<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Dubman Group]]></title><description><![CDATA[Practical cybersecurity, cyber-insurance readiness, compliance, AI, and IT risk advisory, with the Cyber Ready platform in development.]]></description><link>https://www.cyber-ready.com/blog</link><generator>RSS for Node</generator><lastBuildDate>Fri, 16 Oct 2026 22:50:55 GMT</lastBuildDate><atom:link href="https://www.cyber-ready.com/blog-feed.xml" rel="self" type="application/rss+xml"/><item><title><![CDATA[From SATAN to AI: Why Powerful Tools Need Governance, Not Panic]]></title><description><![CDATA[I remember when SATAN, the Security Administrator Tool for Analyzing Networks, was released in 1995. The reaction sounded surprisingly similar to the discussion around artificial intelligence today. People worried that putting powerful security capabilities into an accessible tool would mainly help attackers. The concern was understandable. SATAN, created by Dan Farmer and Wietse Venema, allowed users to scan networks and identify vulnerabilities more easily than before. At the time, finding...]]></description><link>https://www.cyber-ready.com/post/from-satan-to-ai-why-powerful-tools-need-governance-not-panic</link><guid isPermaLink="false">fa126f89-4d6b-4adf-bb81-d74875373be6</guid><pubDate>Thu, 17 Sep 2026 17:57:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/8af338_12157d6a7f504158981bc18f76c2945a~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Tim Dubman</dc:creator></item><item><title><![CDATA[Is Your MSP Actually Doing What the Contract Says?]]></title><description><![CDATA[Many organizations rely heavily on a managed service provider to handle user support, Microsoft 365, backups, patching, security tools, networking, and sometimes nearly the entire technology environment. That arrangement can work very well. It can also create a blind spot. I have seen leadership teams assume that because a service appears in an agreement or on an invoice, it is being performed in the way they expect. Sometimes it is. Sometimes the contract is vague, the work is only partially...]]></description><link>https://www.cyber-ready.com/post/is-your-msp-actually-doing-what-the-contract-says</link><guid isPermaLink="false">ed8efa9b-6656-49ef-940c-2a9417f0ff92</guid><pubDate>Thu, 17 Sep 2026 17:57:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/8af338_ad9ce4844da64a0c9bd059ab655957cf~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Tim Dubman</dc:creator></item><item><title><![CDATA[Treat Your Cyber Insurance Policy Like a Compliance Obligation]]></title><description><![CDATA[Cyber insurance is often handled as an annual purchasing exercise. The application arrives. Someone sends it to IT or the MSP. Questions are answered, a few follow-ups go back to the broker, the premium is paid, and the policy is placed in a folder until renewal. That is not enough. A cyber insurance application contains representations about how the organization protects its systems and data. The issued policy then contains definitions, conditions, exclusions, reporting requirements, limits,...]]></description><link>https://www.cyber-ready.com/post/treat-your-cyber-insurance-policy-like-a-compliance-obligation</link><guid isPermaLink="false">76fabf22-c8fc-455d-92d1-93556aac150e</guid><pubDate>Thu, 17 Sep 2026 17:57:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/8af338_b6b52a16827b45bd8098749960e5cd68~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Tim Dubman</dc:creator></item><item><title><![CDATA[Treat Your Cyber Insurance Policy Like a Compliance Obligation]]></title><description><![CDATA[Cyber insurance is often handled as an annual purchasing exercise. The application arrives. Someone sends it to IT or the MSP. Questions are answered, a few follow-ups go back to the broker, the premium is paid, and the policy is placed in a folder until renewal. That is not enough. A cyber insurance application contains representations about how the organization protects its systems and data. The issued policy then contains definitions, conditions, exclusions, reporting requirements, limits,...]]></description><link>https://www.cyber-ready.com/post/treat-your-cyber-insurance-policy-like-a-compliance-obligation-7f6f9bb7</link><guid isPermaLink="false">5ef84234-27d7-4f08-a787-dac3d6a365f8</guid><pubDate>Mon, 27 Jul 2026 05:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/8af338_b6b52a16827b45bd8098749960e5cd68~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Tim Dubman</dc:creator></item><item><title><![CDATA[Is Your MSP Actually Doing What the Contract Says?]]></title><description><![CDATA[Many organizations rely heavily on a managed service provider to handle user support, Microsoft 365, backups, patching, security tools, networking, and sometimes nearly the entire technology environment. That arrangement can work very well. It can also create a blind spot. I have seen leadership teams assume that because a service appears in an agreement or on an invoice, it is being performed in the way they expect. Sometimes it is. Sometimes the contract is vague, the work is only partially...]]></description><link>https://www.cyber-ready.com/post/is-your-msp-actually-doing-what-the-contract-says-cf870237</link><guid isPermaLink="false">deb004b5-0c03-45a4-85ca-8a1542c67198</guid><pubDate>Fri, 24 Jul 2026 05:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/8af338_ad9ce4844da64a0c9bd059ab655957cf~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Tim Dubman</dc:creator></item><item><title><![CDATA[From SATAN to AI: Why Powerful Tools Need Governance, Not Panic]]></title><description><![CDATA[I remember when SATAN, the Security Administrator Tool for Analyzing Networks, was released in 1995. The reaction sounded surprisingly similar to the discussion around artificial intelligence today. People worried that putting powerful security capabilities into an accessible tool would mainly help attackers. The concern was understandable. SATAN, created by Dan Farmer and Wietse Venema, allowed users to scan networks and identify vulnerabilities more easily than before. At the time, finding...]]></description><link>https://www.cyber-ready.com/post/from-satan-to-ai-why-powerful-tools-need-governance-not-panic-d46ef954</link><guid isPermaLink="false">b390861c-c64a-451d-9760-a5eb44ab3cdd</guid><pubDate>Tue, 21 Jul 2026 15:48:38 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/8af338_12157d6a7f504158981bc18f76c2945a~mv2.jpg/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Tim Dubman</dc:creator></item></channel></rss>