Michelle Drolet
A practical guide for higher-ed leaders reviewing vendor risk, identity and integrations, and institutional readiness after the Canvas compromise.
0 Minute 0 Second Read
Michelle Drolet
The Canvas compromise is like a lesson in SaaS security for organizations that have operational dependency on SaaS platforms. The Canvas global community includes more than 8,000 institutions across more than 100 countries, and Canvas is used by 100% of Ivy League universities. No surprise, then, that this compromise took both an operational and a reputational toll
4 Minute 48 Second Read
Michelle Drolet
With the rapid adoption of AI and with quantum threats on the horizon, the security team’s reaction window is compressing fast. AI is not only accelerating attacks but also making these easier to scale. Quantum computing is forcing leaders to question whether today’s cryptographic protections will be enough in a quantum world. It is therefore important to understand
5 Minute 5 Second Read
Michelle Drolet
Cybersecurity has generally kept pace with the growing sophistication of threats. It has evolved from firewall and antivirus to next-gen firewalls, comprehensive endpoint security suites and intelligence-driven approaches such as EDR, XDR and MDR—solutions based on the assumption that systems behave predictably and that risks can be mapped, monitored and mitigated within specific guardrails. But even
4 Minute 19 Second Read
Janelle Drolet
10. Cyber risks go beyond just IT. A cyberattack can freeze operations and damage customer relationships. A breach exposing client data can trigger lawsuits, while downtime during an attack may lead to cash flow issues. Cybersecurity isn’t just about data; it’s about business continuity. 9. Complacency can be a threat. Many businesses assume they’re too
1 Minute 50 Second Read
Michelle Drolet
In December last year, a shooting incident at Brown University saw two students lose their lives, and left nine injured. And on March 12, an active shooter killed an ROTC instructor at Old Dominion. Tragically, it seems like such disturbing news from university campuses is becoming normalized. Federal authorities have opened an investigation into Brown, digging into the ‘how’ of
5 Minute 59 Second Read
Michelle Drolet
Thinking of cybersecurity purely through the lens of an “IT issue” is limiting. Cybersecurity impacts operational resilience, financial risk, regulatory exposure, brand trust and, in a worst-case scenario, business continuity. This makes a rock-solid case for a cybersecurity bullhorn in the boardroom.Unfortunately, cybersecurity is still treated as a technical dialog. Only 5% of companies have a cybersecurity
4 Minute 8 Second Read
Greg Neville
Lacking formal AI risk frameworks allows shadow AI to proliferate unchecked, but a structured approach to governance can prevent dangerous blind spots. AI is being leveraged across organizations to boost productivity, accelerate innovation and optimize business processes. The problem is that adoption has outpaced discipline. Only a minority (23.8%) of organizations have formal AI risk
6 Minute 1 Second Read
Michelle Drolet
A security incident is all but inevitable for nearly every organization. By “incident” we mean a cyberattack that successfully accesses enterprise resources or somehow puts the finances, operations, and reputation of an organization at risk. A major breach can drive a company out of business. To fight back, every organization needs a cohesive incident response (IR) strategy, backed by a well-trained team
4 Minute 30 Second Read
Michelle Drolet
Businesses are gearing up for another bumpy year of cybercrime. An ongoing barrage of phishing and ransomware attacks, third-party breaches like those involving Log4j and SolarWinds and the surge in remote work are but a few of the many reasons why almost 80% of security leaders still lack confidence in their cybersecurity posture. In response, a majority of them are planning to significantly
3 Minute 59 Second Read
