PHP2Shell: What It Means for Community Banks
Two critical PHP flaws were patched on October 21. For most banks, the exposure sits with vendors, not their own servers.
Insights
Articles & insights
Practical thinking on security, IT, compliance, and AI, written for leaders of regulated institutions.
All articles
50 articles
AI-Driven SOC: The Future of Cybersecurity
In a world where cyber threats evolve faster than defenses can adapt, organizations are seeking solutions that are not just reactive but also proactively protective. The traditional Security Operations Center (SOC) has long served as the core of cyber defense,
AI Cybersecurity Threats Are Reshaping the Business Risk Landscape
Artificial intelligence is no longer a future concern. It is already changing how cybercriminals operate, how attacks scale, and how quickly businesses can be compromised. AI cybersecurity threats are evolving faster than traditional defenses, widening the gap
How a Virtual CISO Can Improve Your Company’s Security Posture
As cyber threats evolve, businesses must stay proactive to improve security posture and safeguard sensitive data. However, many organizations lack the in-house expertise to develop and maintain a strong cybersecurity strategy. Virtual CISO services offer a str
Is Our Data Secure in the Cloud?
I get questioned a lot about, “How do I know my data in the cloud is secure?” Or “How do I keep my data secure in the cloud?” How do I know that it’s safe? And it’s a very simple question with a very complex answer. Choosing a Trusted Cloud Storage Service The
The Benefits of a Standard Technology Stack
A standard technology tool stack is a critical component of good cybersecurity. Managed service providers want you to be on a standard technology tools kit, sometimes referred to as a standard technology stack, because it is easier for them to train each techn
What Is Managed Detection and Response (MDR)?
Some in the industry refer to SIEM or Security Incident Event Monitoring. A lot of people will also talk about MDR, which is Managed Detection and Response. Sometimes, they’re interchangeable. Often, they’re not. Some MDR companies get offended when you call t
What Is SD-WAN?
A new buzzword that you probably hear bandied around a lot is SD-WAN. This acronym stands for Software Defined – Wide Area Network. SD-WAN isn’t necessarily new, but it’s new to a lot of organizations. It really became mainstream in 2022 and 2023. But what is
Why You Need Cyber Liability Insurance
A question I’m asked often is, “Do we need cyber insurance?” I’m not a cyber liability insurance salesman, but I will tell you that you most likely do need this specialized insurance coverage in this day and age. Why Is Cyber Liability Insurance So Important?
7 Ways to Improve Your Identity Theft Protection
ID theft is very frustrating. There’s no guaranteed method to block identity theft completely. But these seven measures will help reduce your risk of having your identity stolen. In April 2024, an enormous amount of stolen data, including possibly 272 million
The Value of an Incident Response Tabletop Exercise
An incident response tabletop exercise is when you test your plan to ensure that it’s going to work. It’s a little bit like a fire drill. You don’t want to be learning about the exit routes and where to stand in the parking lot on the day of the fire. You want
From Chaos to Clarity: The Essential Guide to Data Flow Diagrams for Community Banks
Do you know where your bank data goes? One of the latest requirements of regulatory examinations is having a Data Flow Diagram (DFD). It shows how information, client account data, business records, etc., moves through your network and third-party services. A
Common questions
Security, compliance, IT operations, and AI written for leaders of regulated institutions. A topic list on every page shows how many articles sit under each subject.
Type a term in the search bar and results span the whole archive, not just the page in front of you. You can combine a search with a topic filter and move through results a page at a time.
The library holds current ImageQuest guidance for regulated institutions. Older articles that no longer reflect current practice have been retired.
Yes. The RSS feed at /rss.xml delivers new articles as they are published, with no account required.
No. They are written for CEOs, CFOs, boards, and risk committees, so the answer and the next step are clear without a technical background.