Showing 1–4 of 4 articles
Ransomware is a decision for leadership, not only for IT
A ransomware incident can force decisions about operations, disclosure, external support, and recovery priorities. Establish the authority and contact routes before the team is under pressure.
Read the visual guide
How to judge a supplier without a giant spreadsheet
A supplier with little stored data can still have powerful access or support a critical workflow. Match your review to the service boundary, permissions, and consequences of disruption.
Read the visual guide
How to write a security note a board can use
A board needs to understand the decision, its consequence, and the uncertainty around it. Replace a long list of tools with a concise account of risk, options, ownership, and evidence.
Read the visual guide
Questions to ask before you buy cyber insurance
An insurance policy needs to match your organization’s systems and likely losses. Resolve important definitions, exclusions, control requirements, and approved response arrangements before relying on cover.
Read the visual guide