How Network Isolation Saved Us: How a 2014 Compliance Requirement Became Our 2018 Ransomware Recovery Plan

The Air-gap Network That Saved Us How a 2014 Compliance Requirement Became Our 2018 Ransomware Recovery Plan In cybersecurity, you don’t always build systems for the problems you expect.Sometimes, the thing that saves you was never meant to exist for that reason at all.That’s exactly what happened to us. 2014 — A Contract, a Quake, […]

Read more "How Network Isolation Saved Us: How a 2014 Compliance Requirement Became Our 2018 Ransomware Recovery Plan"

That One Time I Was a One-Person Cybersecurity Department

That One Time I Was a One-Person Cybersecurity Department I saw this post from Kaaviya Balaji saying: “If you’re looking for someone who knows SIEM, SOAR, EDR, XDR, IAM, MFA, SSO, Cloud (AWS, Azure, GCP), Firewalls, Compliance (ISO, NIST, GDPR, PCI-DSS), Incident Response, Threat Intel, and more…That’s not a Cybersecurity Analyst.That’s an entire Cybersecurity Department.” […]

Read more "That One Time I Was a One-Person Cybersecurity Department"

Closing the Gaps: How We Reduced Our Managed Risk Score from 7.9 to 5.7 and Reached 100% Coverage

Cybersecurity & Operations Excellence. In cybersecurity, numbers tell stories — but not the whole story.The summer we dropped our Arctic Wolf Managed Risk Score from 7.9 to 5.7 and raised our Coverage Score from 70% to 100% wasn’t just about metrics. It was about culture, consistency, and the quiet discipline of doing the hard things […]

Read more "Closing the Gaps: How We Reduced Our Managed Risk Score from 7.9 to 5.7 and Reached 100% Coverage"

Case Study: From 76 to 94 — Turning Security Findings into Business Resilience

Author: Brian NicholsTitle: Director of Infrastructure & CISOCompany: Select Data, LLCFramework Alignment: NIST CSF v1.1 | ISO 27002 | HITRUST | OWASP Challenge: When Cyber Insurance Meets Real Accountability In 2024, Select Data’s cyber insurance provider introduced a new requirement for policy renewal: “Enroll with SecurityScorecard and improve your external cybersecurity rating.” At the time, […]

Read more "Case Study: From 76 to 94 — Turning Security Findings into Business Resilience"

People Over Policies: The Director’s Guide to Building a Culture-Driven Security Program

Cybersecurity isn’t just a framework—it’s a mindset. For over 16 years, I’ve led enterprise IT and security operations at Select Data, helping transform a legacy infrastructure into a resilient hybrid-cloud environment. Along the way, I’ve learned that real security doesn’t start with a policy—it starts with people. As Director of IT Infrastructure and Cybersecurity, I’ve […]

Read more "People Over Policies: The Director’s Guide to Building a Culture-Driven Security Program"

The Morning Everything Froze

I still remember the exact moment I found out we’d been hit with Ransomware.It was May 2018. I was at the breakfast table when my phone buzzed—a text from Eddie, our Chief Product Officer. It was a photo of his computer screen: “If you want the encryption key to your data, transfer 0.8 Bitcoin per […]

Read more "The Morning Everything Froze"