FoxPointe Security Hub

This article was written by James Farr, Senior Security Consultant.   The sky is falling and Artificial Intelligence (AI) is the reason, or so it has been said.  In reality, threats from phishing, malware, and data exfiltration have been around for years. The introduction of AI is just the…

This article was written by Paul Mayer, June Crawford, and Heather Brownson To celebrate this year’s Corporate Compliance & Ethics Week (11/5-11/11 2023), The Compliance Solutions team at FoxPointe Solutions, a division of The Bonadio Group, wanted to share a few important reminders…

This article was written by Jessica Ramirez, Senior Consultant at FoxPointe Solutions. Many organizations understand that SOC compliance has become an invaluable resource in providing assurance to your clients that you are doing everything possible to keep their data and systems safe in a world were…

The article was written by Emily Mosack- Security Analyst with FoxPointe Solutions at The Bonadio Group As organizations grow, utilizing third parties or outside sources becomes increasingly common.  Vendor Risk Management (VRM) is vital to keeping your organization safe from the rising risk of…

It comes as no surprise that the United States Department of Defense (DoD) is an increasingly more frequent target of complex cybersecurity attacks.  In an effort to combat this increase in likelihood of attacks, the DoD created a cybersecurity program, called the Cybersecurity Maturity Model…

This article was written by Brendan Horton, Security Analyst.   Cloud security encompasses the policies, technologies, and practices designed to protect cloud-based resources, including data, applications, and infrastructure, from a wide range of cyber threats.  Cloud computing has become…

Every October since 2004 marks National Cybersecurity Awareness Month. This month raises awareness about the importance of cybersecurity and how to protect yourself from cybercrime. Use multi-factor authentication wherever possible. Traditional authentication requires an ID and password,…

This article was written by Kate Gottermeier MPA, CFE, Senior Consultant at The Bonadio Group   It’s no surprise in this era of impressive technological advancement that fraudsters are cooking up more creative and elaborate schemes to grab funds. Accountants and investigators need up to…

In today's rapidly evolving digital landscape, the protection of sensitive information and the preservation of digital assets have become paramount, as has a full and accurate understanding of the controls in place.  As organizations navigate the intricate realm of cybersecurity, the role of a…

On July 26, 2023, the U.S. Securities and Exchange Commission (SEC) adopted rules regarding Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companies. The SEC has developed these rules to require registrants to disclose all material cybersecurity incidents…

This article was written by James Normand, Security Consultant at FoxPointe Solutions Cybercrime events cost affected organizations trillions of dollars annually and the monetary damage caused by these incidents is increasing year over year.  Many well-known organizations have acknowledged the…

This article was written by Kevin Testo, Industry Leader, Human Services, The Bonadio Group & Carl Cadregari, Executive Vice President, FoxPointe Solutions. By the simple nature of their operations, human service organizations possess abundant amounts of protected personal information in…

Today’s organizations face numerous cybersecurity challenges, and one of the most insidious threats is social engineering.  Cybersecurity is often associated with technical vulnerabilities and sophisticated defenses; however, social engineering leverages human reactions and psychology to…

How can an organization know if they are prepared to handle the many facets of a cybersecurity incident? We check the news all the time and see headlines of the latest data breach, or ransomware outbreak, but what if that happened to you? Would your team be able to identify and classify a security…

This article was written by Ryan Krawczyk Security Consultant I at FoxPointe Solutions What is Encryption? Encryption is often utilized to protect and hide user information from hackers. However, understanding what encryption is and how it works may be daunting. By looking at the first forms of…

Yesterday, the Board of Governors of the Federal Reserve System (Federal Reserve), the Federal Deposit Insurance Corporation (FDIC), and the Office of the Comptroller of the Currency (OCC, and together with the Federal Reserve and the FDIC, the Agencies), finalized previously proposed interagency…

This article was written by Ryan Krawczyk, Security Consultant I at FoxPointe Solutions Man-in-the-Middle Attack Phishing and malware attacks have become well known methods of cyber security attacks. But there is another,  less common, but equally dangerous method of attacking:…

This article was written by Christopher Salone, CISA, CCSFP, MBA As another year passes, more cybersecurity laws and regulations for financial institutions are proposed and or updated. Let’s recap the last twelve months and look at some of the most impactful cyber regulatory updates that,…

This article was written by Jessica Ramirez, Security Consultant at FoxPointe Solutions. In 2018, one of the most well-known side-channel attacks was discovered. The Spectre and Meltdown attack was noteworthy because of how the exploitation affected almost every modern computer processor using…