FoxPointe Security Hub

Risk Management

Subscribe to the blog

Receive articles and resources from the information risk management experts at FoxPointe.

For many local government leaders, artificial intelligence still feels like something on the horizon. In reality, it has already arrived. AI is no longer limited to standalone tools like ChatGPT. It’s increasingly embedded in the software municipal employees use every day, including email platforms, office suites, meeting transcription tools, design...

Healthcare organizations have spent years strengthening their cybersecurity programs through improved security technologies, workforce training, vulnerability management, and incident response and business continuity planning. While these efforts remain essential, many organizations are overlooking one of the fastest-growing sources of cyber risk: third-party vendors and business associates. Today’s healthcare environment depends...

When organizations think about cybersecurity threats, they often picture sophisticated hackers, ransomware attacks, or advanced malware. However, in many conversations with clients, one question comes up repeatedly: “What can we do to reduce our cybersecurity risk?” While there is no single solution, one of the most effective places to start...

By Sara Petrone, Chief Marketing and Partnerships Officer at Petrone Risk, a Channel Partner of FoxPointe Solutions Healthcare organizations are operating in an environment of heightened scrutiny. Regulatory expectations from the U.S. Centers for Medicare & Medicaid Services (CMS) and accrediting bodies like The Joint Commission continue to evolve, while...

We are excited to announce our new strategic partnership with Guardz, a unified AI-driven platform to help businesses identify and reduce digital risk. FoxPointe’s partnership with Guardz will empower Managed Service Providers to deliver stronger and more scalable cybersecurity protection while giving their customers enterprise-grade security without added complexity. By...

The Employee Retirement Income Security Act of 1974 (ERISA) is a federal law that establishes minimum protection requirements for retirement and health insurance plans established voluntarily by private industries nationwide. Plans covered by ERISA often hold substantial monetary assets and maintain personal data on participants. As you can imagine, this...

The cybersecurity risk to family offices is extremely high in the current environment. According to recent data from Deloitte, 43% of family offices globally have experienced a cyberattack over the past 12–24 months, and 25% have experienced three or more attacks. Those based in North America are the most likely...

Insider threats pose a significant risk to organizations, involving individuals with access to critical systems and data. These threats can come from malicious insiders intent to cause harm, careless employees who unknowingly compromise security, or those whose credentials have been stolen by external attackers. Unlike external threats, insider attacks can...

Multi-Factor Authentication (MFA) is a comprehensive approach to authenticating users, relying on two or more credentials to verify an individual’s identity. Typically, these credentials are chosen to be: Something you know (i.e., a memorized password) Something you have (i.e., a physical access badge or smartphone) Something you are (i.e., a...

Introduction Fraud risk mitigation is crucial in business operations to safeguard assets, maintain financial integrity, and uphold the trust of stakeholders. The impact of fraud can be devastating, leading to significant financial losses, reputational damage, and legal consequences. Implementing robust fraud risk mitigation strategies helps to prevent and detect fraudulent...

In today’s business world, companies depend on third-party vendors for everything from IT support to supply chain logistics. While these partnerships offer many benefits and efficiencies, they also come with added risks. Effective Vendor Risk Management helps businesses continually identify and manage risks, protecting them from potential security breaches and...

Due diligence is an integral part of any M&A transaction. During this phase of the transaction, the parties outline internal and external risk factors, mitigate various issues, and lay out their acquisition strategy....