10 Jul Third Party Risk Management How Municipal Governments Can Manage Third-Party Risk January 19, 2024 By Richard Barrus For the last 20 months or so, we’ve worked with nearly 200 government municipalities on cyber loss control projects, now largely comple... Continue reading
25 Aug Third Party Risk Management Cloudflare’s Daily Stormer Shutdown and the Need for Segregation of Duties (SoD) January 14, 2024 By Richard Barrus An interesting and potentially troubling event happened in the information security world on Wednesday, August 16, 2017. It wasn't a ma... Continue reading
06 Apr ISO 27001 Certification | Category - Pivot Point Security, Third Party Risk Management Want to Proactively Mitigate InfoSec Risk? Have IT Review Contracts with Vendors Before You Sign Them. January 15, 2024 By Richard Barrus Because I have both an audit background and an IT security background, I’m frequently involved in helping clients address contract issu... Continue reading
04 Apr Phishing | Category - Pivot Point Security Why Your Anti-Phishing Vendor Should Be ISO 27001 Certified January 18, 2024 By John Verry Sometimes information security involves taking two steps forward and one step back. Case in point, the recent evolution of many vendors... Continue reading
05 Aug ISO 27001 Certification | Category - Pivot Point Security, Third Party Risk Management Vendor Risk Management for the Alternative Investment Industry (AITEC DDQ) January 15, 2024 By John Verry One of our clients that provides cloud services to the financial services community recently asked us to help them develop a strategy f... Continue reading