Chris Wiser walks through client security risk assessments. Check for MFA on bank accounts, run phishing simulations, search for plaintext passwords in browsers on executive machines. Use multiple tools instead of one scan.
You have to do a client discovery risk assessment, not just your orange jump drive, not just one scan, not just any of these other things. There's a bunch of great tools out there. No one tool runs everything. I'll tell you that right now. We combine multiple things into our risk assessment. Obviously, we want to gather data points, we want to gather some pain, we want to gather some tech issues. That's like thing one, and that's the. That's your orange jump drive. And maybe some interview questions. But you also want to find that pain and then tie it into emotional ties. I'll give you an example of this. Looking at a client's bank account with them and seeing if it doesn't have MFA on it, or at least seeing if they have MFA on it. Or also a full phishing simulation or maybe a phishing phishing situation where you can see who clicks on things. We can also look at plain text passwords in browsers on all their machines, at the very least their executive machines.