Cash in the Cyber Sheets: Making Money From Being Secure & Compliant

If the phrase “information security policy document example” sounds like something only a compliance consultant could love… we’re here to change your mind. In this episode of Cash in the Cyber Sheets , we take a hands-on walkthrough of a real, downloadable information security policy document sample — the GOV domain sample from our Written Information Security Plan (WISP). This is the exact format...

In this final episode of our FTC Safeguards Rule Compliance Checklist series, Cash in the Cyber Sheets wraps up with a deep dive into one of the most overlooked—but absolutely essential—requirements of the Safeguards Rule: reporting to your board of directors or senior leadership under §314.4(i). If you’ve been following our series, you’ve already tackled everything from risk assessments to incide...

🎙️ FTC Safeguards Rule Series: Mastering Incident Response Checklist for Compliance, Episode [#]: When Cyber Hits the Fan In the world of cybersecurity, it's not if something goes wrong—it's when . That’s why this week’s episode of our FTC Safeguards Rule Checklist for Compliance series tackles one of the most critical, and often chaotic, elements of your security program: your incident...

Let’s face it—cybersecurity can feel like a never-ending treadmill powered by acronyms, compliance checklists, and the looming threat of the next data breach headline. But in this episode of Cash in the Cyber Sheets, we’re helping you catch your breath while staying compliant with the FTC’s Safeguards Rule. We’re continuing our FTC Safeguards Rule Checklist series, and today we’re focusing on what...

In this episode of Cash in the Cyber Sheets, we’re diving into one of the most overlooked (and risky) parts of FTC Safeguards Rule compliance—managing your service providers. From contract clauses to risk reviews, we’ll walk you through what the Rule actually requires, what “reasonable oversight” really means, and how to avoid getting blindsided by a third-party security failure. ✅ Learn how to s...

In this episode of Cash in the Cyber Sheets, we continue our series on the FTC Safeguards Rule checklist for compliance. Navigating compliance requirements can feel overwhelming, but we're here to break it down. This episode focuses on implementing robust information security policies, procedures, and training—key components to keeping your organization safe and compliant. We discuss how to d...

Welcome back to Cash In the Cyber Sheets . This episode is a continuation of our FTC Safeguards Rule Checklist for Compliance series, and we’re diving into a part of the Safeguards Rule that too many companies overlook until it’s too late: ongoing monitoring and testing. In this episode, we break down § 314.4(d) of the FTC Safeguards Rule—what it actually requires, what regulators expect, and how...

In this episode of Cash in the Cyber Sheets, we continue our FTC Safeguards Rule Checklist for Compliance series by diving deeper into the practical implementation of security controls. Last time, we outlined the critical components of a risk-based approach—now, we’re getting into the nitty-gritty of making those safeguards work effectively in your organization. With the FTC’s updated Safeguards R...

When people think of security controls, they usually picture firewalls, antivirus software, and multi-factor authentication. But truly protecting your business goes beyond just technical solutions—it requires a mix of administrative, physical, and technical controls working together. In this episode of Cash in the Cyber Sheets, we continue our deep dive into the FTC Safeguards Rule Checklist, focu...

Regulatory compliance just took another sharp turn. The Beneficial Ownership Information (BOI) reporting requirements under the Corporate Transparency Act (CTA) have been halted—at least for now. But what does that really mean for small businesses? In this episode of Cash in the Cyber Sheets, we unpack the latest legal twists, including the U.S. Treasury Department’s announcement that BOI reportin...

Compliance isn’t a checkbox—it’s a strategy. This week on Cash in the Cyber Sheets , we continue our FTC Safeguards Rule Checklist for Compliance series with a deep dive into how to design your Information Security Program (ISP) using a risk-based approach . The FTC Safeguards Rule requires businesses to identify, assess, and mitigate risks to customer information—but what does that actually look...

The FTC Safeguards Rule is here, and compliance isn’t optional. But where do you start? This week on Cash in the Cyber Sheets , we kick off our educational series diving deep into the FTC Safeguards Rule Checklist —one critical requirement at a time. In this episode, we tackle the first (and arguably most important) step: designating a Qualified Individual to oversee your Information Security Prog...

