Reclamere

09/01/2026

Healthcare organizations are moving quickly to capture AI’s operational and financial benefits.

Security governance needs to keep pace.

Before adoption expands, leaders should ask how AI will be secured, what could go wrong, and who could be affected. Terry Kurzynski explains how duty-of-care risk analysis can support those decisions.

Watch the full conversation: https://bit.ly/3Sanois

08/31/2026

3 questions can reveal a lot about your cybersecurity program:

1. Could leadership explain why a security decision was reasonable?
2. Do you know what downtime would actually mean for the business?
3. Is there a clear plan for what needs attention first?

Our latest blog series explores each of these questions, from DoCRA and Business Impact Analysis to building a practical 30/60/90-day cyber risk roadmap.

Explore the latest:
Blog #1: DoCRA Explained: What “Reasonable Security” Means
→ Read more: https://bit.ly/3SBJUkq

Blog #2: How a Business Impact Analysis Changes the Cyber Risk Conversation
→ Read more: https://bit.ly/4xFs8LY

Blog #3: A 30/60/90-Day Cyber Risk Plan for Regulated SMBs
→ Read more: https://bit.ly/4fYi2jx

08/31/2026

Cybersecurity makes a lot more sense when leaders stop looking at it as an IT issue and start asking what happens to the business when something goes wrong.

In our recent Data Security over Coffee, Aubery Guzzo, COO of Mercer County State Bank, joined Joe Harford and Angie Singer Keating for a practical conversation about downtime, incident preparedness, vendor risk, fraud, and the questions executives should be asking about their own organizations.

If your systems were unavailable tomorrow, how long could your business continue serving customers?

Watch the full episode: https://bit.ly/4gnmR6g

08/28/2026

Cyber insurance renewals are becoming a governance conversation.

Underwriters are looking for more than simple yes-or-no answers about controls. They increasingly want evidence that cybersecurity practices are implemented, documented, tested, and reviewed.

That can include:

✓ enforced MFA
✓ EDR or MDR coverage
✓ tested backups
✓ written and tested incident response plans
✓ vendor security documentation
✓ AI usage guidance
✓ governance records

A strong governance layer helps leadership keep those pieces connected.

CSO360 provides organizations with a leadership layer for cybersecurity, helping guide strategy, governance, risk management, documentation, and ongoing program maturity.

If your next insurance renewal, board conversation, or risk review would raise more questions than answers, it may be time for a more structured approach.

Explore CSO360: https://bit.ly/4hZDqWR

08/27/2026

“We’ve always felt like when Reclamere would suggest something to us, it was the next step in our journey.”

That is the goal.

Cybersecurity maturity does not happen all at once. Progress comes from knowing what to tackle now, what to prepare for next, and what may be too big for the current stage.

Thank you to Brent McClintock for sharing how Reclamere has provided that guidance, perspective, and a practical path forward!

08/26/2026

Reaching the same cybersecurity maturity score as your peers may sound reassuring.

Regulators and affected stakeholders will still ask whether your decisions met your duty of care.

Benchmarking can inform the conversation, but acceptable risk must reflect your organization, its obligations, and the people who could be affected.

Watch the full episode for more practical perspectives on cyber risk and resilience: https://bit.ly/3Sanois

08/25/2026

Another great opportunity to connect, learn, and share perspectives with the local cybersecurity community.

Last Tuesday, Randy Sciarrillo and Tim Henry joined fellow ISC2 Penn Highlands Chapter officers Guido Santella and Giovanni Palmieri for the chapter’s August meeting in Altoona.

The evening featured Michael Ponzurick, who shared insights from his experience with the U.S. Secret Service, including cyber investigations, forensics, and credit card skimmers.

We’re grateful for organizations like the ISC2 Penn Highlands Chapter that create opportunities for cybersecurity professionals in our region to continue learning from one another.

08/25/2026

Where should we start?

For many leadership teams, that is one of the hardest questions after a cybersecurity assessment.

The answer usually requires more than a long remediation list. It requires understanding which exposures could create the greatest business impact, what can be addressed now, and what belongs on a longer-term roadmap.

Our latest blog outlines a practical 30/60/90-day framework for creating that sequence.

A 30/60/90-Day Cyber Risk Plan for Regulated SMBs
→ Read more: https://bit.ly/4fYi2jx

Use a practical 30/60/90-day cyber risk plan to reduce immediate exposure, strengthen resilience, and build ongoing governance for regulated SMBs.

08/24/2026

A good executive cybersecurity conversation should eventually get beyond, “Are we compliant?”

→ What would downtime cost us?
→ What services are truly critical?
→ What level of risk have we accepted?
→ Could we explain why our security decisions were reasonable?

Those are business questions.

In tomorrow's Data Security over Coffee, Aubery Guzzo joins Joe Harford and Angie Singer Keating to discuss what executives should understand about cyber risk in 2026.

📅 Tomorrow (8.25) | 10AM ET
Register: https://bit.ly/4xU7qs8

08/24/2026

Cyber risk becomes easier to prioritize when leaders can see how it affects the business.

That is why static risk lists only go so far.

A technical issue may seem isolated at first, but the real question is what it could disrupt:

→ operations
→ revenue
→ client or patient service
→ regulatory obligations
→ vendor relationships
→ insurance requirements
→ reputation

We mapped out a simple framework for connecting cybersecurity risk to business impact.

Take a closer look and save this for future planning conversations!