Automating PCI v4.0.1 Script Monitoring: A 1-Year Field Report (ep. 8)
We can't keep turning a blind eye to e-commerce skimming. It's a real threat that demands real attention—regardless of how compliance checklists evolve. Eighteen months ago, our panel met to break dow...
26 Maj 29min
Cybersecurity Priorities for 2026: The Two Vulnerabilities to Focus on in the AI Era (ep.7)
Is your organization prepared for an autonomous AI bot? Roger Grimes joins Jen Stone to discuss the shifting landscape of cybersecurity. This episode moves past the hype to look at the hard data: AI s...
12 Maj 10min
The SAQ A Deep Dive: Two QSAs Set the Record Straight (ep. 6)
This episode of Practical Cybersecurity moves past the standard PCI checklist to focus on the operational realities, common misconceptions, and "stealth" requirements that define SAQ A in the PCI DSS ...
28 Apr 20min
Protecting the House: Why Asset Management and "Storytelling" are Keys to HITRUST (ep.5)
Episode Summary In this episode of Practical Cybersecurity, we dive into the complex world of HITRUST certification. Often called the "gold standard" for healthcare security, HITRUST can be a daunting...
14 Apr 11min
4 Critical Tasks for Small IT Teams (ep.4)
A single data breach now costs a business an average of $1.4 million, according to the annual IBM report. For a small or medium-sized business (SMB), this hit is often terminal—most companies that suf...
31 Mars 12min
Pressure Testing Your IRP: Why "Calling IT" Isn't a Plan (ep. 3 Part 2)
What happens when the news cameras show up and your business grinds to a halt? Donna Grindle, CEO of Kardon, returns to discuss the "hair on fire" reality of a data breach. We move past the paperwork ...
17 Mars 10min
Why Your Security Risk Analysis is Probably Wrong (ep. 3 Part 1)
Are your IT or cloud providers handling your security? Does your site claim you're "HIPAA Compliant"? Donna Grindle, CEO of Kardon and co-host of Help Me With HIPAA, delivers a massive reality check f...
17 Mars 15min
Is NIST Too Complex for Small Businesses? Daniel Eliot Weighs In (ep. 2)
"I can’t think about cybersecurity this week; I’m thinking about 1099s." You’re not alone. Many SMBs see the NIST Cybersecurity Framework (CSF) as an overwhelming manual for government contractors, no...
3 Mars 17min
