Cybersecurity Resources

7 Easy Steps to Keep Your Home Network Safe

Want to keep your home network safe? Follow these 7 tips from the Schneider Downs Cybersecurity team.

Guide - 7 Best Practices to Keep Your Home Network Safe

Learn how to layer and maintain defensive security measures to protect your assets from digital intruders.

Google Says Goodbye to the Password, Hello to the Passkey

Learn why Google is moving to passkeys as their primary authentication method and what this means for Google account holders.

Medical Device Makers Face Increased Cybersecurity Standards From the FDA

Learn more about a new mandate from the FDA requiring medical device makers to meet cybersecurity requirements as part of the regulatory approval process.

The Genesis Market Crime Forum is Shutdown. Now What?

Learn more about the U.S. Department of Justice’s recent takedown of the popular cybercrime forum Genesis Market.

PLAY Ransomware Gang Leaks Data From City of Oakland Attack

Learn more about the PLAY ransomware gang releasing data from their ransomware attack on Oakland, CA.

SEC's Proposed Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companies

Learn more about the SEC's Proposed Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companies.

Biden Administration Unveils National Cybersecurity Strategy

Learn more about the Biden Administration's National Cybersecurity Strategy.

Postcard From Jen Easterly's “Unsafe at Any CPU Speed” Lecture at Carnegie Mellon University

Learn more about CISA Director Jen Easterly's recent lecture at CMU on the importance of technology companies building security into products.

Dole Foods Ransomware Attack Halts North American Food Shipments

Learn more about the ransomware attack that temporarily shutdown Dole Foods production and shipments in North America.

Guide – Understanding the Security and Privacy Concerns of TikTok

Learn what data TikTok users share, with whom that information is being shared and why the platform is considered by many as a security risk.

Article - Proposed Interagency Guidance on Third-Party Risk Management

Learn about the new jointly proposed guidance on Third Party Risk Management from the OCC, FDIC and Board of Governors of the Federal Reserve System.

Article - DOE Significantly Expands Definition of Third-Party Servicer in New Guidance to Higher Education Institutions

Learn more about the Department of Education recently expanding the definition of Third-Party Servicer in relation to the Title IV of the Higher Education Act of 1965.

Article - The Top Ten Most Common SOC 2 Exceptions

Learn about the most common SOC 2 exceptions the Schneider Downs team have encountered.

Article - How Third Party Risk Management Caters to Your Organization

Learn more about what your third-party risk management team does every day to keep your organization safe.

Article - Secrets Revealed: What Your Third Party Auditors Don’t Want You to Know

Learn about the most important considerations to make when working with third-party IT auditors for IT security.

Article - Shared Assessment SIG Questionnaire – What’s New for 2023?

Learn about some of the key changes to the Shared Assessments 2023 Standardized Information Gathering (SIG) Questionnaire.

Article - Tech Republic - Security alert: Use these most popular passwords at your peril

Cybersecurity Shareholder Carl Kriebel discusses how to strengthen password security with Tech Republic.

Infographic – The Most Common Passwords of 2022

View the top ten most commonly used passwords of 2022.

Article - Money Market Advisor - Fraud is ramping up. So are financial institutions’ efforts to thwart it.

Cybersecurity Shareholder Carl Kriebel discusses methods for monetary establishments to assist shoppers against fraud with Money Market Advisor.

Article - WTAE-TV ABC 4 - How to protect yourself from online shopping scams

Cybersecurity Shareholder Carl Kriebel sits down with WTAE-ABC Pittsburgh to discuss some of the most popular scams targeting holiday shoppers and how to avoid them.

Article - The IT Nerd - Cyber Thieves Can Wreak Holiday Havoc: How to Avoid these Scams

Cybersecurity Shareholder Carl Kriebel discusses three of the most common scams targeting online holiday shoppers this year with The IT Nerd.

Infographic – 10 Steps Contractors Can Take to Reduce Cyber Attacks

Learn ten key steps contractors can take to strengthen their cybersecurity defenses.

Top Cybersecurity Questions of 2022

The Schneider Downs Cybersecurity team shares some of the top questions they have faced from clients in 2022.

Webinar: How to Recover from a Cyberattack, presented by the Chronicle of Higher Education

Guide - Automotive Dealerships and the FTC Safeguards Rule

Learn about the new compliance requirements outlined by the updated Federal Trade Commission Safeguards Rule for automotive dealerships.

Webinar: Cyber Insurance: 2022 and Beyond

Article - Security Info Watch - Lincoln College Closure a Testament to the Threat Posed by Ransomware

David Murphy discusses the importance of having a good disaster recovery plan and the investment in vulnerability management tools in an article with Security Info Watch regarding Lincoln College closure.

Why IT compliance strengthens and protects your business

Manager of Risk Advisory Services, Timothy Wolfgang, joins the PGH Networks to discuss why IT compliance strengthens and protects your business.

Article - Government Technology - Cyber Analyst Q&A: Security Lessons from Lincoln College

David Murphy discusses cyber attack vulnerabilities and what colleges can do to mitigate them.

Article - Pittsburgh Post Gazette - Ask Me About... How the Shutdown of a Small College Brings Home the Danger of Ransomware

David Murphy speaks with the Pittsburgh Post-Gazette regarding the recent ransomware attack that shut down Lincoln College.

Article – WAND – Ransomware, Pandemic Brought Down Lincoln College

Sean Thomas discusses the role a ransomware attack played in the permanent closure of Lincoln College.

Article – S&P Global – Small Banks Could Face Challenges With 36-Hour Cyber Reporting Rule

David Murphy discusses why smaller banks may struggle with the FDIC 26-hour cyber reporting rule.

