Active Directory Passwords – Who is Right?

This was originally posted as an INSIGHT for Wolf & Company, P.C. here. Background Cybersecurity breaches are making the news on what seems like a weekly basis. Many of these incidents involve unauthorized access to systems and data as a result of compromised user credentials. These credentials are compromised through improper storage, weak password criteria, and … Continue reading Active Directory Passwords – Who is Right? →

GSEC vs. CISSP

This is a follow-up post to my CISSP Success Story post - this time taking a look at my first GIAC experience - the GIAC Security Essentials Certification (GSEC).

DerbyCon 7.0 Legacy Roundup

This was originally posted as an INSIGHT for Wolf & Company, P.C. here. What is DerbyCon? In recent Banking Technology Connections articles such as How Safe is Your Active Directory?, our Information Technology (IT) Assurance department discussed key takeaways from this year’s DEF CON, which is one of the largest hacker conventions in the world. DEF CON … Continue reading DerbyCon 7.0 Legacy Roundup →

What to look for in a QSA

This was originally posted as an INSIGHT for Wolf & Company, P.C. here. If your organization is new to PCI compliance, you are probably wondering how you should choose which QSA to work with. This decision is not one to take lightly, as there are nearly four hundred QSA Companies (QSAC), with an estimated one thousand … Continue reading What to look for in a QSA →

Sean Runs Boston

"2018 Dana-Farber Marathon Challenge – you’re on the team!" That is the subject line I have been waiting to see hit my inbox for two years. Not only do I get a chance to run this historic race, but I get to do so while giving back to an excellent cause. The Cause The Dana-Farber … Continue reading Sean Runs Boston →