Cash in the Cyber Sheets: Making Money From Being Secure & Compliant

In this follow-up episode of Cash in the Cyber Sheets, we’re continuing our journey through the infamous “Dirty 13” – the top information security audit findings that keep CISOs up at night. This time, we’re focusing on a critical, often-overlooked aspect: backup restore testing. It’s easy for organizations to assume that backups will be there when they need them, but without regular testing, that...

Episode 26: Cash in the Cyber Sheets - "The Dirty 13: Unpacking MSP Misconceptions Relating toRisk, Security, and Compliance" In this insightful continuation of the "Dirty 13" series, Episode 26 dives deep into the frequent misunderstandings surrounding IT departments' responsibilities—especially outsourced IT providers like Managed Service Providers (MSPs)—in managing ris...

Episode 25: Mastering the ISO 27001 Audit - Key Takeaways from Our Latest Audits In this episode of Cash in the Cyber Sheets, we dive into the recent ISO 27001 audits we performed and share valuable insights from the process. Whether you’re preparing for your first audit or looking to improve your audit performance, this episode is packed with actionable tips to help you succeed.

In this episode of Cash in the Cyber Sheets, we continue our deep dive into the "Dirty 13"—the most common audit findings we encounter when auditing financial firms, with a special focus on CPAs. Episode 24 is all about Incident Response Management and the recurring issues many firms face. From inadequate planning to the failure to properly document and test incident responses, we discus...

In Episode 23 of Cash in the Cyber Sheets, we continue our deep dive into the Dirty 13, the most common audit findings that plague financial firms. This week, we’re focusing on supplier management – a critical area where many firms fall short. We discuss how inadequate identification of risks associated with third-party suppliers and failure to meet regulatory requirements can expose organizations...

Cash in the Cyber Sheets - Episode 22: "Audit, Logging, and Monitoring: The Overlooked Essentials" In this episode of Cash in the Cyber Sheets, we continue our deep dive into the "Dirty 13" – the top audit findings that consistently surface during financial firm audits. This week, we take a closer look at one of the most overlooked and critical areas: audit, logging, and monito...

In Episode 21 of "Cash in the Cyber Sheets," we continue the "Dirty 13" series by diving into inadequate employee training. This week, we explore strategies for delivering effective training that not only enhances security but also boosts employees' sales and leadership skills. Learn how investing in employee development can create a more secure firm while delivering multi...

Episode 20: The Dirty 13 – Inadequate Risk Management in CPA Information Security Programs Continuing from last week’s deep dive into the most common mistakes in CPA information security programs, we explore one of the most critical: Inadequate Risk Management. Many CPAs fail to properly identify the specific risks their business faces, resulting in an incomplete risk assessment process. Without a...

In this episode, we reveal the 13 most common information security program mistakes, dubbed the "Dirty 13," that financial firms and CPAs face during audits. These pitfalls can lead to significant security vulnerabilities, compliance issues, and costly errors. We deep dive into one of these issues to explore its impact in detail, offering practical advice on how to avoid it. In future ep...

In this episode of Cash in the Cyber Sheets, we dive deep into the world of Continuous Data Protection (CDP). What exactly is CDP, and why is it becoming a must-have for organizations looking to safeguard their data? We'll break down the pros and cons of this powerful backup solution, offering insights into how it works, its benefits, and potential challenges. Most importantly, we'll sha...

In this episode of Cash in the Cyber Sheets, we dive into the world of data backup strategies. From full, incremental, and differential backups to hybrid approaches, we explore how these methods safeguard your business’s most valuable data. Learn about the pros and cons of each backup type, discover key strategies like Grandfather-Father-Son (GFS) and the Tower of Hanoi, and understand how to impl...

Episode 16: The 11 Critical Steps Most Businesses Overlook in Data Backups In this episode of Cash in the Cyber Sheets, we dive deep into the often-overlooked steps that can make or break your data backup strategy. While many businesses believe they have solid backup procedures in place, there are 11 crucial steps that frequently get missed, leaving them vulnerable to data loss and compliance risk...

