Board vs. Executive Responsibilities for Organizational Security
Boards own what security risks matter and what level is acceptable. Executives own how those risks are managed. Getting that line right is a governance question with real legal consequences.
Read article →
When the Insider Threat Starts With a Resume
How North Korean remote workers turn legitimate employment into a security vulnerability — and what to verify at candidate vetting, interview, onboarding and after hire.
Read article →
Recognizing Elicitation: How Ordinary Conversations Can Be Used to Collect Sensitive Information
Elicitation works because it feels like networking. Recognizing it is not about spotting a suspicious person — it is about spotting a suspicious conversation pattern.
Read article →
The People Outside the Perimeter: The Hidden Risks Created by Trusted Outsiders
The modern perimeter is not defined by who works for you, but by who you allow to affect your organization. Four case studies in access, influence, dependence and trust.
Read article →