Cybersecurity Insights & Best Practices

September 24, 2025

LLM Security: Fast Growth, Smart Guardrails

An AI chatbot once “sold” a Chevrolet for just $1, highlighting both the promise and peril of Large Language Models. From prompt injection attacks to supply chain risks, this article explores critical vulnerabilities of LLMs and the safeguards organizations must adopt to ensure secure, responsible AI use.

August 28, 2024

RISCPoint Unveils RADAR: A Revolutionary AI-Powered Cybersecurity Platform

RISCPoint Advisory Group, a leader in custom-tailored security and compliance services, today announced the launch of RADAR, an innovative all-in-one cybersecurity platform. Combining continuous threat discovery with expert-led Penetration Testing as a Service (PTaaS), RADAR represents a significant leap forward in proactive security and risk management. Launched at Blackhat, during one of the cybersecurity industry's most exciting weeks, RADAR has made an instant impact, leveraging artificial intelligence to provide real-time vulnerability detection across multiple attack surfaces. The platform offers continuous scanning and on-demand penetration testing by certified ethical hackers, ensuring comprehensive security assessments and compliance reporting.

June 19, 2024

The RISCPoint Recap - AWS re:Inforce 2024

RISCPoint attended AWS re:Inforce 2024 to gain insights into the latest advancements in cloud security. Key highlights included AWS's new security features such as Amazon GuardDuty Malware Protection for Amazon S3 and passkey MFA for IAM users, emphasizing the integration of AI in security practices. Additionally, AWS CISO Chris Betz's keynote on the importance of a robust security culture and networking opportunities through the AWS Global Security and Compliance Acceleration Program underscored the collaborative efforts in driving industry standards forward.

May 1, 2024

Security and Compliance for SMBs: RISCPoint Shares their Expertise on the Cloudy with a Chance of AWSome AWS Podcast

Security and compliance are paramount concerns for businesses of all sizes, however, small and medium-sized businesses (SMBs), in particular, face unique challenges in navigating these complex topics while striving for innovation and growth. On the latest Cloudy with a Chance of AWSome podcast episode “Security & Compliance for SMBs”, RISCPoint’s CEO, Jake Nix, and COO, Matt Drewyor, explore how RISCPoint and AWS are reshaping the security and compliance landscape for SMBs with podcast hosts Hayden Chase Kuzma and Benjamin King, SMB Account Managers at AWS.

April 2, 2024

Navigating the New Frontier: Understanding FedRAMP's Red Team Requirement

New red team requirement introduced in FedRAMP Revision 5 and NIST SP 800-53 Rev 5 emphasize proactive defense mechanisms in cybersecurity. It explores the concept of red teaming, the challenges of implementing these exercises without explicit guidance, and suggests approaches for internal execution and partnering with external experts like RISCPoint. The post also speculates on future guidance from the FedRAMP Program Management Office, emphasizing the importance of integrating red team findings into continuous improvement processes for enhanced cybersecurity resilience.

December 7, 2023

Safeguard Your Business: 5 Simple Steps to Boost Cybersecurity this Holiday Season

RISCPoint outlines five essential steps to bolster cybersecurity during the holiday season, emphasizing vigilance against phishing, securing remote work, being cautious of smishing, keeping devices updated, and the importance of continuous education to protect businesses from increased cyber threats.

October 2, 2023

RISCPoint Welcomes Matt Wiese as our Director of Cybersecurity Operations Services

RISCPoint Advisory Group Welcomes Matt Wiese as Director of Cybersecurity Operations Services: Enhancing Cybersecurity Capabilities with Platform Security Expertise.

September 18, 2023

Cybersecurity Breaches at Las Vegas Resorts: Understanding the MGM and Caesars Incidents

Amid cyber breaches at MGM Resorts and Caesars Entertainment, RISCPoint delves into the details, exploring the culprits, methods, and potential aftermath of these high-profile attacks. With insights into the intricate workings of cybercrime and its ramifications, RISCPoint underscores the urgent need for robust cybersecurity measures in today's interconnected world.

