Practical thinking on security, IT, compliance, and AI, written for leaders of regulated institutions.
An incident response plan is much like a fire drill plan that you would have in your elementary school. You want to think back to the days of elementary school when you had your fire drills. You practiced what to do in case of a fire, and everybody knew where
A disaster recovery plan, in simplest terms, is really the written word of how you’re going to make your systems operate in the event of a failure of one or many of those systems. Do you have redundancy? And I guess the better buzzword would be: do you have re
A question that I get asked often is, “What is the best way for me to set up email security for my organization?” And there’s a straightforward answer to that question, and the best way is going to be customized for you. There is no single answer to that quest
Does your bank often face significant hurdles when it comes to making major changes to your processes or offerings? Maybe you are unsure what type of changes need to go through the change management playbook or how to document your changes for compliance purpo
Application control, or what some people call application safe listing, is a relatively new security method that we can put in place for many organizations that allows us a more discreet level of control at the device level. So, what is application control? It
A lot of times, an engagement with ImageQuest starts on a bad note. What I mean by that is that we get the call that it’s crisis management, the flag’s gone up, and the call might go something like this: Caller: “Oh my gosh! One of my employees clicked on a ma
Many organizations rely on a vulnerability scan, or they might even be regulated or audited in such a way that they’re asked to do regular vulnerability scans. Their regular scan might be quarterly, annually, or, if you’re really ambitious, they might be month
Are you struggling to convey a need for a cybersecurity initiative to your board? Do your directors express concerns that they don’t grasp all this cyber hoopla? If you’re like many banks and institutions, the answers to these questions are a yes, and you may
“Can an organization move to the cloud?” is a question that gets asked a lot. The simple answer is probably? Maybe? I don’t know? But the honest answer is we have to do some investigation to find out. The Cloud allows businesses to access a larger, more talent
A lot of people ask me, “Is VPN still a viable technology? Or is using VPN dead?” And I will tell you that VPNs are not dead, but the way you probably use VPNs is probably obsolete. VPN has been replaced with a lot of new technologies, one of which is what we
Whether you are a non-profit, insurance company, healthcare organization, or other type of company, you know that cybersecurity is of utmost importance. And while you may have firewalls, network monitoring, and multi-factor authentication in place, are you pro
Password management is what I would call table stakes or the cost of doing business. Five years ago, I would have stood here and told you that password managers are pretty important, and you should really think about getting one. But in 2024 and beyond, I’m te