Q&A Monday: Is IT Security nothing but paperwork?

0 Comments

In my current company, I just switched over from the server operations side to the security side of the business. While I have only been in this position for about two weeks so far, I’ve been doing more meetings and paperwork than I have other work. Is security nothing but paperwork?

Leading Remotely…Making better Leaders

0 Comments

Most businesses are switching to either a remote or hybrid model to help employees in these pandemic times, and employees are loving the freedom in which it brings. I’ve seen more than a couple managers struggle with this change

Project communication between “non-techie” stakeholders and “techies”

0 Comments

In all the different jobs that I’ve had over my career, I’ve had a mix of technical and non-technical managers on projects. Most of the time, the non-technical managers just leave the technical stuff to the technical ones in the project, but sometimes I don’t believe that’s the best for a project, because each of […]

How to Improve your enterprise E-mail Security

0 Comments

One of the things that I’ve noticed during my time is that phishing emails, ebb and flow like the waves of the ocean. It seems like nothing significant for a few weeks, then the flood gates open and a bunch all come in a short period of time. The security, mail and support teams get […]

Designing and Implementing a Document Control Number System

0 Comments

While most mature organizations already have a well documented process for creating, approval and numbering of documents, not all do. So what do you do, when you come across one, where you a making the process. The first question, you might come across is why, do you need these documents? Those policies and procedures for […]

Don’t be afraid to fail

0 Comments

In the years that I have been an IT manager, there’s honestly something that most people who work for me need to learn, and even some of my former colleges and bosses need to learn to accept. Don’t be afraid to fail or let your employees make mistakes.

IT Mentality: Hire a problem solver

0 Comments

I have seen many variations of the same tweet over the years, and when I was younger, I’m sure I would of posted the same thing thinking I was cleaver. Only as I matured more, did my perception change on what this tweet really means. Younger me, was like I work in technology, which is […]

How to implement Zero Trust

0 Comments

After answering the question from Monday I kept thinking of how the best way to start programs from scratch. One method I usually recommend is a Zero Trust security model. Now the thing I run into when talking about this, is that people think it’s an all or nothing approach, and most have many issues […]

Q&A Monday: Starting a Cyber Security Program

0 Comments
Question

Question:

I work for a small company and my boss recently tasked me to start to strengthen our defenses against a cyber attack, but I’m not a security expert, whats the best way to plan this out before I get started?

Information Security Core Knowledge

0 Comments

Every so often, I get asked by someone who wants to get into the InfoSec field, what is at the core of knowledge that is needed. Now I know a lot of people have a lot of different answers to this question, but I think there are some things that are important, that are easier to attain.