Ransomware
Does your disaster recovery plan anticipate a ransomware attack? Are you certain the plan will help your organization survive such an attack?
Data Exfiltration and Extortion
Did you wake up to discover that Advanced Persistent Threats have been in your routers for the past three years?
Spam Trojan Email Phishing
Are there trojan "droppers" lurking in the spam folders of your employees, waiting to be accidentally clicked?
Website Spoofing and Credentials Harvesting
Did you know attackers can sometimes register similar DNS domains to trick your customers or employees with a "Man in the Middle" attack to harvest their login credentials? (Typo squatting or IDN Attacks.)
Email Spoofing and Phishing
If attackers sent email to your employees that *looked* like it came from their coworker or their supervisor, how would they know if the attachment was "suspicious"?
SSL/TLS Harvest Now, Decrypt Later
Is your website protected against ongoing "post quantum" attacks, where session data is harvested now, to be later decrypted by quantum computers, which could arrive within the next few years?