AWSCIO Briefings
CIO Brief: Third-Party Cloud Risk — Writing Security Into Vendor Contracts
The short version: In 2017, a Verizon vendor exposed customer records — including account PINs used for phone support — in a cloud storage folder anyone...
Insights
CIO Briefings
Articles in CIO Briefings.
Microsoft 365CIO Briefings
CIO Brief: E3 or E5? Making the Microsoft 365 Security Licensing Decision
The short version: Microsoft 365 E3 includes solid security basics. E5 adds advanced threat protection, risk-based identity controls and stronger compliance...
AzureCIO Briefings
CIO Brief: NotPetya and the True Cost of Flat Networks and Shared Admin Accounts
The short version: NotPetya, in 2017, entered companies through a trusted software update and then spread using administrator passwords stolen from one...
AWSCIO Briefings
CIO Brief: Your Vendors' Cloud Buckets Are Your Data Exposure
The short version: In 2017, a data company working for the Republican National Committee left personal details on 198 million voters in an unprotected cloud...
AzureCIO Briefings
CIO Brief: Why Patch Management Is a Board-Level Issue After WannaCry
The short version: In 2017, WannaCry ransomware infected hundreds of thousands of computers worldwide using a Windows flaw that had been patched two months...
Multi-CloudCIO Briefings
CIO Brief: Managing Risk When a Core Internet Provider Has a Bug
The short version: In 2017, a bug at Cloudflare, a major internet provider, leaked private data from customer websites, including login sessions. The...
AWSCIO Briefings
CIO Brief: Availability Is Security — Building Outage Risk Into Your Cloud Strategy
The short version: In 2017, a mistyped command at Amazon took down a core storage service in one region for about four hours, and thousands of websites went...
AWSCIO Briefings
CIO Brief: Shield Standard vs. Advanced — Is Paid DDoS Protection Worth It?
The short version: Every AWS customer gets Shield Standard free, and it handles the most common DDoS attacks. Shield Advanced is a paid upgrade that adds...
Entra ID & IdentityCIO Briefings
CIO Brief: Credential Breaches at Other Companies Are Your Problem Too
The short version: When a big company like Yahoo loses billions of passwords, your company is also at risk. Your employees reuse passwords, and attackers...
Multi-CloudCIO Briefings
CIO Brief: What the Dyn Outage Taught Us About Single Points of Failure in the Cloud
The short version: In October 2016, an attack on one DNS company, Dyn, made major websites unreachable for hours. The websites were fine. A supplier they...