Data security is a critical part of the audit risk assessment. If your financial statements are audited, your audit team will tailor their procedures to answer critical questions about cyber risks and the effectiveness of your internal controls. While conducting fieldwork, they’ll assess how your practices measure up and whether your company has weaknesses that … Continued
The short answer is “yes, you should”. It is your responsibility to vet all vendors before you provide access to your data. Last month, confidential documents belonging to the law firm, Jones Day, were posted on a public website by a hacking group. The documents were accessed when the law firm’s file transfer vendor, Accellion, … Continued
Building A Framework-Based Managed Security Program in Your Business Cybersecurity has become an even hotter topic over the last 12 months as businesses have accelerated their plans to operate in virtual and remote environments. Despite the growth of sophisticated techniques used by cyber criminals, we know that 98% of data breaches can be prevented by … Continued
Every business owner is aware of the threat posed by cybercriminals. If a hacker were to gain access to the sensitive data about your business, customers or employees, the damage to your reputation and profitability could be severe. You’re also probably aware of the specific danger of “phishing.” This is when a fraudster sends a … Continued
Whether it’s a smart phone, tablet or laptop, mobile devices have become the constant companions of today’s employees. And this relationship has only been further cemented by the COVID-19 pandemic, which has thousands working from home or other remote locations. From a productivity standpoint, this is a good thing. So many tasks that once kept … Continued
The US Small Business Administration (SBA) has been offering loans to businesses and other groups affected by the COVID-19 crisis. Cybercriminals have taken advantage of the outbreak and the new processes set up by the SBA to set up malware to spoof organizations applying for financial relief. At least three different categories of phishing emails … Continued
California State University – Northridge (CSUN) is a victim of a data breach which took place between February and May this year. A cyber attack on their software provider, Blackbaud, has resulted in the theft of customer data from the university. Blackbaud provides cloud hosting and customer management solutions (CMS) for CSUN and is based … Continued
