Cybersecurity Resources

Tis the Season: Unwrapping the Top Holiday Scams of 2023

Learn about some of the top online scams circulating this holiday season.

Squish the Quish – Stop and Think Before You Access a QR Code

Learn more about quishing attacks and how to protect yourself from this rising cyber threat.

SEC Charges SolarWinds and CISO Timothy Brown For Misleading Investors

Learn more about the SEC filing charges against SolarWinds and their CISO for alleged fraudulent cybersecurity disclosures.

Think Before You Click: Fake Browser Updates are Back in Style

Learn more about the resurgence of one of the oldest malware attack methods in the book: the fake browser update.

Protect Your Manufacturers: 3 Common Cyber Attack Methods to Watch Out for in 2023

Learn about the most common cyber attack patterns reported by the manufacturing industry in 2023.

Protect Your Students, Faculty and Staff: 3 Common Cyber Attack Methods to Watch Out for in 2023

Learn about the most common cyber attack patterns reported by the education sector in 2023.

Protect Your Retail Business: 3 Common Cyber Attack Methods to Watch Out for in 2023

Learn about the most common cyber attack patterns reported by the retail industry in 2023.

Cybersecurity in the Construction Industry

Learn more about some of the main cybersecurity vulnerabilities within the construction industry and how to protect your organization.

Protect Your Financial and Insurance Data: 3 Common Cyber Attack Methods to Watch Out for in 2023

Learn about the most common cyber attack patterns reported by the financial and insurance industry in 2023.

Guide - 7 Best Practices to Keep Your Home Network Safe

Learn how to layer and maintain defensive security measures to protect your assets from digital intruders.

Guide – Understanding the Security and Privacy Concerns of TikTok

Learn what data TikTok users share, with whom that information is being shared and why the platform is considered by many as a security risk.

Article - The Top Ten Most Common SOC 2 Exceptions

Learn about the most common SOC 2 exceptions the Schneider Downs team have encountered.

Article - How Third Party Risk Management Caters to Your Organization

Learn more about what your third-party risk management team does every day to keep your organization safe.

Article - Secrets Revealed: What Your Third Party Auditors Don’t Want You to Know

Learn about the most important considerations to make when working with third-party IT auditors for IT security.

Article - Shared Assessment SIG Questionnaire – What’s New for 2023?

Learn about some of the key changes to the Shared Assessments 2023 Standardized Information Gathering (SIG) Questionnaire.

Article - Proposed Interagency Guidance on Third-Party Risk Management

Learn about the new jointly proposed guidance on Third Party Risk Management from the OCC, FDIC and Board of Governors of the Federal Reserve System.

Article - DOE Significantly Expands Definition of Third-Party Servicer in New Guidance to Higher Education Institutions

Learn more about the Department of Education recently expanding the definition of Third-Party Servicer in relation to the Title IV of the Higher Education Act of 1965.

Article - Tech Republic - Security alert: Use these most popular passwords at your peril

Cybersecurity Shareholder Carl Kriebel discusses how to strengthen password security with Tech Republic.

Infographic – The Most Common Passwords of 2022

View the top ten most commonly used passwords of 2022.

Article - The IT Nerd - Cyber Thieves Can Wreak Holiday Havoc: How to Avoid these Scams

Cybersecurity Shareholder Carl Kriebel discusses three of the most common scams targeting online holiday shoppers this year with The IT Nerd.

Article - WTAE-TV ABC 4 - How to protect yourself from online shopping scams

Cybersecurity Shareholder Carl Kriebel sits down with WTAE-ABC Pittsburgh to discuss some of the most popular scams targeting holiday shoppers and how to avoid them.

Infographic – 10 Steps Contractors Can Take to Reduce Cyber Attacks

Learn ten key steps contractors can take to strengthen their cybersecurity defenses.

Top Cybersecurity Questions of 2022

The Schneider Downs Cybersecurity team shares some of the top questions they have faced from clients in 2022.

Webinar: How to Recover from a Cyberattack, presented by the Chronicle of Higher Education

Guide - Automotive Dealerships and the FTC Safeguards Rule

Learn about the new compliance requirements outlined by the updated Federal Trade Commission Safeguards Rule for automotive dealerships.

Webinar: Cyber Insurance: 2022 and Beyond

Article - Security Info Watch - Lincoln College Closure a Testament to the Threat Posed by Ransomware

David Murphy discusses the importance of having a good disaster recovery plan and the investment in vulnerability management tools in an article with Security Info Watch regarding Lincoln College closure.

Why IT compliance strengthens and protects your business

Manager of Risk Advisory Services, Timothy Wolfgang, joins the PGH Networks to discuss why IT compliance strengthens and protects your business.

Article - Government Technology - Cyber Analyst Q&A: Security Lessons from Lincoln College

David Murphy discusses cyber attack vulnerabilities and what colleges can do to mitigate them.

Article - Pittsburgh Post Gazette - Ask Me About... How the Shutdown of a Small College Brings Home the Danger of Ransomware

David Murphy speaks with the Pittsburgh Post-Gazette regarding the recent ransomware attack that shut down Lincoln College.

Article – WAND – Ransomware, Pandemic Brought Down Lincoln College

Sean Thomas discusses the role a ransomware attack played in the permanent closure of Lincoln College.

Article – S&P Global – Small Banks Could Face Challenges With 36-Hour Cyber Reporting Rule

David Murphy discusses why smaller banks may struggle with the FDIC 26-hour cyber reporting rule.

Article – Cybersecurity Dive – Banks Face 'Tight Deadline' Under New Cyber Notification Rule

David Murphy discusses the FDIC’s Computer-Security Incident Notification Final Rule with Cybersecurity Dive.

