top of page


Personal Information Security For Business Leaders - Part 2
The second blog article in a two article series on personal information security for executives.

Susan Sons
7 days ago5 min read


Securing Internal AI: Keeping Your On-Prem LLM From Becoming a New Attack Surface
The cybersecurity work you need to do as an internal AI is being designed, deployed and operated, so that the system you stand up to keep data safe actually keeps data safe.
Andrew Kirch
Dec 11, 202511 min read


vCISO or Security Manager?
A vCISO or a cybersecurity manager can be a valuable asset in getting a small or medium enterprise cybersecurity built, or on track and moving in a new direction. However, if you are in a position to afford only one or the other, choose carefully.

Susan Sons
Dec 5, 20254 min read


Compliance Is Not Security: When Governance, Risk, and Compliance Fail to Protect
In cybersecurity, compliance is often mistaken for protection. Unfortunately, that decision trades measurable comfort for invisible risk.
Andrew Kirch
Oct 21, 20256 min read


SaaS vs On-Prem: Cybersecurity Risks to Continuity, Integrity, and Access
Many organizations rely on SaaS platforms instead of traditional on-premises solutions, trading control for convenience. The risks of that trade-off are often misunderstood.
Andrew Kirch
Sep 23, 20254 min read


Failure Is Like Onions: Physical Security Lessons for Your Server Room
Stop me if you have heard this before. A company suffers a massive IT outage. The culprit is not a hacker in a foreign country or a sophisticated piece of malware. It is an unlocked door.
Andrew Kirch
Sep 7, 20255 min read


The Pitfalls of Cybersecurity Insurance and how your small business can avoid them
Most companies don’t realize how narrow and conditional cybersecurity insurance coverage really is until they need it.
Andrew Kirch
Aug 27, 20253 min read


Five Lies About Software Security
Managers, project managers, and executives can increase code quality by improving the environment and incentives for development teams.... and that includes improving security.

Susan Sons
Aug 19, 20254 min read


How to Avoid Being the Weak Link as a New Developer
Starting your first job as a software developer is both exciting and intimidating. You want to make a strong impression, but you may worry about making a mistake that harms the company.
Andrew Kirch
Aug 13, 20254 min read


Executive Missteps: Above the Law
It's late on Friday afternoon, and the corporate help desk gets a phone call. The CEO is in a panic. His next move will cost the company dearly.

Susan Sons
Jul 22, 20254 min read


A Practical Guide to Ransomware recovery (without paying) and Data Loss Prevention
Protecting your business from ransomware and blackmail requires a disciplined backup and data loss prevention strategy.
Andrew Kirch
Jul 15, 20255 min read


What is Cybersecurity for the Small to Medium size Organization?
Small to Medium size Organizations, or commonly SME's face unique cybersecurity challenges now, and in the future. Here. Susan Sons explains the strategy for facing those challenges head-on.

Susan Sons
Jul 1, 20254 min read


Stop Repeating Yourself – Automate It
Eliminating repetitive tasks, enforcing configuration consistency, and automating provisioning aren’t just technical wins, they’re operational leverage. Automation doesn’t mean less work. It means less waste and more time for what actually matters.
Andrew Kirch
Jul 1, 20254 min read


Security and the FOSS Supply Chain
Learn how to evaluate the security risks of Free and Open Source Software (FOSS) vs commercial software. A practical framework for risk assessment and communicating findings to management.
Andrew Kirch
Jun 15, 20255 min read
bottom of page


