Office of the Comptroller7 days agoPlanning your cyber spending With remote and hybrid work continuing, the makeshift move to the virtual office is no longer just a temporary solution. Now that budget...
Office of the ComptrollerSep 15Massachusetts Municipal Cyberscurity SummitThe Massachusetts Municipal Cybersecurity Summit, held virtually all day on October 7 will bring together experts from government...
Office of the ComptrollerAug 31NOW AVAILABLE: Statewide Contract ITS78 for Data and Cybersecurity ServicesITS78: Statewide Contract for Data, Cybersecurity, and Related Audit, Compliance, and Incident Responses Services User Guide is now...
Office of the ComptrollerAug 25What’s your data and systems backup plan?Now is a good time to review your data and critical operations backups! According to best practices in the CISA Ransomware Guide,...
Office of the ComptrollerAug 17Coming soon to the new MAComptroller.org: A more robust, updated CTR CyberAs one part of the new MAComptroller.org website relaunch this fall, we are pleased to offer an expanded and rebranded CTR Cyber....
Office of the ComptrollerAug 10Don’t fall for scareware!Scareware is malicious software that pops up a message telling you that your computer is infected with malware and you must follow a link...
Office of the ComptrollerJul 20What’s Your Plan B? With ransomware attacks on the rise, part of updating your Incident Response, Business Continuity, and Disaster Recovery Plans is working...
Office of the ComptrollerJul 13Remember to wipe your equipment!Don’t overlook data destruction, a critical data management internal control. Numerous state and federal data and privacy laws mandate...
Office of the ComptrollerJul 6Is your head in the clouds?Hosting your data and applications in the cloud provides much greater protections, but requires additional considerations: Test and...
Office of the ComptrollerJun 30Have you mapped your data lately? Mapping how data in your organization is received, processed, disseminated, and stored is critical to designing appropriate protections....
Office of the ComptrollerJun 23Time to “SLAMB” your updates!With the threats of ransomware, phishing attacks, and organized cybercrime prevalent, simple steps can greatly increase protections to...
Office of the ComptrollerJun 16Be on alert for fraudulent invoices and emails at close of Accounts Payable PeriodFraudsters know that as the end of an accounts payable period approaches, there may be increased pressure due to fiscal year close-out...
Office of the ComptrollerJun 9A compromised password took down a pipeline – time to update your passwords!The recent Colonial Pipeline ransomware attack was successful because cybercriminals used a password found on the dark web to access an...
Office of the ComptrollerJun 2Watch out for flashy ads and pop-ups for lurking malware!Since web ads generate income through “clicks”, cybercriminals are actively trolling the web. “Malvertising” is fake advertising...
Office of the ComptrollerMay 25Zero-Trust Cybersecurity - Trust No One?The recent Executive Order On Improving the Nation’s Cybersecurity mandates that the federal government move to a “zero trust”...
Office of the ComptrollerMay 19White House issues executive order improving the nation’s cybersecurityIn response to the wave of cyber attacks hitting both government and private companies such as "Solarwinds", the White House has issued...
Office of the ComptrollerMay 11Telework reminders - stay vigilant!As teleworking continues to support ongoing operations, criminals are targeting users and systems for profit and disruption. The recent...
Office of the ComptrollerMay 4What is your cyber perimeter and why you need to protect itThe cyber perimeter includes applications, systems, and devices that have access to your networks. Perimeters are secured in two ways:...
Office of the ComptrollerApr 28Recent VPN attacks prompt immediate patching federal mandateState and federal agencies have reported targeted infrastructure attacks, most recently for the Pulse Secure telework VPN that is used by...
Office of the ComptrollerApr 21Phishing attacks up more than 1,000%Most successful phishing attacks succeed when only eight percent of users click on malicious links, pictures, or documents, so it is...