Article – CSO Online – What is Your Biggest Insider Threat?

David Murphy shares his insights with CSO Online on some of the most problematic insider threats and minimizing their risk.

Article – Financial Planning –Remain on Alert for Russian Financial Cyber Attacks

David Murphy provides insight to Financial Planning about the importance of basic cybersecurity practices.

Big Thinking, Personal Focus: Cybersecurity

Learn how big thinking and personal focus drive client success.

PCI DSS Service Overview

Guide - Key Changes in PCI DSS V4.0

Learn about key changes in the Payment Card Industry Data Security Standard v4.0.

Article – CNN – US Warns Businesses to Prepare for Russian Cyberattacks. Here's How They Can Do That

Schneider Downs' David Murphy discusses cyber insurance and potential Russian cyberattacks.

Article – Directors & Boards – Boards and Management Must Work Together to Strengthen Cybersecurity

Schneider Downs' Carl Kriebel discusses the importance of management and boards closing communication gaps to strengthen cybersecurity.

Guide – Qualifying for Cyber Insurance in 2022

Learn about key requirements and considerations to qualify for cyber insurance.

Article – VentureBeat – Why the U.S. Can Engage Russia on Cyber Over Ukraine

Schneider Downs' David Murphy provides insight on how the issues in Ukraine create implications in US/Russian relations.

Article – Pittsburgh Business Times – Carl Kriebel Joins Schneider Downs

Carl Kriebel joined Schneider Downs & Co. Inc. as a shareholder and is based at its downtown headquarters.

Webinar: Benefits of a Purple Team Assessment

Article – Search Security – Cyber Insurance Premiums Skyrocket

Schneider Downs' Stephen Bish discusses Cyber insurance premiums with TechTarget, as costs skyrocket due to attacks surge.

Top Cybersecurity Questions of 2021

Join the Schneider Downs Cybersecurity team as they answer some of the most common questions they have faced in the field from 2021.

Infographic - Types of Personal Data

Learn about the different types of personal data targeted by cybercriminals.

Third Party Risk Management Services Overview

InfoSec Policy Templates

Benefits of a Purple Team Assessment

Learn more about the benefits of extending your basic penetration testing using Purple Team assessments to help you improve the organization’s alerting and detection posture.

Guide - CMMC Frequently Asked Questions

Learn more about frequently asked questions from authorized resources and professionals regarding cybersecurity Maturity Model Certification (CMMC) engagements.

Guide - CMMC Preparation Checklist

Be better prepared with your Cybersecurity Maturity Model Certification (CMMC) engagement using our preparation checklist.

Top Ten Cybersecurity Strategy Mistakes of 2021

Learn about the top cybersecurity strategy mistakes organizations our team has witnessed first-hand and best practices to avoid these common pitfalls.

CMMC Service Overview

Top Ten Data Privacy Trends for 2021

Learn what the Top Ten Data Privacy Trends of 2021 are and what you should be doing to prepare.

Infographic – Top Ten Data Privacy Trends of 2021

Learn why data continues to be one of the most valued and targeted resources held by organizations and what are our suggestions are to protecting it.

Case Study: Company Impacted by Six-Figure Ransomware Attack

Webinar: Inside Web Application Penetration Testing

Guide - COVID-19 Fraud Risks

Chronicles of a Penetration Tester

Lead Cybersecurity Strategist Stephen Bish shares his adventures as a penetration tester.

Article – Schneider Downs Named PTC Tech 50 Cybersecurity Innovator of the Year

Guide – Compliance and Third Party Risk Management

Staying Secure From Home

Learn about the best practices organizations and individuals can take to mitigate risks in an increasingly remote world.

Securing a Remote Workforce

Learn about best practices to secure a remote workforce including critical infrastructure considerations, cyber incident preparation and themed attack mitigation.

Infographic – Avoiding COVID-19 Scams

Article – Pittsburgh Business Times – Remote Workforce Security Tips

Article – HowStuffWorks – Have You Been Zoom Bombed?

Infographic - Top Disguises Used to Breach the Office

Article – Pittsburgh Business Times Cyber-Breached Panel

Guide - 10 Must Ask Cybersecurity and Information Security Questions

Webinar: How to Secure Student Records and Comply with GLBA

Webinar: 10 Vulnerabilities Hackers Love to Exploit

Webinar: Managing Cloud Vendor Risks

Global Manufacturer Operations Halted By Ransomware Attack

Employees’ Passwords Compromise Cybersecurity Defenses

10 Most Common Physical Cybersecurity Threats

Learn about some of the top physical cybersecurity threats facing organizations and best practices for mitigating physical security risks.

Cybersecurity Maturity Model Certification (CMMC) Guide

Learn about CMMC, including a deep-dive into the certificate framework, the certification process, potential costs and best practices for preparing your organization.

Maximizing the Value of Penetration Testing

Learn about penetration testing including our methodologies, and best practices to help your organization maximize the value of this assessment tool.

10 Things Companies Wish They Did Before a Breach

Learn about ten key preventive measures companies have overlooked prior to a breach.

10 Vulnerabilities Hackers Love to Exploit

Get inside the mind of a hacker to learn about underlying circumstances leading to breaches and best practices to mitigate these risks.

IT Risk Advisory Overview

Cybersecurity Services Overview

Purple Team Assessment Overview

Penetration Testing Overview

Ransomware Security Overview

Digital Forensics & Incident Response Overview

Article – WAND – Ransomware, Pandemic Brought Down Lincoln College

Cybersecurity Tips from Home Series

The Cybersecurity team shares best practices to stay secure in a remote environment.