.webp?width=2169&height=526&name=Compass%20regular%20transparent%20website%20(1).webp "Compass IT Compliance Logo")
-1.webp?width=2169&height=620&name=Compass%20regular%20transparent%20website%20smaller%20(1)-1.webp "Compass IT Compliance")
Technology Vendor Selection Process: Why Independent Advice Matters
by Jerry Hughes on November 4, 2026 at 4:47 PM
Choosing an IT, cybersecurity, cloud, managed services, or software vendor is one of the biggest decisions an organization makes. A strong vendor selection process can speed up growth, strengthen security, and make daily operations run better. A weak one can mean blown budgets, failed …
The Hidden Cybersecurity Risk Nobody Talks About: Executive Turnover
by Donald Mills on April 7, 2026 at 9:44 AM
When security leaders talk about risk, the conversation usually gravitates toward ransomware, zero-day vulnerabilities, or third-party breaches. Those threats are real, and they deserve the attention they get. But there is another risk vector that quietly undermines cybersecurity prog …
Why Most Cybersecurity Tabletop Exercises Fail (and How to Fix It)
by Kyle Daun on April 3, 2026 at 10:30 AM
.jpg)
There is a question that comes up in every security community eventually: has anyone actually been in a tabletop exercise that felt worthwhile? The frustration behind that question is completely valid. Too many organizations have sat through exercises that were clearly theater, where …
Security Consulting Firms Offering Virtual CISO Services Stand Out
by William DePalma on March 20, 2026 at 11:47 AM
The cybersecurity services market has become increasingly specialized. Some providers focus exclusively on technical testing, conducting penetration tests, vulnerability assessments, and red team exercises. Others concentrate entirely on governance, risk, and compliance (GRC), offerin …
What the SEC Wants to See in Your 10-K Cybersecurity Disclosure
by CJ Hurd on March 2, 2026 at 2:00 PM
If you follow publicly traded companies closely, you may have noticed something tucked into their annual reports over the past few years that wasn't always there before: a section called "Item 1C – Cybersecurity." For investors, compliance professionals, and business leaders alike, th …
Pen Testing Automation Problem: Why Human Expertise Matters
by Patrick Laverty on February 20, 2026 at 4:44 PM
The cybersecurity industry has a new buzzword problem, and this one could leave your organization dangerously exposed.