In this episode of Cash in the Cyber Sheets, we sit down with Jerry Seigel from JASB Management, a seasoned expert in management training, executive coaching, and personal development. We dive into some of the biggest challenges business owners face and uncover what truly holds them back from reaching their full potential. From leadership blind spots to self-imposed roadblocks, Jerry shares invalu...

In this episode of Cash in the Cyber Sheets, we take a deep dive into the foundational principles of information security—the CIA triad (Confidentiality, Integrity, Availability)—and explore why these are no longer sufficient to meet today’s challenges. Introducing CIAPS (Confidentiality, Integrity, Availability, Privacy, and Safety), we discuss why businesses should adopt this expanded framework...

The First Step in Information Security - Laying the Foundation for a Robust ISP What does it take to build an effective Information Security Program (ISP) and what are the first things you need to consider when developing your information security policies and procedures? In this episode, we explore the critical first steps, including securing leadership commitment, forming an Information Security...

In this episode of Cash in the Cyber Sheets , we continue our Dirty 13 series by tackling one of the most overlooked yet critical security gaps: MFA (Multi-Factor Authentication). While MFA is one of the strongest tools for securing accounts, its effectiveness plummets if it's not implemented or configured correctly. We’ll discuss the common pitfalls of MFA neglect and dive into best practice...

In this episode of Cash in the Cyber Sheets, we are joined by Bryan Barnhart from Infiltration Labs to discuss the critical importance of incident response planning. Together, we explore Bryan’s extensive experience in the field, dive into best practices for effective incident response, and examine evolving trends that are making incident response plans a mandatory part of organizational security...

From the 'Dirty 13' series, this episode tackles one of the most pervasive cybersecurity issues: poor password management. Join us as we explore the risks of sharing, reusing, and creating weak passwords—and share six simple steps to strengthen your security. Learn how to safeguard your accounts and reduce vulnerabilities. Don’t miss out on practical tips and expert insights!   Want quic...

Small businesses across the U.S. are caught in a whirlwind of confusion as the Corporate Transparency Act (CTA) faces ongoing legal battles. With reporting requirements for Beneficial Ownership Information (BOI) being halted, reinstated, and halted again, where does this leave business owners? In this episode, we unpack the legal tug-of-war over the CTA, explore what this means for small businesse...

In this solo episode of Cash in the Cyber Sheets, we dive deep into the reinstatement of Beneficial Ownership Information (BOI) reporting requirements under the Corporate Transparency Act (CTA). With recent legal twists, including a federal injunction and a subsequent court decision lifting it, businesses are facing a fresh wave of compliance obligations. We’ll walk you through: The history and im...

In this episode, James continues the “Dirty 13” series, tackling one of the most common and costly audit findings: poor data classification. Without a structured approach to labeling and protecting data, organizations are left vulnerable to security breaches, compliance failures, and wasted resources. Join James as he explores: Why data classification is a cornerstone of effective information secu...

In this episode of our Dirty 13 series, we dive into one of the most overlooked yet critical audit findings: poor backup practices. While backups are a cornerstone of data security and business continuity, many financial firms struggle to implement them effectively. From backups stored on the same systems they’re meant to protect to schedules that fail to meet regulatory retention requirements, we...

In this episode, we explore the recent court decision blocking enforcement of the Corporate Transparency Act’s reporting requirements. We break down what the CTA entails, why it faced legal challenges, and how this ruling impacts small businesses nationwide. Discover how this decision protects privacy, reduces regulatory burdens, and what it means for the future of small business compliance.

In this special Thanksgiving episode of Cache in the Cyber Sheets, we take a moment to step back from the usual technical deep dives and focus on the theme of gratitude. As cybersecurity professionals, we operate in a fast-paced, high-stakes environment, often facing immense pressure and increasing scrutiny. Yet, amidst the challenges, there's so much to appreciate. In this episode, we: 1. Re...

In this episode of Cash in the Cyber Sheets, we dive deeper into the Dirty 13—the most common findings from information security audits. From daisy-chained power strips to sticky-note passwords, we unpack how these seemingly simple issues pose serious risks. Building on our latest blog, we highlight overlooked physical security controls, legal hazards like unmaintained fire extinguishers, and the...