Michelle Drolet
A practical guide for higher-ed leaders reviewing vendor risk, identity and integrations, and institutional readiness after the Canvas compromise.
0 Minute 0 Second Read
Michelle Drolet
The Canvas compromise is like a lesson in SaaS security for organizations that have operational dependency on SaaS platforms. The Canvas global community includes more than 8,000 institutions across more than 100 countries, and Canvas is used by 100% of Ivy League universities. No surprise, then, that this compromise took both an operational and a reputational toll
4 Minute 48 Second Read
Michelle Drolet
With the rapid adoption of AI and with quantum threats on the horizon, the security team’s reaction window is compressing fast. AI is not only accelerating attacks but also making these easier to scale. Quantum computing is forcing leaders to question whether today’s cryptographic protections will be enough in a quantum world. It is therefore important to understand
5 Minute 5 Second Read
Michelle Drolet
In December last year, a shooting incident at Brown University saw two students lose their lives, and left nine injured. And on March 12, an active shooter killed an ROTC instructor at Old Dominion. Tragically, it seems like such disturbing news from university campuses is becoming normalized. Federal authorities have opened an investigation into Brown, digging into the ‘how’ of
5 Minute 59 Second Read
Greg Neville
Lacking formal AI risk frameworks allows shadow AI to proliferate unchecked, but a structured approach to governance can prevent dangerous blind spots. AI is being leveraged across organizations to boost productivity, accelerate innovation and optimize business processes. The problem is that adoption has outpaced discipline. Only a minority (23.8%) of organizations have formal AI risk
6 Minute 1 Second Read
Michelle Drolet
A security incident is all but inevitable for nearly every organization. By “incident” we mean a cyberattack that successfully accesses enterprise resources or somehow puts the finances, operations, and reputation of an organization at risk. A major breach can drive a company out of business. To fight back, every organization needs a cohesive incident response (IR) strategy, backed by a well-trained team
4 Minute 30 Second Read
Michelle Drolet
Artificial intelligence is no longer just supporting organizations; it is in the driver’s seat, steering outcomes across different functions. But there is a gap. While 58% of organizations say AI is deeply embedded in their operational and decision-making structures, only 19% have a complete AI governance framework in place. It is this gap that must be plugged
4 Minute 43 Second Read
Janelle Drolet
10) Aim to prevent costly downtime. Risk assessments help you spot weak points that can halt operations. Costs of business downtime are in the billions each year. 9) Clean up hidden weak spots from spaghetti IT. Systems bolted together over time create gaps; conducting a risk assessment will surface those loose webs. The goal is to streamline
1 Minute 34 Second Read
Michelle Drolet
An organization’s initial reaction to a cybersecurity incident is critical when a ransomware attack or a data breach occurs. These actions ultimately determine whether the incident escalates into a more damaging issue or is contained swiftly. A quick and timely response can help mitigate the impact and minimize financial losses, protect sensitive data and safeguard
4 Minute 2 Second Read
Michelle Drolet
The Payment Card Industry Data Security Standard’s 4.0 requirements are designed to protect card information from theft or fraud. Here are some important controls that must be in place before April 2025. The Payment Card Industry Data Security Standard (PCI DSS) is a set of security requirements introduced by the Payment Card Industry Security Standards
4 Minute 32 Second Read
