by David Pahlman | Apr 6, 2026 | Risk Management, Security Governance, Small Business
7 min readYou don’t have to be Fortune 500 to be on a hacker’s radar. In fact, being small might be exactly why you’re on it. Small Business Risk Management Ransomware Security Governance Cybersecurity Let’s settle something right now. If...
by David Pahlman | Mar 30, 2026 | AI, Frameworks, Security Compliance, Security Governance
6 min readMost AI conversations in organizations today follow the same pattern. Someone types a question. The AI answers it. The person reads the answer and decides what to do next. That model is already becoming obsolete. The next wave of AI — agentic AI —...
by Robert Parker | Mar 12, 2026 | Security Compliance, Security Governance
3 min readIf you’re building a new security compliance program, or trying to restart one that stalled somewhere along the way, this will probably sound familiar. You run an assessment, identify the gaps, create the remediation plan… and then the whole thing seems to...
by Robert Parker | Feb 6, 2026 | Security Governance
2 min readThrough my many years workingin GRC, I’ve found a consistent theme: Most compliance projects don’t fail – they stall. And they can be for a long while at times. I see this constantly across SOC 2, HIPAA, ISO, and internal security programs. The...
by David Pahlman | Dec 8, 2025 | Risk Management, Security Compliance, Security Governance, Small Business
5 min readCompliance is often viewed as a restrictive set of rules enforced by a single department. This narrow perspective not only hinders business agility but also leaves an organization vulnerable to significant risks, including financial penalties, operational...
by David Pahlman | Nov 2, 2025 | AI, Risk Management, Security Compliance, Security Governance
3 min readFor Chief Information Officers (CIOs) and Chief Information Security Officers (CISOs), understanding these shifts is critical. Navigating new regulations, managing emerging threats, and aligning GRC with business objectives requires foresight and strategic...
