Simple Salt

We've seen the staggering numbers from Equifax and Target, but how much does a data breach cost for a smaller business? How much should they care? We answer these questions and more in today's article about personal information. simple-salt.com/post/valuing-s…

How worried should you be worried about the #theft of #medical records? How hard will #HIPAA come down on you? Today we describe the likely value of such information to criminals and previous attempts to value it. Sneak peek: Not much. simple-salt.com/post/valuing-s…

Do your customers log into your platform? How valuable is the #password they've given you? What could happen if someone #steals it from you? Learn more: simple-salt.com/post/valuing-s…

Traditional fraud control will not stop you from getting nailed. #saltysundays

Why is processing credit card payments so onerous? What's the big deal? Learn about the credit card company's dilemma and why they think you should fix it. simple-salt.com/post/handling-…

Remember, #security people: the #1 reason people disregard advice "for their protection" is because it makes their life harder than the protection is worth. Make it easy and think through all the scenarios first. It's not about you.

Do you have secrets? Do you know others' secrets? Do you feel confident in how you protect them? What would happen if someone stole them? Good news: it's easier than it looks. Join us for a new series on handling sensitive information. simple-salt.com/post/secrets-i…

Did you know it takes $2.50 a month to send out millions of emails impersonating you and your business? Did you know it takes only an hour to prevent that completely? simple-salt.com/post/stopping-…

Did you know that your business has a profile and credit history? Just like personal credit, people can impersonate you to defraud other businesses. You lose both ways: either pay or spend the time to fix someone else’s decision to fall for a scam. simple-salt.com/post/stopping-…

Do you run your business through mail and the phone? You may still be susceptible to internet fraud. Read more: simple-salt.com/post/preventin…

How do you prevent #fraud with key partners? How do you help them from getting #scammed without overstepping your relationship? How do you make that cheap and #scalable? It's easier than it sounds. simple-salt.com/post/fraud-pre…

How important is contract review for #security? Which parts are important? Do you really need a lawyer to do it? Learn more in our recent post! #fraudprevention, #Easy simple-salt.com/post/fraud-pre…

How important are #contracts to #security? What should you look for? Can you do a good job without a lawyer? #fraudprevention, #easy simple-salt.com/post/fraud-pre…

@AjYawn Truth. Been wishing for a cofounder for 3 years now. I think it's never gonna happen.

@Clint326 @LunchClub It was great, Clint! Looking forward to seeing what we build together.

I just had a great meeting with Dylan Evans from @SimpleSaltSec on this afternoon! We both agree on the importance of process in cybersecurity. Thank you, @LunchClub, for giving us the opportunity for us to meet! Check out LunchClub at lunchclub.com/?invite_code=c…

"don't bring me problems, bring me solutions" is a great way to not learn about the most difficult problems

The next Getting Started in Security class starts May 16. It is still Pay What You Can. We do this to get as many people into the field as we possibly can. It is about opening doors. It is about breaking down gates. antisyphontraining.com/getting-starte…

@strandjs Truth. The question is: How can we commoditize breaking/assurance/measuring? Good pentests start at 50k. What's the best solution for people who have 2k and want something credible and meaningful?

So happy to see so many people on the blueish side of security. However, we need red too. We need to keep breaking everything. Things are only fragile till they break. Only then do they get stronger.

@NoraDotCodes I've had pretty good luck with the bundled IdP that comes with O365. Mcas and intune let you saml or oidc, with pretty granular auth enforcement. Hit me up if you want to see.

@DruRly Which one is less important than how to use it. We made a guide to easiest way to manage passwords: youtu.be/g6Q9KX7IH0A

Looking for a password manager. Any suggestions?