ControlScan Blog on Security and Compliance

Healthcare Data on Your Mobile Device

January 26, 2018 • Published by Kurt Osburn
Mobile Security • Security Awareness

This morning I read that Apple is letting you keep your medical records on your iPhone or Apple Watch and it got me thinking: How secure will this data be? How well will people work to protect their personal health data? I am a cybersecurity guy and I am a skeptic, so let me give you some facts and then some things to think about.

The WannaCry Ransomware Attack: 5 Things IT Pros Can Learn

May 21, 2017 • Published by Kurt Osburn
Endpoint Security • Ransomware • Security Awareness

Last week was a rough one in the IT world, as organizations around the globe scrambled to avoid being caught up in the WannaCry ransomware attack. If your organization was spared this round, it doesn’t mean you should pat yourself on the back and move on, business as usual. Fact is, most organizations aren’t at a state of security maturity that affords them this level of comfort.Read on for my list of 5 things any IT professional can learn from the WannaCry ransomware attack.

Social Engineering: Don’t Fall Victim to Tax Phishing!

March 31, 2017 • Published by Steve Robb
Endpoint Security • Security Awareness • Social Engineering

Historically speaking, tax season is prime for tax-themed scams and social engineering attacks. Specifically, the number of W-2 phishing scams have peaked recently. Attackers and social engineers begin by targeting finance and HR departments with spear phishing emails that spoof C-level executives and request employee W-2 forms.

Five Things You Can Do Now to Avoid Ransomware

March 29, 2017 • Published by Alex Knight
Endpoint Security • Malware • Security Awareness

The popularity of ransomware among cyber thieves continues to grow, not just in America but around the globe. Ransomware victims paid over a billion dollars in 2016 for decryption keys in the hopes that their data would be unlocked. Sometimes it was, sometimes it wasn’t. Read this blog post to learn the five things your business can do now to avoid becoming a victim of ransomware.

Reviewing Human Security Risk in Your Organization

December 1, 2016 • Published by Kurt Osburn
Access Control • Malware • Security Awareness

Employees are one of the most overlooked and most dangerous areas of security risk in an organization. The human element is susceptible to all types of attack and error, not to mention their ability to act with malicious intent.While human security risk can never be completely eliminated, it can be significantly reduced. Read this ControlScan blog post to learn how.

The Secret to Making Compliance Suck Less

June 6, 2016 • Published by Steve Robb
Firewalls • Network Security • Security Awareness

Have you been told your organization needs to comply with certain information privacy and/or security standards, such as PCI, HIPAA, etc.? If so, you may find yourself quickly overwhelmed with all the requirements for bringing people, processes and technology into “compliance.” Yes, compliance can suck.

Get Ahead of the Bad Guys with Penetration Testing

May 20, 2016 • Published by Steve Robb
Network Security • Physical Security • Security Awareness

Your Company is Under Attack Your company’s networks are being probed, prodded and attacked countless times every day. Unless you’re watching your logs, you’re likely unaware all this activity is taking place. Awareness, being a critical element of an effective defense, is important to cultivate and nurture. The Science Behind the “Pen Test” How do […]

Businesses Alerted to Ransomware Threat

April 4, 2016 • Published by Steve Robb
Malware • Ransomware • Security Awareness

Ransomware continues to make news headlines.In response to the growing ransomware threat, government agencies are issuing business alerts to raise awareness and offer guidance. Some of these recent alerts include:United States Computer Emergency Readiness Team (US-CERT) — “Ransomware and Recent Variants” AlertFederal Bureau of Investigation (FBI) — “Ransomware on the Rise” PodcastAnd here is a […]

IT Security in E-Commerce

March 30, 2016 • Published by Alex Knight
Security Awareness • Website Security

Do you REALLY know where you stand with compliance and security? Are you faced with the dilemma of digging more deeply into your IT security and compliance posture or simply assuming it’s handled because your providers say they’re PCI compliant? Many online retailers really don’t understand exactly where a provider’s coverage stops and where theirs starts…and […]

Preventing Incidental Disclosure and Other PHI Data Loss [Video]

February 26, 2016 • Published by Marc Punzirudu
Network Security • Physical Security • Security Awareness

Taking care to not disclose patient information is critical to the success of any healthcare organization. In this post and accompanying video clip, I discuss the security issues I commonly run across in the healthcare setting, as well as actionable tips for preventing their occurrence.

Social Engineering: How Organizational Attackers Gain Influence

November 25, 2015 • Published by Olivia Rose Jenkins
Security Awareness • Social Engineering

Social engineers play to people’s wants and needs, focusing on the mental triggers that can make a person do something. Learn what you can do to combat it.

Building Confidence in Your Security Posture

November 9, 2015 • Published by Marc Punzirudu
Network Security • Security Awareness • Vulnerability Management

Today’s unprecedented breach activity—and the high costs breached companies are paying as a result—are causing executive teams to sit up and take notice. Those responsible for organizational IT are finding themselves under increasing pressure to reinforce and report on a strong security posture to stakeholders.

Yes, Phishing is Still a Big Problem

October 23, 2015 • Published by ControlScan
Security Awareness • Social Engineering • Vulnerability Management

Phishing remains a top organizational security vulnerability because it involves the exploitation of human weakness. If you have humans at your workplace—and we all do!—then you are at risk.

ControlScan Blog

Posts Tagged: Security Awareness

Healthcare Data on Your Mobile Device

Read More

The WannaCry Ransomware Attack: 5 Things IT Pros Can Learn

Read More

Social Engineering: Don’t Fall Victim to Tax Phishing!

Read More

Five Things You Can Do Now to Avoid Ransomware

Read More

Reviewing Human Security Risk in Your Organization

Read More

The Secret to Making Compliance Suck Less

Read More

Get Ahead of the Bad Guys with Penetration Testing

Read More

Businesses Alerted to Ransomware Threat

Read More

IT Security in E-Commerce

Read More

Preventing Incidental Disclosure and Other PHI Data Loss [Video]

Read More

Social Engineering: How Organizational Attackers Gain Influence

Read More

Building Confidence in Your Security Posture

Read More

Yes, Phishing is Still a Big Problem

Read More