I remember when SATAN, the Security Administrator Tool for Analyzing Networks, was released in 1995. The reaction sounded surprisingly similar to the discussion around artificial intelligence today. People worried that putting powerful security capabilities into an accessible tool would mainly help attackers. The concern was understandable. SATAN, created by Dan Farmer and Wietse Venema, allowed users to scan networks and identify vulnerabilities more easily than before. At t

Many organizations rely heavily on a managed service provider to handle user support, Microsoft 365, backups, patching, security tools, networking, and sometimes nearly the entire technology environment. That arrangement can work very well. It can also create a blind spot. I have seen leadership teams assume that because a service appears in an agreement or on an invoice, it is being performed in the way they expect. Sometimes it is. Sometimes the contract is vague, the work

Cyber insurance is often handled as an annual purchasing exercise. The application arrives. Someone sends it to IT or the MSP. Questions are answered, a few follow-ups go back to the broker, the premium is paid, and the policy is placed in a folder until renewal. That is not enough. A cyber insurance application contains representations about how the organization protects its systems and data. The issued policy then contains definitions, conditions, exclusions, reporting requ

Cyber insurance is often handled as an annual purchasing exercise. The application arrives. Someone sends it to IT or the MSP. Questions are answered, a few follow-ups go back to the broker, the premium is paid, and the policy is placed in a folder until renewal. That is not enough. A cyber insurance application contains representations about how the organization protects its systems and data. The issued policy then contains definitions, conditions, exclusions, reporting requ

Many organizations rely heavily on a managed service provider to handle user support, Microsoft 365, backups, patching, security tools, networking, and sometimes nearly the entire technology environment. That arrangement can work very well. It can also create a blind spot. I have seen leadership teams assume that because a service appears in an agreement or on an invoice, it is being performed in the way they expect. Sometimes it is. Sometimes the contract is vague, the work

I remember when SATAN, the Security Administrator Tool for Analyzing Networks, was released in 1995. The reaction sounded surprisingly similar to the discussion around artificial intelligence today. People worried that putting powerful security capabilities into an accessible tool would mainly help attackers. The concern was understandable. SATAN, created by Dan Farmer and Wietse Venema, allowed users to scan networks and identify vulnerabilities more easily than before. At t