Insights
Articles
Longer pieces on security and compliance in regulated industries.
Business email compromise is the mid-market breach
Ransomware gets the headlines. The mid-market incident that actually happens is a compromised mailbox and a redirected payment. Here is what stops it.
The proposed HIPAA Security Rule changes, and what to do before they land
HHS proposed the first major Security Rule update in over a decade. Here is what changes, why waiting is a mistake, and the order to tackle it in.
What a good penetration test report looks like
Most pen test reports are scanner output with a cover page. Here is what to expect from a real one, and how to tell the difference before you sign.
Prompt injection is a permissions problem
You cannot patch a language model into ignoring malicious instructions. The fix is deciding what your AI is allowed to do, and testing whether that holds.
Who holds your encryption keys?
Encryption at rest is table stakes. The question auditors, regulators, and sophisticated customers ask next is who controls the keys. Here is how to answer it.
Security from the data up: why we start where most providers finish
Most managed security providers begin at the perimeter and work inward. Sidechain began with the data. Here is why that matters to regulated organizations.
Have a question these articles did not answer?
Ask the engineers who wrote them. We respond within one business day.
(503) 389-3174 · info@sidechainsecurity.com · Portland, Oregon