Showing 49–60 of 121 articles
Page 5 of 11
How to label data when you do not have a committee
A useful label changes how information is stored, shared, or retained. Keep the scheme small enough for people to apply and connect it to the tools they actually use.
Read the visual guide
How to write a security note a board can use
A board needs to understand the decision, its consequence, and the uncertainty around it. Replace a long list of tools with a concise account of risk, options, ownership, and evidence.
Read the visual guide
Questions to ask before you buy cyber insurance
An insurance policy needs to match your organization’s systems and likely losses. Resolve important definitions, exclusions, control requirements, and approved response arrangements before relying on cover.
Read the visual guide
How to run a short security exercise with eight people
A short exercise can reveal whether people know who decides, who contacts whom, and how recovery would begin. Use a realistic scenario and finish with a small, owned action list.
Read the visual guide
Who should have administrator rights on a work laptop
Administrator access changes what software can do to a device. Limit routine privilege while giving staff a clear, workable route for approved installation and support.
Read the visual guide
What you still have to secure when you use the cloud
A managed cloud service does not remove every security responsibility from your team. Map the provider’s role and your own configuration, identities, data, and recovery duties.
Read the visual guide
What a VPN does, and what it does not hide
A VPN protects a connection between its configured endpoints. Your traffic still reaches destinations, and the device, provider, and account choices remain part of the privacy picture.
Read the visual guide
How long a shared file link should stay open
A sharing link should serve a specific task and audience. Named recipients, suitable permissions, and an expiry date can reduce access that continues after the work is done.
Read the visual guide
How staff should report a suspicious email
People report more effectively when the route is easy to find and the response is clear. Ask for the message and what happened after it, without encouraging further interaction.
Read the visual guide
How to roll out a password manager to a small company
A team vault needs an ownership model as well as an app. Decide what is personal, what the organization owns, and how access will be removed when someone leaves.
Read the visual guide
How to remove access when someone leaves
A person’s access may extend beyond their main account. Use a planned sequence to protect information, close sessions and tokens, and transfer legitimate ownership without losing critical work.
Read the visual guide
What to decide before you buy a security monitoring tool
A monitoring product creates value only when the right data reaches it and someone can act on its findings. Start with concrete detection stories and a bounded pilot.
Read the visual guide