• You Can’t Patch Panic: Why The Best AI Defense Starts Before the Attack

  October 9, 2026

  Today’s AI security discussions typically revolve around attack prevention. Security teams have been inundated with messaging on the importance of securing models, preventing prompt injection, blocking malicious use and governing employee access. While these conversations are important, they’re only half the battle. Even the most sophisticated defenses can be compromised. The world saw this play […]

• Cybersecurity Incident Response Management (CIRM), Explained: Gartner’s Category for Incident Response

  September 23, 2026

  For years, security and risk leaders handled incident response by piecing together people, tools and processes as each incident demanded, and it cost them: confused ownership, conflicting updates and a timeline nobody could reconstruct once the incident was over. In January 2026, Gartner gave the solution a name: Cybersecurity Incident Response Management, or CIRM.  Detection […]

• How AI-Driven Social Engineering Exposes Gaps in Incident Response

  September 2, 2026

  Over the past few weeks, several major asset managers have disclosed a similar cyber incident. In each case, the way in wasn’t a piece of malware or an unpatched server. It was a phone call. Someone posing as internal IT support convinced an employee they were exactly who they claimed to be, and that was […]

• Incident Response on a Compromised Network: What Recent Water Utility Attacks Reveal

  August 7, 2026

  Every major infrastructure attack eventually produces the same headline: attackers got in, systems were disrupted, and the details of how are still coming into focus. What’s more interesting to me than the details of any single incident is a pattern that shows up almost every time: the assumption, baked into most response plans, that the tools and networks you’ll use to respond are […]

• Why Cybersecurity Incident Response Management Starts with Out-of-Band

  March 3, 2026

  Modern cyber incidents demand more than IT playbooks. Gartner CIRM highlights the need for Cybersecurity Incident Response Management built for legal, regulatory, and executive pressure—starting with out-of-band (OOB) deployment to keep communications and evidence secure when internal systems can’t be trusted.

• Cyber Tabletop Exercises: Building Readiness, Not Checking a Box

  October 29, 2025

  Build capability, not theater. Learn how to run tabletop exercises that cut containment time, measure progress, and harden response.

• Cyber Incident Response Management: 10 Tactics for Cyber Resiliency

  October 23, 2025

  Keep operations running during ransomware. Use an out-of-band command center, clear decision cadence, and regulator-ready reporting.

• Out-of-Band Crisis Communications: How To Coordinate When Your Systems Are Compromised

  October 13, 2025

  You cannot run incident response on compromised systems. See how out-of-band communications keep teams aligned, vendors coordinated, and evidence clean for regulators.

• Turbulence Ahead: The Rise of Third-Party Risk

  September 25, 2025

  Third-party risk is like turbulence: inevitable but manageable. Out-of-band platforms can reduce chaos and downtime when vendor disruptions hit.

• Crisis Communications and Legal Risk: When Messaging Becomes Evidence

  September 10, 2025

  Learn why attorney-client privilege and work-product protection often fail to cover crisis communications, why apps like Signal or WhatsApp fall short, and how to keep IR comms defensible.