Bite Size Security Blog: Cyber Risk for Business Leaders
Stay ahead of today’s threats with Bite Size Security — fast, focused cyber risk insights for business leaders. NCX Group helps CEOs and CFOs navigate compliance, ransomware, downtime, and insurance — without the tech jargon.
Bite Size Security Blog
Keep your business secure with the latest cybersecurity and information security news from NCX Group. Our team of experts provides you with analysis and insights on potential threats to help protect your enterprise.
Get informed and stay safe with NCX Group.
Latest Updates
Is Your Healthcare Business Adhering to HIPAA Regulations?
Industry studies have found that healthcare organizations are still not prepared for breach; but when it comes to meeting HIPAA compliance they can’t opt out. One of the areas of HIPAA compliance that requires attention is the sharing of health information with third parties.
Hidden security risks that cost businesses a fortune
When businesses think of security risks, they usually think of network vulnerabilities or BYOD risks; but when it comes to how cybercriminals can breach a company, there are many more ways than one…
The real reason why organizations aren’t hiring CISOs
If you keep an eye out on the latest infosec news, you’re most likely aware of the talk around CISOs and the gap organizations have in filling the position. One of the most recent articles to discuss this painful reality made some valid points that actually say even more about organizations and the importance they give security.
Study finds little to no improvement in healthcare data security six years later
A recent study by the Ponemon Institute finds that healthcare continues to be a huge target for cyberattack; and as it stands right now, healthcare providers and business associates (BAs) are ill-prepared to defend themselves and their data.
Verizon data security study shows that companies are missing the mark
The recently released annual Verizon Data Breach Investigations Report (DBIR) provides quite a bit of insights into the state of security and why breaches take place. Business executives and IT security leaders, should especially note those areas where improvements can be made.
Gartner’s IoT security spending forecast is more than just numbers
Recent research by Gartner on IoT security spending foresee that spending will double and reach $547.20 million by 2018. This forecast sheds light on the fact that IoT risks will keep on growing; but what else should CEOs and IT security pros take away from Gartner’s report?
Healthcare board members must get on board with cybersecurity before it’s too late
An increase in ransomware attacks and recent industry studies keep pointing to how important it is for the healthcare industry to really be on board with cybersecurity. A challenge to getting on track with a proactive security approach is the hospital boards’ grasp of the notion that cybersecurity really isn’t only an IT issue…
The grim truth about data breaches every CEO needs to know
The ITRC’s Data Breach List has disclosed that so far in 2016, the number of compromised records has reached 6.2 million; adding to the more than 851 million records exposed over the last decade…
Executive overconfidence in cybersecurity puts everyone at risk
A recent Tripwire study, conducted by Dimensional Research, in the energy sector revealed the recurring theme of overconfidence, which is pretty scary when you look at what else the study reveals about the energy sector and cyberattacks…
Study shows businesses the ROI behind a strong security program
The big problem with the CEO and CIO disconnect isn’t only that it weakens security, but also that it negatively impacts business growth. A recent study showed just how influential an organization’s security impacts business dealings…
Security and the Mushroom Principle
A recent Ponemon study sheds light on part of the challenges for CEOs and their organizations in taking the right security steps to protect their enterprise. It starts with CEOs being left in the dark…
What healthcare organization executives can learn from a $3.9 million HIPAA settlement
Recently, Feinstein Institute, a research institution, agreed to pay $3.9 million for a HIPAA settlement; after a 2012 OCR health data breach investigation. A costly expense that could have been avoided if the institution had set up a holistic information security posture to cover all their bases.
Healthcare continues to struggle with good security
Every business has cybersecurity concerns, but one industry that has been seeing the worst of it and that seems to be the least prepared with data security is healthcare. Recent industry studies and cyberattacks to healthcare organizations, only three months into a new year, raise even more concerns…
Study finds businesses continue to struggle with the importance of security
A recent study by industry experts reveal that 82% of cybersecurity and information security pros report that their board of directors is concerned or very concerned about cybersecurity, but only one in seven (14%) CISOs reports to the CEO…
4 cybersecurity areas CIOs and the C-Suite can improve on to reduce risks
When you think about the recent ransomware incident at the Hollywood Presbyterian Medical Center, where they had to pay hackers over $17,000 to regain access to patients’ medical records and control over their systems; you get a really good look at what it means to think of security as secondary to your organization’s operations. A proactive and holistic information security posture is fundamental to protect your data, but also to avoid disruption in your day to day operations…
3 things every security executive should be doing to get ahead of cyber threats
In 2014 the cost of breach increased by 15%, in 2015 by 23%, which means we can expect it to increase in 2016; also, let’s not forget Gartner’s expectations of 5.5 million new devices being connected to the Internet of Things (IoT) every day by 2016. It’s safe to say that security executives have a lot on their plate. Some helpful tips on what to do and what to avoid doing is a good place to start to manage risks effectively and keep security posture up to par.
It’s not just payment data security practices that need improvement
A recent study by the Ponemon Institute shows that payment data security practices need improvement. This doesn’t come as a surprise, but it does raise some concerns when you break down why improvement is still needed…
Organizations need to prepare for evolving cyber threats
Kaspersky Lab security experts have listed some of the cyber threats they expect to see in 2016. Knowledge of these potential threats helps the CIO and C-Suite make important decisions like what the new year security budget will look like, but also what risks businesses need to prepare for.
6 cyber threats besides breach that can create havoc for organizations
A breach is one of the biggest nightmares for any business executive and their IT security leaders, but they are not the only cyber threat organizations get to worry about. There are quite a few more that have undesirable repercussions that need preparing for. Let’s take a look…
7 ways organizations can get ahead of holiday security risks
Even though information security is an ongoing process, the holidays always come with their additional set of risks. Here are seven risk management areas to watch out for and improve on, if you’re going to prepare your security for the cyber threats ahead…
Don't Be Shy.. Get In Touch.
If you are interested in working together, send us an inquiry and we will get back to you!



