Article – Cybersecurity Dive – Banks Face 'Tight Deadline' Under New Cyber Notification Rule

David Murphy discusses the FDIC’s Computer-Security Incident Notification Final Rule with Cybersecurity Dive.

Article – CSO Online – What is Your Biggest Insider Threat?

David Murphy shares his insights with CSO Online on some of the most problematic insider threats and minimizing their risk.

Article – Financial Planning –Remain on Alert for Russian Financial Cyber Attacks

David Murphy provides insight to Financial Planning about the importance of basic cybersecurity practices.

Big Thinking, Personal Focus: Cybersecurity

Learn how big thinking and personal focus drive client success.

PCI DSS Service Overview

Guide - Key Changes in PCI DSS V4.0

Learn about key changes in the Payment Card Industry Data Security Standard v4.0.

Article – CNN – US Warns Businesses to Prepare for Russian Cyberattacks. Here's How They Can Do That

Schneider Downs' David Murphy discusses cyber insurance and potential Russian cyberattacks.

Article – Directors & Boards – Boards and Management Must Work Together to Strengthen Cybersecurity

Schneider Downs' Carl Kriebel discusses the importance of management and boards closing communication gaps to strengthen cybersecurity.

Guide – Qualifying for Cyber Insurance in 2022

Learn about key requirements and considerations to qualify for cyber insurance.

Article – VentureBeat – Why the U.S. Can Engage Russia on Cyber Over Ukraine

Schneider Downs' David Murphy provides insight on how the issues in Ukraine create implications in US/Russian relations.

Article – Pittsburgh Business Times – Carl Kriebel Joins Schneider Downs

Carl Kriebel joined Schneider Downs & Co. Inc. as a shareholder and is based at its downtown headquarters.

Webinar: Benefits of a Purple Team Assessment

Article – Search Security – Cyber Insurance Premiums Skyrocket

Schneider Downs' Stephen Bish discusses Cyber insurance premiums with TechTarget, as costs skyrocket due to attacks surge.

Top Cybersecurity Questions of 2021

Join the Schneider Downs Cybersecurity team as they answer some of the most common questions they have faced in the field from 2021.

Infographic - Types of Personal Data

Learn about the different types of personal data targeted by cybercriminals.

Third Party Risk Management Services Overview

InfoSec Policy Templates

Benefits of a Purple Team Assessment

Learn more about the benefits of extending your basic penetration testing using Purple Team assessments to help you improve the organization’s alerting and detection posture.

Guide - CMMC Frequently Asked Questions

Learn more about frequently asked questions from authorized resources and professionals regarding cybersecurity Maturity Model Certification (CMMC) engagements.

Guide - CMMC Preparation Checklist

Be better prepared with your Cybersecurity Maturity Model Certification (CMMC) engagement using our preparation checklist.

Top Ten Cybersecurity Strategy Mistakes of 2021

Learn about the top cybersecurity strategy mistakes organizations our team has witnessed first-hand and best practices to avoid these common pitfalls.

CMMC Service Overview

Infographic – Top Ten Data Privacy Trends of 2021

Learn why data continues to be one of the most valued and targeted resources held by organizations and what are our suggestions are to protecting it.

Top Ten Data Privacy Trends for 2021

Learn what the Top Ten Data Privacy Trends of 2021 are and what you should be doing to prepare.

Case Study: Company Impacted by Six-Figure Ransomware Attack

Webinar: Inside Web Application Penetration Testing

Guide - COVID-19 Fraud Risks

Chronicles of a Penetration Tester

Lead Cybersecurity Strategist Stephen Bish shares his adventures as a penetration tester.

Article – Schneider Downs Named PTC Tech 50 Cybersecurity Innovator of the Year

Guide – Compliance and Third Party Risk Management

Staying Secure From Home

Learn about the best practices organizations and individuals can take to mitigate risks in an increasingly remote world.

Securing a Remote Workforce

Learn about best practices to secure a remote workforce including critical infrastructure considerations, cyber incident preparation and themed attack mitigation.

Infographic – Avoiding COVID-19 Scams

Article – Pittsburgh Business Times – Remote Workforce Security Tips

Article – HowStuffWorks – Have You Been Zoom Bombed?

Infographic - Top Disguises Used to Breach the Office

Article – Pittsburgh Business Times Cyber-Breached Panel

Guide - 10 Must Ask Cybersecurity and Information Security Questions

Webinar: How to Secure Student Records and Comply with GLBA

Webinar: 10 Vulnerabilities Hackers Love to Exploit

Webinar: Managing Cloud Vendor Risks

IT Risk Advisory Overview

Employees’ Passwords Compromise Cybersecurity Defenses

Global Manufacturer Operations Halted By Ransomware Attack

Article – WAND – Ransomware, Pandemic Brought Down Lincoln College

Ransomware Security Overview

Digital Forensics & Incident Response Overview

Cybersecurity Services Overview

Penetration Testing Overview

Purple Team Assessment Overview

Cybersecurity Maturity Model Certification (CMMC) Guide

Learn about CMMC, including a deep-dive into the certificate framework, the certification process, potential costs and best practices for preparing your organization.

Maximizing the Value of Penetration Testing

Learn about penetration testing including our methodologies, and best practices to help your organization maximize the value of this assessment tool.

10 Things Companies Wish They Did Before a Breach

Learn about ten key preventive measures companies have overlooked prior to a breach.

10 Vulnerabilities Hackers Love to Exploit

Get inside the mind of a hacker to learn about underlying circumstances leading to breaches and best practices to mitigate these risks.

10 Most Common Physical Cybersecurity Threats

Learn about some of the top physical cybersecurity threats facing organizations and best practices for mitigating physical security risks.

Cybersecurity Tips from Home Series

The Cybersecurity team shares best practices to stay secure in a remote environment.