September 11, 2023

The Issue with BYOD

Delve into the security challenges posed by the Bring Your Own Device (BYOD) model, citing the potential for compromised personal computers to leak sensitive data and open doors for cyber threats. RISCPoint offers strategic approaches like access restriction, education, and implementing a zero-trust architecture to navigate these risks and ensure a more secure organizational environment.

August 21, 2023

NIST 800-171 Revision 3 Draft and What It Means for Federal Contractors

The draft of NIST SP 800-171 Revision 3 introduces crucial updates for federal contractors, aiming to enhance protection of Controlled Unclassified Information (CUI) in nonfederal systems. RISCPoint emphasizes the importance of understanding these changes, including new control families and refined security requirements, to ensure compliance and secure federal contracts effectively.

August 14, 2023

Penetration Testing vs. Red Teaming: Understanding the Differences

RISCPoint demystifies the differences between penetration testing and red teaming, crucial methodologies for assessing an organization's security posture. While penetration testing focuses on identifying technical vulnerabilities within a controlled environment, red teaming provides a comprehensive, real-world attack simulation, assessing both technical defenses and human factors. This article elucidates the importance of both approaches in forming a robust cybersecurity strategy, especially with new FedRAMP requirements emphasizing red teaming's role in security assessments.

August 7, 2023

Leveraging Outsourced Expertise for Enhanced Security, Risk, and Compliance Internal Audits

Outsourcing internal audits to third-party experts offers unparalleled value, objectivity, and specialized knowledge, enhancing an organization's risk management, security, and compliance. RISCPoint highlights how leveraging external expertise not only ensures a thorough and unbiased assessment but also optimizes resources, offering a cost-effective strategy for continuous improvement in today's evolving cybersecurity landscape.

July 10, 2023

Preparing for Your First Penetration Test: Key Considerations for Success

RISCPoint highlights the importance of penetration testing as a cornerstone of cybersecurity, outlining essential steps for a successful first test. From defining the scope and securing permissions to choosing the right partner, this guide ensures your organization is well-prepared to identify vulnerabilities, evaluate security controls, and enhance your overall security posture.

December 7, 2022

Why Every Organization Can Benefit from Penetration Testing

Penetration testing, or "pen testing," is an essential tool for safeguarding your organization's sensitive information and ensuring robust cybersecurity. By simulating real-world attacks, pen testing identifies vulnerabilities in your systems and evaluates the effectiveness of your security measures. RISCPoint's custom-tailored penetration tests offer a proactive approach to identifying and mitigating potential threats, ensuring your organization's security framework is as strong and resilient as possible.

November 3, 2022

Gone Phishing: Social Engineering and Cybersecurity

RISCPoint highlights the critical importance of understanding and preventing social engineering attacks in today's digital landscape. From phishing and vishing to smishing and whaling, these deceptive tactics exploit human trust to compromise sensitive information. Learn how to safeguard your organization against these increasingly sophisticated threats and consider the role of regular penetration testing in fortifying your cybersecurity defenses.

September 13, 2022

4 Key Benefits of Complying with the NIST CSF

RISCPoint explores the advantages of adopting the National Institute of Standards and Technology's Cybersecurity Framework (NIST CSF) for organizations of all sizes and sectors. Discover how this voluntary framework provides a structured approach to cybersecurity, offering benefits such as a common organizing structure, flexibility, privacy considerations, and workforce development, ultimately enhancing your organization's cybersecurity maturity and posture.

September 5, 2022

What is a vCISO, and Do I Need One?

RISCPoint explores the crucial role of a virtual Chief Information Security Officer (vCISO) in providing expert security and compliance guidance for organizations. Discover how a vCISO can offer flexible, on-demand expertise to enhance your security foundation, compliance posture, and overall cybersecurity hygiene, while also representing your company's best interests to customers and stakeholders.

