The Impact of Corporate Data Loss from Mobile Devices

The impact of corporate data loss from mobile devices can be severe, exposing organizations to financial loss, legal consequences, operational disruption, and reputational damage. Mobile devices — while boosting productivity — are also a major attack surface due to their portability, frequent use outside secure networks, and user behavior. 🚨 Key Risks of Data Loss […]

NIST Releases Draft Guide on Mobile Security Threats

📘 1. Draft IR 8579 — Not Mobile‑Focused NIST’s NCCoE recently published Internal Report (IR) 8579, a draft on chatbot security, not mobile threats. Public comment closes August 4, 2025 csrc.nist.gov. 📱 2. Most Recent Mobile‑Security Draft (SP 800‑124 Rev 2) The latest draft mobile security guide is Special Publication 800‑124 Revision 2, “Guidelines for Managing the Security of Mobile Devices in […]

State CIOs Can Take a Leadership Role in Data Security

✅ Key Leadership Actions for State CIOs Role Action Strategic Visionary Define a statewide cybersecurity strategy aligned with national standards (NIST, CISA, etc.). Policy Maker Create and enforce data governance and security frameworks for all departments. Unifier Break down silos by standardizing IT policies, tools, and training across agencies. Risk Manager Conduct regular risk assessments, […]

Application Persistence is Editor’s Choice Winner for Application Security

🔐 What Is Application Persistence? Application persistence ensures that a security application cannot be removed, disabled, or tampered with, even if: The system is rebooted The app is uninstalled The OS is reinstalled Malware tries to disable it It’s commonly used in: Anti-theft solutions Endpoint protection Enterprise mobile device management (MDM) Secure remote monitoring tools […]

Decentralization of IT Spending Puts Data at Risk

🔍 What Is Decentralized IT Spending? Decentralized IT spending happens when individual departments, clinics, or branches make their own IT decisions (software, services, devices) without centralized IT oversight or standards. Examples: A medical clinic buys its own cloud backup solution. A dental surgery uses personal Google Drive accounts. A department installs unauthorized apps or network […]