Written by Defendrs

Recent writing from the Defendrs team on keeping client records safe, passing audits and insurance renewals, and controlling who has access to your systems.

Many owners find out how to secure a business only once something has already gone wrong. These are short reads in plain language, written by people who fix these problems every week.

All articles

Defendrs6 min read

The Phase II Pause Moved the CMMC Calendar. Your Contract Clauses Did Not Move.

CMMC Phase II is on hold for a 60-day review. Phase I, NIST SP 800-171, DFARS 7012, and False Claims Act exposure are all still in effect.

Read Article
Defendrs7 min read

Large Balances, Small Teams: How Family Offices Get Attacked and Which Controls Hold

A family office moves institutional sums with a handful of staff. See where attackers get in and the short list of controls that turns most of them away.

Read Article
Defendrs6 min read

Texas SB 2610 Explained: How a Written Security Program Takes Punitive Damages Off the Table

Under Texas SB 2610, a business with fewer than 250 employees and a compliant security program is shielded from punitive damages after a breach.

Read Article
Defendrs6 min read

State-Backed Hackers and the Small Business Standing Next to the Target

Cyber risk climbs when geopolitical tension does, and small businesses absorb some of the damage. Why that happens and which steps count.

Read Article
Defendrs5 min read

Ransomware at a Small Business: Where the Money Actually Goes

The ransom is only part of what ransomware costs a small business. A breakdown of the full bill, and the controls that get you operating again.

Read Article
Defendrs7 min read

Business Email Compromise: When an Ordinary Payment Request Is the Attack

Business email compromise needs no malware, only a believable message. How the fraud works, what AI changed, and the phone-call habit that stops it.

Read Article
Defendrs5 min read

Client Data at a Shared Desk: What Has to Be True Before You Log In

A coworking space can be fine for sensitive work if your device, your connection, and your accounts are each protected. Here is how to check.

Read Article
Defendrs8 min read

Anatomy of a CPA Firm Breach: One Stolen Login, Start to Finish

A walk-through of a typical CPA firm breach: a rushed accountant, a cloned Microsoft 365 sign-in, six quiet weeks, and the basic controls that end it early.

Read Article

Prefer a score to more reading?

The risk assessment for your industry is free. It has eight questions or fewer, never asks for a password or any detail about your network, and gives you a score along with notes on your biggest gaps.