Insights

March 3, 2021 | Cyber Security

As the roll out of COVID-19 vaccines picks up steam, business leaders should begin considering remobilization and the physical return of employees to the workplace. Before opening your doors, however, it is important to consider where your security environment stands.

Before the pandemic lockdown, many businesses operated with robust physical security programs and cyber hardening measures that placed an emphasis on maintaining the safety and security of their people, and a focus on preventing outsider threats from penetrating critical network … Read More

January 27, 2021 | Cyber Security Risk + Compliance

Deciding whether or not to pay off a criminal that has crippled your organization’s operations with ransomware is a painful undertaking.  It is a crucial decision that must be made at a time often described as “pure chaos.” Management, attorneys, IT staff, incident response/digital forensics experts, the communications team, insurance companies and others all take part in addressing the crisis with an eye toward restoring operations to normal as quickly as possible.  Time is of the essence.  When technical recovery … Read More

August 13, 2019 | Cyber Security

From private schools to K-12 school districts and from learning centers to universities, cyber attackers have expanded their targets to include the numerous entities that make up the education sector.  Their ultimate goals remain the same: obtain sensitive information, hold these institutions (staff, faculty, students) as ransomware hostages and/or steal financial records to resell on the black market.

It is not surprising that cyber attackers have chosen to feed on this sector. This target is typically viewed by cyber attackers … Read More

June 19, 2018 | Cyber Security

February 28, 2018 | Cyber Security Security Consulting

This February marks an important milestone in the evolution of cybersecurity regulation: entities regulated by the New York State Department of Financial Services (DFS) were required to submit their first annual certification of compliance with New York’s, first in the nation, cybersecurity regulation by February 15, 2018. This occasion provides a good opportunity to reflect upon the emerging trends in the world of cybersecurity governance.

August 24, 2017 | Cyber Security

Managing risk at the enterprise level involves close collaboration of the physical and information security functions, responsibilities and missions. This encompasses enhanced communications and information sharing between the information technology, operational technology and physical security groups. The combined joint security operations center (JSOC) can be the most effective way to manage security risks across the enterprise.

The following article, Multi-Vector Threats and the  Argument for Greater Convergence, written in conjunction with our strategic partners at Revolutionary Security, was recently … Read More

June 5, 2017 | Cyber Security Financial Crime Consulting

Wannacry is the latest herald of cyber-Armageddon. Countless computers all over the world were rendered useless. Data became encrypted and unavailable. Pay the ransom or kiss your data goodbye forever was the threat.

Wannacry spread around the world very rapidly, affecting service companies, manufacturers, national healthcare systems, governmental agencies and individuals. By one report, the perpetrators of Wannacry have earned about $50,000 through their ransom demands. This is not a huge payoff, but it may be enough to provide … Read More

May 24, 2017 | Cyber Security

Applying some basic legal skills can be really helpful for law firms as they move forward with their cyber security priorities. Lawyers tackle new matters all the time and no two cases are alike. There are factual issues to master, legal research to conduct and a plan to prepare to guide the transaction of litigation. Making assumptions, even when based on past experience, can be a serious error for a lawyer. A fresh case requires a fresh mind.

That same … Read More

May 12, 2017 | Cyber Security

From the Panama Papers to the recent indictment of three Chinese nationals for insider trading using stolen M&A information, law firms have become a target for information theft.  In many cases, the targeted law firm represents clients that have made significant investments in their own cyber security, and adversaries recognize that their attorney’s networks are often a much softer target.  In addition to the cyber attacks in the news headlines, there are an increasing number of breaches occurring that are … Read More

May 4, 2016 | Cyber Security

One of antiquity’s most enduring legends is that of the Trojan Horse. The Greeks were unable to breach the walls of Troy after ten years of warfare and had apparently left the outskirts of the city.  Instead of their implacable enemy, the Trojans found outside their wall a giant wooden horse which they understood to be a tribute to their stout defenses left behind by the gods or the Greeks. The horse, as we all know, was actually filled with … Read More