How To’s

In the alphabet soup of acronyms that are part of the daily life of every business, one acronym stands out: BIA, or a Business Impact Analysis. But what is BIA in the context of cybersecurity?

Asset discovery and valuation is the cornerstone of all successful cybersecurity and privacy programs. Absent this, you don’t know what you’re protecting and—even worse—at what cost.

To effectively run a cybersecurity and privacy program, you’ll need to build core cybersecurity and privacy policies that govern these functions. These policies are critical in that they impact a wide swath of functions—from prevention to resilience and from identification to recovery.

Unlike many organizational policies that “come down from the mountain,” cybersecurity and privacy policies are derived following a substantial amount of discovery and assessment work.

A penetration test, which is often shortened to “pen test,” is essentially a fake cyberattack. It is conducted by trained cybersecurity engineers, in hopes of revealing any vulnerabilities that the target may have. You can learn more about penetration tests here.