Penetration Testing Steps for a Secure Business

by Sarah Harvey / December 21, 2023

How to Secure Your Business Through Penetration Testing Being prepared for cyber attacks and having the ability to fix the weaknesses within a system helps organizations avoid the consequences of data breaches. Not only are these breaches costly due to the accumulation of legal fees, IT remediation, and customer protection programs, but customer loyalty can be lost following a breach. By being aware and prepared for attacks before they happen,…

SOC 2 Compliance: The 5 Trust Services Criteria

by Sarah Harvey / January 25, 2023

What are the Trust Services Criteria? Once your organization has decided that you are ready to pursue a SOC 2 attestation, the first thing you have to decide is which of the five Trust Services Criteria (TSP) you want to include in your SOC 2 audit report. Becoming familiar with the categories of security, availability, confidentiality, processing integrity, and privacy should be one of the first steps in your scoping process.…

Horror Stories: Timehop’s MFA Mishap

by Sarah Harvey / June 14, 2023

On July 4, 2018, Timehop, a self-proclaimed “daily nostalgia product,” discovered a data breach where up to 21 million users were impacted. Timehop is a memory-sharing app, enabling users to distribute posts from the past; Timehop connects to users’ social networks and photo storage apps – Twitter, Instagram, Facebook, Dropbox, Google Photos, iCloud, etc. For them, this breach was a nightmare because of the nature of their services. When users…

Beginner’s Guide to PCI Compliance

by Sarah Harvey / February 23, 2024

Major credit card companies, including Visa, MasterCard, American Express, Discover, and JCB, acted against the increased number of data security breaches by coming together to create the PCI Security Standards Council. This Council developed a security standard for merchants that process credit card data, known as the Payment Card Industry Data Security Standard (PCI DSS). The PCI DSS encourages and enhances cardholder data security by providing globally-recognized data security measures.…

Horror Stories: Facebook Fallout

by Sarah Harvey / June 14, 2023

In late September, Facebook gave a new security update, outlining a breach that has impacted 50 million users – Facebook’s largest breach ever. The social network has been under intense scrutiny this year after the Cambridge Analytica scandal and has been redirecting their security team since the departure of their chief security officer, Alex Stamos. With the midterm elections coming up, this massive breach couldn’t have come at a worse…