12 Aug InfoSec Strategies | Category - Pivot Point Security 80/20 Cyber Security, Part 2—The 3 Most Critical Controls June 24, 2024 By John Verry In part 1 of this post I introduced Vilfredo Pareto and “The Pareto Principle” as applied to information security. The goal is to mitig... Continue reading
09 Aug InfoSec Strategies | Category - Pivot Point Security, ISMS Consulting 80/20 Cyber Security—How to Reduce 80% of Your Cyber Risk with 20% of the Effort June 24, 2024 By John Verry One of my favorite historical figures is Vilfredo Pareto; an Italian engineer, economist, sociologist, political scientist and philosop... Continue reading
08 Aug InfoSec Strategies | Category - Pivot Point Security Virtual CISO (vCISO) Pricing and Cost Drivers January 19, 2024 By Richard Barrus A Virtual CISO (vCISO) or often called Fractional CISO, is an outsourced security practitioner (or team of practitioners) who offers th... Continue reading
23 Jul InfoSec Strategies | Category - Pivot Point Security 4 Reasons to Establish and Exercise Your Right to Audit Vendors June 19, 2024 By Richard Barrus How do you really know your highest-risk vendors are doing what they say they’re doing, security-wise—especially if it involves meeting... Continue reading
22 Jul InfoSec Strategies | Category - Pivot Point Security Why “Check-the-Box” Policies are a VERY Bad Idea January 15, 2024 By Richard Barrus It sometimes happens in the course of supporting clients during ISO 27001 certification projects or other information security assessme... Continue reading