Greg Anderson

Here’s a pattern I’m seeing more often: More sites. More assessments. More reporting expectations. Same headcount. Security teams are being asked to scale output without scaling structure. So what happens? Assessments become episodic. Reporting takes too long. Prioritization becomes subjective. And leaders spend more time translating risk than reducing it. This isn’t a capability issue. It’s an architecture issue. At some point, physical security has to operate with the same operational discipline as finance and IT. Otherwise it stays in permanent catch-up mode. For security people overseeing medium to large portfolios (20+ sites): What’s currently your biggest bottleneck volume, visibility, or validation? And why do you think this is?

5

1 Comment

Audits and forensics aren’t witch-hunts to “name the hacker.” They’re how you stop the next breach. A good audit/forensic review will: Expose misconfigurations and control gaps Surface broken processes (people • tech • vendors) Produce a clear timeline to improve response Provide evidence for insurance claims and regulators Demonstrate senior management intent and due diligence One breach costs more—in money, trust, and time—than doing the work properly up front. At Tylers, we turn incidents into hardening plans: fixes, owners, deadlines. Not blame—better security. #CyberSecurity #DigitalTrust #Forensics #Audit #IncidentResponse #Tylers

17

2 Comments

Apache Kafka fixes CVEs exposing clients to RCE, SSRF, and file read attacks. Update to secure versions and review JAAS settings immediately. #KafkaSecurity #ApacheKafka #RCE #CVE2025 #CyberRisk #DevSecOps https://lnkd.in/eQFgiAcV

1

Today’s San Antonio Chapter of CFMA lunch reminded me why cross-functional learning is one of the most underrated risk management tools we have. Here are the three insights that hit hardest for me: 1. Tax changes create security gaps. Rushed tech purchases to capture bonus depreciation or R&D credits often skip security vetting and that’s where exposure creeps in. 2. Construction firms face rising cyber risk. According to the Dodge Construction Network, 59% of construction firms experienced a cybersecurity threat over a two year period. The industry’s complexity makes it a prime target. 3. Finance + IT disconnect = avoidable risk. In most of the firms I talk to, finance leaders can’t list all of the cloud tools their project teams rely on. This is a blind spot attackers love. Takeaway: Your tax strategy, growth plan, and cybersecurity posture aren’t separate. They’re interconnected systems that can either reinforce or undermine each other. Huge thanks to Kathryn Hall, Bradley Frantz, Nita McBride, and the speaker for today's session Shelley Woitena for an outstanding CFMA meeting. Also wanted to thank Denice Allison for the introduction to the San Antonio crew. What’s an unexpected place you’ve learned something critical about your business?

6

1 Comment

HIPAA Compliance ≠ Security We’ve got to stop confusing HIPAA compliance with being secure. 🛑 Compliance is the bare minimum. 🛡 Security is proactive protection. You can be “HIPAA compliant” and still: — Store unencrypted PHI — Miss a phishing attack — Let employees share logins The truth? ✔ HIPAA checks if you’re doing something. ✔ Hackers check if you’re doing enough. Compliance won’t save you from ransomware. Security will. Schedule a call with us today to learn how you can keep your business secure! https://lnkd.in/g7keGcjQ

7

Secrets management isn’t just about securing credentials; it’s about control and visibility. As teams scale, secrets can quickly become scattered across environments, making it difficult to enforce security policies and meet compliance standards. Without strong governance, organizations risk exposing sensitive data, missing audit trails, and facing operational inefficiencies. A modern approach to secrets governance ensures: 🔐 Access control with role-based permissions 📋 Auditability with detailed logs and monitoring 🔄 Automated secret rotation to reduce risk With the right governance in place, you can maintain security while scaling efficiently without slowing down development. Want to know how to get started? Check out our latest blog to learn why governance is the backbone of modern secrets management 👉 https://lnkd.in/g94gwjtF

2