The Tier Trap: What the NIST CSF Teaches Us About Assessment Discipline - Doug Landoll
Related
Latest
Why I Don't Like Cybersecurity Awareness Month
If your security plan expires on November 1, it isn't a plan. It's a seasonal flavor.
You Don't Have To Say Everything, To Everyone All At Once
A product may have ten important features, but that does not mean every communication needs to explain all ten. The job of marketing is to establish quickly why the target audience should be interested in the product, and move them to the next stage.
AI Is The Hurricane Washing Away Cybersecurity's Trust Model
Also this week: HIPAA gets a cybersecurity shakeup, water utilities ditch email-and-phone-call defense, AI agents blow past identity controls, ransomware gets an AI upgrade, and Zero Trust is put to the test.
Shadow AI Isn’t Employee Rebellion. It’s an AI Governance and Leadership Problem
Employees aren’t necessarily ignoring AI governance when they use unapproved tools. Olivia Rose argues that conflicting messages, weak training and poor leadership are fueling shadow AI — and policies alone won’t fix it.