximately 70-80 staff, $15-20M in annual revenue) serving roughly 30 active clients, administering approximately 475 client platform credentials, and managing $20-25M in annual client media spend on their behalf. The organization’s current security-business integration maturity is Initial: a virtual CISO has been…
©Kayne McGladrey – Get the full book “Cyber Risk is a Myth” PART A: Investment Summary Security Investment Description Initial Cost Annual Operating Cost Expected Useful Life Identity and anti-phishing hardening Enforced multi-factor authentication and conditional access on recruiter mailboxes and the applicant tracking system, plus ongoing phishing simulation training for the full internal staff…
©Kayne McGladrey – Get the full book “Cyber Risk is a Myth” STEP 1: Identify key business value drivers Completed for the engagement (pending formal validation with leadership at the next board meeting): STEP 2: Map vulnerabilities to value drivers Value Driver How Security Supports This Current Vulnerabilities Business Risk Exposure Recommended Actions Customer Trust…
Brockton Neighborhood Health Center runs a network of clinics serving about 39,000 patients around Boston, with roughly $84 million in annual revenue and about 830 employees. In November 2024, a ransomware crew called Interlock got in and took what it wanted. Six weeks later, Brockton sent letters to 97,488 current and former patients (the active…
On October 6, I wrote up Judge P. Casey Pitts’s decision denying most of a motion to dismiss Apollo Information Systems Corp.’s claims, arguing the ruling deserved a busy security leader’s attention. The case looks different today. In Document 83, the defendants answer the complaint, concede most of the facts Apollo alleged, and then sue…
Walk into a CFO’s office and announce that you’ve got a 9.8 on the Common Vulnerability Scoring System (CVSS) for a production server, and watch what happens. Nothing happens. The CFO has eleventy billion other things to think about and no way to judge whether a 9.8 is a five-alarm fire or a rounding error….
If you’re job hunting in security right now, the market has fewer doors to knock on than at any point in the past four years. The CyberSN Jobs Report counted 235,786 US cybersecurity job postings between January and September 2026, a 26.4% drop from the 320,210 posted over the same nine months of 2025. Eight…
Roughly a million Americans had their names, mailing addresses, financial account numbers, and Social Security numbers (SSNs) removed from a computer network belonging to a company most of them had never heard of. Their credit unions knew Doxim well enough to hand over member data for document management and customer communications, which is how a…
EXECUTIVE SUMMARY This business case requests approval of a $425,000 initial investment and $320,000 in annual operating costs to establish a systemwide franchisee security baseline program, complete an independent PCI DSS assessment across corporate and sampled franchised units, and execute enterprise data-processing addenda with the three mandated platform vendors. The program directly addresses the structural…
This website uses cookies.
Manage your cookie preferences below:
Essential cookies enable basic functions and are necessary for the proper function of the website.
Statistics cookies collect information anonymously. This information helps us understand how visitors use our website.
Google Analytics is a powerful tool that tracks and analyzes website traffic for informed marketing decisions.
Service URL: policies.google.com (opens in a new window)
Marketing cookies are used to follow visitors to websites. The intention is to show ads that are relevant and engaging to the individual user.
A video-sharing platform for users to upload, view, and share videos across various genres and topics.
Service URL: www.youtube.com (opens in a new window)
You can find more information in our Cookie Policy and Privacy Policy.