Pillar
Engineering-framed topics; secure-by-construction
26 articles • Page 1 of 3
Cyber resilience tools cost versus breach recovery and fines is a recurring number you choose against a one-time number you do not. IBM's 2026 average breach is $4.99 million globally and $11.5 million in the US. The fine is rarely the largest line.
Vendor security protocol questions for mixed data environments come down to who owns each control across your estate and theirs. CSA added Shared Security Responsibility Model columns to CAIQ v4 because unassigned controls are a leading source of cloud risk.
CISA Secure by Demand (August 2024) is the buyer list: is MFA extra, do default passwords still exist, how do patches install, is there a public VDP. Design is the maker pledge. Demand is what you ask before you sign.
MCP security for a small business is a supply chain. Microsoft June 2026: poisoned tool descriptions can steer an agent while every click looks routine. Pin, read the description, no standing shell.
On 1 May 2026 CISA and allies published agentic AI guidance. For a small business: one low-risk job, its own login, tiny permissions, a person on pay and deletes, and a kill switch.
Questions to ask business internet providers about cybersecurity: who can change routing, which logs you can export, the incident clock, MFA on the portal, and credits that land on the invoice. CISA's Demand guide is the shopping list. Get it in writing.
A newly exposed cloud server gets its first probe in about 52 seconds. Small website attacks are automated and constant, not a big-company problem. Secure-by-construction absorbs the baseline.
A commercial kitchen stays safe by how it is built and run, not by a final inspection. That is secure by construction, and it is the same instinct behind good engineering: design the hazard out before it can happen.
In 2025 Sonatype counted 454,600 new malicious packages, and the easiest way in was phishing a trusted maintainer. Software supply chain risk is now a people problem, and the fix is verification cheap enough to actually use.
