Cybersecurity playbook for small businesses, nonprofits & local gov. BC/DR, and practical steps to reduce risk.
Boulder, Co
Joined August 2025
- Tweets239
- Following138
- Followers22
- Likes160
Pinned Tweet
Your Windows laptop is probably your biggest security risk — and your strongest control.
Most issues come down to:
• default settings
• delayed updates
• no recovery plan
We published a practical guide for small teams 👇
csfsafe.com/articles/securin…
#CyberSecurity #Windows #SmallBusinessSecurity
CSFSafe – DIY Cybersecurity Playbook retweeted
#CyberCareerChat Q3: Cybersecurity is constantly evolving. What is the most exciting or fulfilling part about working in cybersecurity right now, and why do you #ChooseCyber?
Windows 10 ESU Year 1 ended Oct 13. If your business used the free consumer option, those PCs stopped getting security fixes last week.
Check the front desk, shop floor & back office. Upgrade, replace, or isolate.
csfsafe.com/articles/windows…
CSFSafe – DIY Cybersecurity Playbook retweeted
Zestix hacked over 50 multinational companies, and all it took was finding the few people who didn't enable MFA. Keep criminals out by:
💡 Enabling MFA on every account
💡 Using an authenticator app or biometrics
💡 Not reusing passwords
Don’t pay for their vacations. Learn how to make their lives harder in our article: hubs.ly/Q04zV91S0 #CybersecurityAwarenessMonth
Cybersecurity training as a checkbox doesn't work. Role-specific threats, psychological safety for reporting mistakes, simple policies, and leadership alignment. HR's role in security culture is non-negotiable. Read more → csfsafe.com/articles/hr-cybe…
🤖 Made with AI
CSFSafe – DIY Cybersecurity Playbook retweeted
Scammers often pose as people or companies you know, so Stop, Think, and Verify before you act. Never send money or share personal information until you’ve confirmed the request using contact information you already trust. #CybersecurityMonth
🚨 Energy tankers just got hacked by nation-states. Your supply chain is at risk.
U.S. Coast Guard & FBI discovered cyberattacks on tankers that disabled propulsion, navigation, and cargo systems. Here's why this matters to your business: supply chain disruptions = your problem.
Learn what happened and how to prepare: csfsafe.com/articles/critica…
#Cybersecurity #SupplyChain #CriticalInfrastructure
This is fantastic
The new Small Business Cybersecurity Support Program Finder has entered the chat. This #CybersecurityAwarenessMonth, @NIST launched a new tool to help small businesses find local non-profit community partners who help with cybersecurity risk management. nist.gov/blogs/cybersecurity…
64% of breaches involve a third-party vendor.
Your vendors are your risk. Assess their security, implement access controls, require breach notification in contracts, and prepare your incident response.
We just published a guide on third-party risk management—from vendor categorization to incident coordination.
🔗 csfsafe.com/articles/third-p…
🤖 Made with AI
CSFSafe – DIY Cybersecurity Playbook retweeted
Visit the NIST Small Business Cybersecurity Corner this #CybersecurityAwarenessMonth to access free videos, tip sheets, quick-start guides, and much more: nist.gov/itl/smallbusinesscy…
Business Email Compromise costs US orgs $2.9B/year. An attacker impersonates your CEO, requests a wire transfer, and a single employee sends $250K without verification.
It's preventable: DMARC, email filtering, phone verification for large payments, monthly simulations.
The best time to fix it is now.
👉 csfsafe.com/articles/busines…
89% of organizations experienced a failed backup last year.
26% of cyber insurance claims get denied because backups weren't tested.
Don't be a statistic. Test your backups now, before you need them.
Learn the 3-2-1 rule & ransomware-specific protections for SMBs:
csfsafe.com/articles/backup-…
#Cybersecurity #DataProtection
🤖 Made with AI
CSFSafe – DIY Cybersecurity Playbook retweeted
Sextortion is serious and can affect anyone — adults and children. How does this kind of blackmail work and what should you do if it happens to you? Read more in our article: hubs.la/Q04wLW-X0
Why nonprofits have become a prime target for cyberattacks insurancebusinessmag.com/us/…
CSFSafe – DIY Cybersecurity Playbook retweeted
A new @NIST report aims to encourage greater efforts from the cybersecurity community to explore and prioritize solutions to the issues associated with multi-cloud architectures: infosecurity-magazine.com/ne…
I will be attending 9:55 Health Sector Cybersecurity Threat Briefing
We hope to see you tomorrow at the “Safeguarding Health Information: Building Assurance Through HIPAA Security 2026 Conference,” hosted by @HHSOCR and @NIST.
Registration for virtual participation is still open:
nist.gov/news-events/events/…
Cyber insurance claims can be denied when required cybersecurity policies and controls aren’t in place—or aren’t followed.
The policy comes first. It defines what your organization is expected to do before an incident happens.
Do you have cyber insurance? 74% of claims get denied. Not because coverage is bad—because organizations didn't meet basic requirements before a breach. What's your gap? Read more: csfsafe.com/articles/cyber-i…
🤖 Made with AI
Your backups are good. You've tested them. You can restore in a day.
You're still being extorted.
Modern ransomware copies your data out before it encrypts anything. Restoring fixes availability. It does not retract what already left your network.
csfsafe.com/articles/ransomw…
