Posts about:
The Cybersecurity and Infrastructure Security Agency (CISA) published version 2.0 of their Cross-Sector Cybersecurity Performance Goals (CPGs). Let's take a look at the CPGs and what changed in this latest version.
On September 1, 2025, Texas Senate Bill 2610 (SB 2610) went into effect. This new law was designed to support small businesses by creating a legal "safe harbor" for those that proactively adopt strong cybersecurity practices. Here's what you need to know.
A cybersecurity control self-assessment is a process in which an organization benchmarks its own security practices against established standards. But what does that mean exactly?
"What is the difference between a risk assessment and a cybersecurity control self-assessment?"
The NIST Cybersecurity Framework (CSF) is a widely adopted, flexible framework that can help organizations of any size or complexity assess their cyber readiness. From large enterprises to small community banks, the NIST CSF's adaptable structure helps teams improve their cybersecurity posture without the pressure of rigid, one-size-fits-all standards.
The FFIEC Cybersecurity Assessment Tool (CAT) has been a go-to resource for financial institutions for nearly a decade. Since the FFIEC officially announced the retirement of the CAT, many financial institutions are left asking the same question: What do we do next?
On August 29, 2024, the FFIEC announced they would be sunsetting the Cybersecurity Assessment Tool (CAT) effective August 31, 2025. For the last ten years, the CAT has been a staple for many financial institutions' cybersecurity programs. As a result, many institutions now face the question:
The FFIEC Cybersecurity Assessment Tool (CAT) has a rich history. The purpose of this article is to provide a comprehensive timeline of the FFIEC CAT and how its implementation has changed over the years. Bookmark this blog and be sure to come back to see updates as the topic continues to evolve.
When you search the web for the "definition of risk," you will likely be greeted by a series of images which look something like this.
On August 29, 2024, the FFIEC published a statement announcing the sunset of their Cybersecurity Assessment Tool (CAT). The tool will be sunset on August 31, 2025. Please take careful consideration of this announcement as you read this article.