Cybersecurity
Practical security for organizations that do not have a security team: breach obligations in New York, authentication that holds, and the fraud that empties accounts.
What Security Controls Does Cyber Insurance Require From NYC Businesses Now?
Insurers now demand proof that MFA, endpoint detection, tested backups, and incident response plans actually run and were enforced when claims occur.
What cybersecurity incident reporting obligations do New York companies face
New York requires companies to notify affected residents within 30 days of discovering a data breach and file reports with state regulators.
What New York Requires When Customer Data Is Breached
Notification duties attach to any business holding data on New York residents, wherever the business is.
Why Multi-Factor Authentication Still Fails
Turning it on is the easy part. The attacks that work now target the recovery paths around it.
How Small Businesses Actually Lose Money To Payment Fraud
The most costly attacks involve no technical compromise at all. They involve an email and a change of bank details.