Validating Fixes 30 Days After Your Pen Test – Our Retesting Policy

by Sarah Harvey / June 14, 2023

Every penetration testing firm has unique processes for conducting penetration tests. While there are standards that influence penetration tests, like the OWASP Top Ten, the Open Source Security Testing Methodology Manual (OSSTMM), and the Penetration Testing Execution Standard (PTES), the truth is not all penetration tests are created equally. When hiring a firm to conduct your penetration tests, having a thorough understanding of their methodologies is imperative. How will the…

What to Include in Your Employee Handbook

by Sarah Harvey / June 14, 2023

What’s the purpose of an employee handbook? Why are you required to have a detailed employee handbook to be compliant with information security standards? What should you include in your employee handbook to meet these standards? These are all great questions you might have when you’re preparing for an audit. Let’s start with a quick explanation of the purpose of an employee handbook and how a well-designed handbook can add…

Most Common Privacy Gaps

by Sarah Harvey / October 4, 2023

As more and more governing bodies are implementing data privacy laws, it’s becoming even more important for organizations to mitigate gaps in their systems before they are met with a data breach and hefty fines. We can see the effects laws GDPR and CCPA have had on the privacy and security landscape already. Take it from British Airways’ experience – the airline was fined $228 million for leaking 500,000 customers’…

Think Like a Hacker: How Could Your Mobile Apps Be Compromised?

by Sarah Harvey / February 20, 2023

The Pros and Cons of Mobile Applications When you provide mobile apps to customers, they’re expecting them to be secure. They’ve entrusted you with their sensitive data by using your product, and it’s up to you to protect that data. Businesses today must do everything possible to mitigate the advancing threats facing mobile apps, both internally and externally. How sure are you that your organization is doing this? In this…

Biggest Breaches of 2019

by Sarah Harvey / December 15, 2022

What Were the Biggest Data Breaches of 2019? The data breaches of 2019 were enormous, with some of the biggest data breaches impacting over a billion people collectively. And, like in year’s past, hackers did not discriminate based on industry, size, or location of companies and continued to use advanced attacks to compromise user data - anything from generic, personal data to payment card information and protected health information. Let’s…