Steven is a Principal Consultant at CrowdStrike where he leads security assessments for organizations ranging from small startups to large, global organizations. He previously led IT and cybersecurity programs in the public sector.
If ransomware locks up your systems and disrupts operations, you might consider paying the ransom. It’s a difficult choice with legal, ethical, and operational implications. You should consider your approach beforehand, when you can weigh the risks without the chaos of a crisis or pressure from employees, partners, customers,
If your organization suffered a ransomware attack tomorrow, how long would it take to get back to normal? Most organizations set ambitious recovery targets for ransomware incidents, despite limited confidence in their ability to meet them. A 2024 survey commissioned by Cohesity highlights this gap between expectations and reality. Most
Even when security programs appear functional on the surface, there are often deeper warning signs that something isn’t working as it should. Sometimes they show up as organizational friction, unclear ownership, or decisions made without proper visibility or accountability. Left unchecked, these issues weaken the program over time and
There’s growing pressure on corporate boards to improve their oversight of cybersecurity, but that doesn’t mean every board needs a former CISO in the room. Boards don’t need technical expertise; they need to engage with IT and security leaders to drive conversations about cybersecurity risks, roadmaps, and
Cybersecurity
If you're on a board or leading a company, you probably already know that cybersecurity risk can't be ignored. But understanding who manages that risk and how well they're positioned to succeed is a different story. Most board members and executives have a high-level