ControlScan Blog on Security and Compliance

Your Penetration Test Cost is About to Go Up

December 12, 2017 • Published by Duane Reeves
Compliance • Network Security • Vulnerability Management

Penetration tests have always had a higher price tag, but their overall cost to you is about to increase in 2018. Here’s what’s changing and how you can keep these costs contained in 2018 and beyond.

It’s Time to Redefine the IT Security Perimeter

June 5, 2017 • Published by Kurt Osburn
Cloud Security • Network Security • Security Assessments

As an IT security assessment professional, my job is to look at companies’ data security zones and their network perimeter compliance. I am looking at the normal stuff: Firewalls, servers and hardening standards as required by PCI, HIPAA, ISO 27001, etc.Without properly implemented and maintained security technologies in place, it’s impossible to protect your perimeter from compromise. But are you truly clear on what that perimeter is?

New Data Security Warning for FTP Use in Healthcare

April 19, 2017 • Published by Marc Punzirudu
Encryption • Network Security

FTP servers are essential for sharing files and data, but healthcare providers continue to utilize them in an insecure manner. Just last year, the ControlScan Security Consulting team saw this in action within a large healthcare organization. What happens when FTP goes wrong and how can you prevent your FTP server from leaking ePHI? Read on to find out.

Healthcare Data Breaches, Compliance and the HIT “Fear Factor”

January 13, 2017 • Published by Kim Carlos
Network Security • Risk Management • Security Assessments

It’s Friday the 13th and there’s a “fear factor” in health IT. If you don’t know where your HIT organization’s security and compliance weaknesses lie you’re likely feeling that fear—today and every day.But don’t try to fight off cyber criminals with monster spray! Read this blog post and learn how to arm your organization appropriately.

Got Third Party Risk? Ask the Right Questions.

November 15, 2016 • Published by Chris Bucolo
Internet of Things • Network Security • PCI Compliance

Third party relationships make your life easier in a multitude of ways, from streamlining processes, to providing additional human resources, to ensuring operational efficiency. Unfortunately, these relationships also introduce increased business risk related to data security and compliance.If one or more of your third party vendors doesn’t maintain a strong security posture and is consequently compromised, your business could very well end up sharing the burden of recovery. Read this ControlScan blog post for three steps you can take to lessen your business’s third party risk.

How to Make Multi-Factor Authentication Meaningful

October 7, 2016 • Published by Marc Punzirudu
Access Control • Network Security • Vulnerability Management

One of the easiest ways you can protect business accounts from unauthorized use is to incorporate multi-factor authentication, or MFA. But how do you use it in a way that has a meaningful impact on your organization’s security risk reduction efforts?

Cyber Defense and the Unknown Enemy

September 30, 2016 • Published by Steve Robb
Firewalls • Network Security

Cybersecurity Unknowns: It’s not the “who” but the “what.” When you stop and think about your business’s IT security, do you often wonder who the unnamed faces are behind the relentless barrage of cyber attacks out there? Everyone has an opinion: “Government target—must be a nation-state” or “Little guy—must be a disgruntled ex-employee.” Our assumptions, […]

Network Security Monitoring Goes Beyond the SIEM

September 22, 2016 • Published by Alex Knight
Cloud Security • Network Security

Congratulations! Your organization has implemented a SIEM platform for network security monitoring. However, don’t expect it to consume logs and machine data from your environment and effortlessly spit out actionable alarms. In other words, experienced human involvement is necessary to truly realize your SIEM’s benefits.

Take Event Log Monitoring Off the “Too Hard” Pile

July 12, 2016 • Published by Steve Robb
Internet of Things • Network Security • Point of Sale

Event log monitoring—or keeping an eye on your system logs for security and compliance purposes—can be a challenge. Here at ControlScan we see businesses and their IT teams struggling with its implementation and/or maintenance just about every day.

What It Really Takes to be Secure

June 13, 2016 • Published by Scott Dingman
Network Security • Vulnerability Management

What’s Your Data Security Approach? Growth and change is inherent to any healthy organization, but that positive change can have a negative impact on the security of your organization’s data. Have you considered what it really takes for your organization to be secure? If not, it’s probably time to ask some hard questions, the first […]

The Secret to Making Compliance Suck Less

June 6, 2016 • Published by Steve Robb
Firewalls • Network Security • Security Awareness

Have you been told your organization needs to comply with certain information privacy and/or security standards, such as PCI, HIPAA, etc.? If so, you may find yourself quickly overwhelmed with all the requirements for bringing people, processes and technology into “compliance.” Yes, compliance can suck.

The Moving Target of Healthcare Cybersecurity

June 3, 2016 • Published by Steve Robb
Internet of Things • Network Security • Vulnerability Management

2015 became known as “the year of the healthcare breach,” with healthcare hit hard and representing over 39 percent of known breach events. Healthcare organizations of every size are realizing they can no longer afford to ignore the risks they are exposed to on a daily basis. It’s critical that today’s healthcare organizations protect patient […]

How an MSSP Can Save You B-I-G

May 23, 2016 • Published by Alex Knight
Network Security

The ROI of the MSSP Many businesses considering the use of a Managed Security Service Provider (MSSP)—or any service provider for that matter—will ask themselves, “Can we do it for less?” While this discussion certainly makes sense, it’s also wise to consider whether leveraging the provider could actually save your organization money over the long […]

Get Ahead of the Bad Guys with Penetration Testing

May 20, 2016 • Published by Steve Robb
Network Security • Physical Security • Security Awareness

Your Company is Under Attack Your company’s networks are being probed, prodded and attacked countless times every day. Unless you’re watching your logs, you’re likely unaware all this activity is taking place. Awareness, being a critical element of an effective defense, is important to cultivate and nurture. The Science Behind the “Pen Test” How do […]

How Malware Can Sneak into Your Network

May 12, 2016 • Published by Steve Robb
Malware • Network Security • Social Engineering

Internet connectivity drives the way today’s businesses operate. From communicating via email, to processing electronic payment transactions, to managing employee payrolls, nearly everything we do touches the Internet in some way. Unfortunately, the same technology that serves as our business backbone also empowers criminal activity.

ControlScan Blog

Posts Tagged: Network Security

Your Penetration Test Cost is About to Go Up

Read More

It’s Time to Redefine the IT Security Perimeter

Read More

New Data Security Warning for FTP Use in Healthcare

Read More

Healthcare Data Breaches, Compliance and the HIT “Fear Factor”

Read More

Got Third Party Risk? Ask the Right Questions.

Read More

How to Make Multi-Factor Authentication Meaningful

Read More

Cyber Defense and the Unknown Enemy

Read More

Network Security Monitoring Goes Beyond the SIEM

Read More

Take Event Log Monitoring Off the “Too Hard” Pile

Read More

What It Really Takes to be Secure

Read More

The Secret to Making Compliance Suck Less

Read More

The Moving Target of Healthcare Cybersecurity

Read More

How an MSSP Can Save You B-I-G

Read More

Get Ahead of the Bad Guys with Penetration Testing

Read More

How Malware Can Sneak into Your Network

Read More