The FBI and other industry watchdogs are constantly releasing reports on how social engineering campaigns and other cyberattacks are rampant and increasingly effective at turning regular people and businesses into victims. One of the problems is a serious shortage of expertise. So many of these attacks can be defended against. Your assets can—and should be—protected from would-be thieves. Unfortunately, too many of us lack the knowledge and experience to manage information security on our own. At the same time, some security providers only pretend to be experts while peddling cookie-cutter solutions they license from vendors who don’t know or care about you.
And then there’s CISSPs.