August 1, 2022

Emerging Cybersecurity Threat Trends in 2022

RISCPoint identifies crucial cybersecurity threats in 2022, including ransomware and software supply chain attacks, emphasizing the importance of a strong defensive strategy. Learn about the financial and repetitional impacts of breaches and discover key practices like security awareness training, regular backups, and continuous penetration testing to safeguard your organization against these evolving threats.

July 21, 2022

Ransomware Attacks are on the Rise Worldwide – Here are Three Things You Can Do About It

RISCPoint highlights the alarming increase in ransomware attacks worldwide, emphasizing the critical need for organizations to stay vigilant. Learn three key strategies to enhance your cybersecurity defenses, including minimizing human vulnerabilities through continuous training, bringing in an expert like a virtual CISO, and staying informed about industry-specific threats, especially in sectors like healthcare where breaches are surging.

March 30, 2022

CISA Issues New Warning Amid Russia-Ukraine Conflict

RISCPoint highlights the latest advisory from CISA and the Department of Energy, urging U.S organizations to secure their uninterruptible power supply (UPS) devices against potential cyberattacks in the wake of the Russia-Ukraine conflict. Learn about the recommended measures to protect internet-connected UPS devices and the importance of staying vigilant during these tumultuous times.

March 12, 2022

What the Strengthening American Cybersecurity Act Means for The Cybersecurity Industry

RISCPoint delves into the implications of the recently signed Strengthening American Cybersecurity Act, highlighting its focus on enhancing federal cybersecurity laws, increasing reporting requirements for critical infrastructure, and promoting secure cloud technology use. Understand the potential impact on your organization and the importance of preparing for the expanded cybersecurity and compliance requirements set forth by this landmark legislation.

March 1, 2022

What the Russian Invasion of Ukraine Could Mean for the Cybersecurity Landscape

RISCPoint addresses the potential cybersecurity implications of Russia's invasion of Ukraine, highlighting the urgent need for organizations to adopt a heightened security posture. Learn key measures recommended by the CISA to proactively protect your critical assets, including multi-factor authentication, regular patching, and having a mature incident response plan, in light of the increased cyber risk posed by potential Russian retaliation.

January 10, 2022

How To Achieve Compliance Across Multiple Controls Frameworks

RISCPoint offers a comprehensive guide to help organizations navigate the complexities of achieving compliance across multiple control frameworks like SOC 2, ISO/IEC 27001, HITRUST, and HIPAA. Learn how to define your compliance objectives, select an appropriate controls framework, implement controls effectively, and monitor their effectiveness to ensure a robust and efficient compliance program that meets the evolving demands of the cybersecurity landscape.

November 15, 2021

CMMC 2.0 What to Know, What to Do, and How to Prepare

RISCPoint breaks down the key changes and preparations needed for CMMC 2.0, the streamlined standard set to impact government contractors and the Defense Industrial Base. Learn about the reduction in levels, expanded self-assessment eligibility, and the importance of aligning with NIST 800-171 to ensure your organization is ready for the immediate implementation of CMMC 2.0 upon approval.

October 29, 2021

3 Key Qualities of a Healthy Security Culture

RISCPoint emphasizes the importance of a strong security culture in today's cybersecurity landscape, highlighting three essential qualities: making security accessible to all employees, ensuring consistent training and compliance, and fostering a culture of accountability rather than punishment. Discover how these practices can empower your workforce and safeguard your organization against potential breaches.

November 7, 2020

The Hidden Costs of Ineffective Cybersecurity and Compliance Functions

RISCPoint emphasizes the importance of a well-defined cybersecurity and compliance function to balance operational costs and potential risks. Ineffective controls can lead to data loss, operational failures, reputational damage, and financial penalties. The article advises on identifying and remedying common characteristics of ineffective IT compliance functions, including lack of executive support, skill gaps, inadequate policies, and recurring audit findings. RISCPoint suggests a thorough examination by experienced professionals to address these issues and improve security posture.