Notes from the Field of Information Security

While working with clients I will review their latest penetration test report. Penetration tests are a great way to obtain independent and u...

The client I was working with had a SaaS application hosted in AWS. When we discussed how they would respond if their data were compromised,...

Working recently with a small Software as a Services (SaaS) company, it quickly became clear they didn't have much in place by way of se...

The client I was conducting a gap analysis for had an incredibly detailed Service Provider Management Policy. It required the company compli...

Security awareness training is one of the areas in which I see companies doing either very well or they don't do at all. It's unfort...

“How would you know if your network or systems have been compromised?” That’s the question I often ask clients when discussing their network...

A company I audited last fall had an insecure design for its Amazon Web Services architecture, which hosted a financial web application. The...