// VAUGHN CYBER GROUP // INSIGHTS
Cybersecurity strategy, AI risk, and security leadership from Lora Vaughn.
Two sessions at ISC2 Security Congress in Aurora, Colorado this October: one on making career decisions with the MOVE framework, one on threat modeling when your resources don't match your threat....
→ read on loravaughn.comSecurity ratings platforms grade your vendors from the parking lot, bill somebody for the number, and hand your board a red dot to ask you about. Here's what the score actually measures and what...
→ read on loravaughn.comJack Henry, IDScan.net, and LexisNexis. Three companies that aren't banks, all of them a community bank's problem, and not one of them chosen by the bank. Why the failures keep landing a tier or two...
→ read on loravaughn.comEveryone argues about where the CISO should report. That's the wrong argument. The real fix is a written mandate around the budget you'll have to challenge, and it doesn't require a new box on the...
→ read on loravaughn.comThe wiring that makes me lose my keys is the same wiring that goes calm and fast when everything is on fire. What twenty years in security taught me about working with my brain instead of against it.
→ read on loravaughn.comBusiness email compromise still outearns ransomware every year, and it beats banks that have EDR, MFA, and a clean exam. The control that stops it is a process, not a product, and most institutions...
→ read on loravaughn.comFor more writing and industry commentary, visit→ loravaughn.com/blog
LAST UPDATED: September 23, 2026 at 10:44 AM
// NEXT STEP
Let's talk about how I can help your business get secure without the bloat.