Notes from the Field: Center for Internet Security Control 09 – Email and Web Browser Protections 

by Greg Halpin / September 13, 2023

A small SaaS (Software as a Service) client I worked with recently mentioned an information security incident they experienced a year ago in which the email account of one of their sales representatives was compromised via a phishing attack. The attackers gained the credentials of the sales rep, obtained email addresses of customers, and sent emails to the company's customers with false offers to buy discounted services. The attackers had scraped…

Data Security for Generative AI: A Webinar Recap

by Tori Thurmond / October 5, 2023

Can AI and security coexist?   This month, KirkpatrickPrice joined forces with Walter Haydock, the Founder and CEO of StackAware, to have a conversation about that question.  What’s the deal with AI? There’s no denying that AI is a hot topic right now. You’ve probably heard about some really great things AI tools can do and maybe a few risks or concerns as well.  Artificial Intelligence has been around for a…

The 7 Steps of Incident Response 

by Bob Welch / July 28, 2023

In today’s ever evolving threat landscape, you must have a plan in place for how your organization will face threats and respond to them when an attack occurs. Unfortunately, incidents are a matter of when not if, so having a response plan is the best way to guarantee your organization survives after an incident occurs.  When an incident occurs, it may feel like you have a million steps to take…

Notes from the Field: Center for Internet Security Control 08 – Audit Log Management 

by Greg Halpin / August 16, 2023

During a recent SOC 2 Gap Assessment with a medical billing company, the IT Manager and I discussed the logging and alerting tools the organization had in place. He explained that the company uses the default logging settings and capabilities of the operating systems, applications, and network gear. However, they didn't configure any alerts. The IT team reviewed logs when there was a problem but did not conduct regular reviews.…

What Are the Penetration Testing Steps?

by Tori Thurmond / January 8, 2024

If your organization or technology hasn’t gone through a penetration test or security testing before, you may not know what to expect. Even if you have, maybe you’re wondering what KirkpatrickPrice’s methodology and stages of penetration testing are. Once you know what to expect, you can reap the benefits of the more in-depth process with additional analysis by certified ethical hackers. At KirkpatrickPrice, there are seven stages of penetration testing.…