It is an open secret that cyberwar has been going on for quite some time. To most of us, it is an unseen war – carried out by nations and nation-state actors against other countries. Consequently, the “civilian” populations of the nations at war were – for the most part – unaffected. No more. Criminal […]
The New Cyberwar Part 1: Awakening a Sleeping Giant Read More »
The current cyber risk environment is hostile to organizations seeking to ensure information integrity of the confidential legal content their law firms hold and generate. Hackers see professional services firms such as law firms and CPAs as the number one industry to target with ransomware attacks. In fact, professional services firms experience more than twice
Cyber Risk Realities Part Two: Remediating Your Law Firms’ Security Gaps Read More »
Between April 1, 2020 and June 25, 2020, cybercriminals managed to steal personal health information (PHI) and personally identifiable information (PII) from over 36,000 patients at the University of Pittsburgh Medical Center (UPMC). The hackers did not, however, obtain this information by hacking into UPMC. In 2020, hackers managed to access the email of one
Cyber Risk Realities Part One: How To Evaluate Your Law Firms Read More »
Tips for Executives and Board Members Cybersecurity – protecting against attacks such as phishing or ransomware – ranks as a top challenge for most companies. And while the topic of managing information security has breached the boardroom doors (virtual as they may be these days), detailed discussions about the process of safeguarding organization data from
What Your CISO Wishes You Knew: Avoiding Information Security Mistakes Read More »
Leverages deep information security expertise to assist Department of Defense (DoD) contractors in preparing for CMMC certification STAMFORD, CT, February 10, 2021 — EXTEND Resources, a leading business and legal performance improvement company, announced today that the Cybersecurity Maturity Model Certification Accreditation Board (CMMC AB) has recognized the company as a Registered Provider Organization (RPO). EXTEND
EXTEND Resources Achieves CMMC Registered Provider Organization (RPO) Status Read More »
Your firm may not be privy to the legal secrets of the stars like Grubman Shire Meiselas & Sacks, which was hit by a REvil ransomware attack that threatened to release one terabyte of stolen celebrity client data. However, your attorneys do store and manage volumes of confidential data. And the data you store is just
According to BeyondTrust Vendor Vulnerability Index, 69% of IT professionals say their organization has definitely or possibly suffered a security breach resulting from vendor access in the last year. How can you assess your vendors’ security posture and train your team to protect your organization? Read the guest blog post from our friends at Orrios and
Vendor Risk: Avoid Cyber “Insecurity” Through Proactive Management Read More »
For those of us old enough to remember, the emergence of Information Security as a distinct and important function within the organization is very similar to the emergence of Information Technology departments years ago. Back then, as computing moved from mainframe to midrange to desktops, the organization needed to answer several questions to see how
Extend Resources was privileged to host a Cybersecurity Panel Discussion at the IG3 West conference in Newport Beach, California. It featured distinguished panelists and a lively discussion on the topic, “ISO 27701: Leveraging the New Data Privacy Standard for a Competitive Advantage.” While the big breaches make headlines, it is well known that a cyber-event
ISO 27701: Leveraging the New Data Privacy Standard for a Competitive Advantage Read More »
In this post, we suggest a practical opportunity to improve both your information security program and posture: communication and transparency. The advantage of a simple, understandable, and robust information security program extends beyond the InfoSec team. When the structure, goals, and ongoing results of your InfoSec program are well communicated and understood, the program itself