In this episode of "Cash in the Cyber Sheets," we dive deep into the world of Business Continuity Plan (BCP) testing. Disruptions, whether natural or man-made, can strike without warning, and your ability to swiftly recover could be the difference between resilience and disaster. But how can you be sure that your BCP will work when it’s needed most? Join us as we explore the five key typ...

Episode 14: Building Your Business Continuity Plan In this episode of Cash in the Cyber Sheets, we dive into the essentials of creating a robust Business Continuity Plan (BCP) to ensure your organization can withstand and recover from disruptions. Whether it's natural disasters, cyberattacks, or unexpected events, a well-structured business continuity plan is crucial for maintaining critical...

In this episode of Cash in the Cyber Sheets, host James delves into the critical yet often overlooked components of a successful business continuity plan. As organizations strive to safeguard their operations against unexpected disruptions, many miss key elements that can make the difference between survival and failure. James offers a unique perspective, highlighting innovative strategies and ins...

In this episode of Cash in the Cyber Sheets, host James Bowers II explores the complex layers of liability stemming from the recent CrowdStrike Global Outage by drawing parallels to the SolarWinds 2023 breach. We dissect the ramifications of these major cybersecurity incidents, focusing on how companies like CrowdStrike could be impacted and the potential legal and financial liabilities their user...

In this episode of Cash in the Cyber Sheets, host James Bowers II sits down with Bryan Barnhart from Infiltration Labs for a deep dive into the world of encryption, credit security, and the unexpected challenges of online food orders. Join us as Bryan shares his expertise on the critical role encryption plays in safeguarding sensitive information and maintaining the integrity of financial transact...

In this episode of "Cash in the Cyber Sheets," host James Bowers II dives deep into the world of security incident response planning. Discover the essential elements that every incident response plan must include to effectively manage and mitigate security incidents. James highlights critical areas that many businesses often overlook, ensuring you have a comprehensive understanding of ho...

Welcome to Episode 9 of 'Cash in the Cyber Sheets,' where we dive deep into the world of Multi-Factor Authentication (MFA). In this episode, we break down what MFA is and why it's a cornerstone of modern cybersecurity. We'll explore the various methods of MFA, discuss its critical importance in protecting your organization, and examine the potential vulnerabilities and ways MFA...

Welcome to Episode 8 of 'Cash in the Cyber Sheets,' where we delve into the critical components of maintaining compliance and security in your organization's IT environment. In this episode, we explore the '10 Steps for a Compliant User Access & Logging Audit,' a comprehensive guide to ensure your systems meet regulatory requirements and avoid costly data incidents. Jo...

In this essential episode of Cash in the Cyber Sheets, we delve into the recent data breach at CDK Global, a leading provider of IT and digital marketing solutions to the automotive industry. Discover how this significant breach unfolded, the immediate impacts on the company and its clients, and the broader implications for businesses worldwide. We'll explore how this incident highlights the...

In this critical episode of Cash in the Cyber Sheets, we dive deep into the latest legislative developments that could potentially dismantle the effectiveness of End-to-End Encryption (E2EE). Join us as we explore the implications of these changes on privacy and security, and how they may inadvertently compromise the very core of secure digital communication. But it's not all doom and gloom....

In this eye-opening episode of Cash in the Cyber Sheets, we delve into the insidious world of wire fraud. Whether you're a business owner, a financial professional, or just an individual looking to safeguard your assets, understanding how wire fraud happens and who is liable is crucial. Join us as we unravel the complexities of wire fraud, featuring expert insights and real-world examples.

Risk management and risk assessments are typically time consuming and confusing but we explore our new approach which aims to greatly simplify the process without sacrificing any insight or benefits.

We review the different business compliance requirements and how they are stacking against small businesses making it more and more difficult just to do business.