February 5, 2022
- Problems with and limitations in many assessments
- Many assessment report results from automated tools can be incomplete, incorrect, or pretzel talk
- What realistic expectations should you have from a paid and unpaid assessment
- There are certain security baselines simply so your organization can be insurable.
- There are certain security baselines in order for your organization to be serviceable by an IT service provider.
- Small organizations can easily find themselves spending $50,000 that they don't have in order to recover from a cybersecurity event.
- It's not just about money. Are you sure that you can get access to all the personnel in order to get your organization back up and running in the designated time?
- You need to mitigate risk proactively in order to make sure the cybersecurity event never happens.
- Do not evaluate your risk based upon what you think the value of your data is. Evaluate your risk based upon whether or not you want to stay in business.
