top of page


Compliance Is Not Security: When Governance, Risk, and Compliance Fail to Protect
In cybersecurity, compliance is often mistaken for protection. Unfortunately, that decision trades measurable comfort for invisible risk.
Andrew Kirch
Oct 216 min read
Â
Â


SaaS vs On-Prem: Cybersecurity Risks to Continuity, Integrity, and Access
Many organizations rely on SaaS platforms instead of traditional on-premises solutions, trading control for convenience. The risks of that trade-off are often misunderstood.
Andrew Kirch
Sep 234 min read
Â
Â


Failure Is Like Onions: Physical Security Lessons for Your Server Room
Stop me if you have heard this before. A company suffers a massive IT outage. The culprit is not a hacker in a foreign country or a sophisticated piece of malware. It is an unlocked door.
Andrew Kirch
Sep 75 min read
Â
Â


The Pitfalls of Cybersecurity Insurance and how your small business can avoid them
Most companies don’t realize how narrow and conditional cybersecurity insurance coverage really is until they need it.
Andrew Kirch
Aug 273 min read
Â
Â


Five Lies About Software Security
Managers, project managers, and executives can increase code quality by improving the environment and incentives for development teams.... and that includes improving security.

Susan Sons
Aug 194 min read
Â
Â


How to Avoid Being the Weak Link as a New Developer
Starting your first job as a software developer is both exciting and intimidating. You want to make a strong impression, but you may worry about making a mistake that harms the company.
Andrew Kirch
Aug 134 min read
Â
Â


Executive Missteps: Above the Law
It's late on Friday afternoon, and the corporate help desk gets a phone call. The CEO is in a panic. His next move will cost the company dearly.

Susan Sons
Jul 224 min read
Â
Â


A Practical Guide to Ransomware recovery (without paying) and Data Loss Prevention
Protecting your business from ransomware and blackmail requires a disciplined backup and data loss prevention strategy.
Andrew Kirch
Jul 155 min read
Â
Â


What is Cybersecurity for the Small to Medium size Organization?
Small to Medium size Organizations, or commonly SME's face unique cybersecurity challenges now, and in the future. Here. Susan Sons explains the strategy for facing those challenges head-on.

Susan Sons
Jul 14 min read
Â
Â


Stop Repeating Yourself – Automate It
Eliminating repetitive tasks, enforcing configuration consistency, and automating provisioning aren’t just technical wins, they’re operational leverage. Automation doesn’t mean less work. It means less waste and more time for what actually matters.Â
Andrew Kirch
Jul 14 min read
Â
Â


Security and the FOSS Supply Chain
Learn how to evaluate the security risks of Free and Open Source Software (FOSS) vs commercial software. A practical framework for risk assessment and communicating findings to management.
Andrew Kirch
Jun 155 min read
Â
Â
bottom of page


