https://sidechainsecurity.com/insights/Articles, guides, and news from Sidechain Security.en-usWed, 28 Oct 2026 21:07:01 +0000https://sidechainsecurity.com/insights/articles/business-email-compromise-is-the-mid-market-breach/https://sidechainsecurity.com/insights/articles/business-email-compromise-is-the-mid-market-breach/Fri, 09 Oct 2026 00:00:00 +0000ArticlesAndrew LanceRansomware gets the headlines. The mid-market incident that actually happens is a compromised mailbox and a redirected payment. Here is what stops it.https://sidechainsecurity.com/insights/news/sidechain-launches-timberline/https://sidechainsecurity.com/insights/news/sidechain-launches-timberline/Thu, 01 Oct 2026 00:00:00 +0000NewsTimberline gives healthcare organizations modern generative AI in a customer-isolated environment, built and operated by Sidechain Security.https://sidechainsecurity.com/insights/news/sidechain-publishes-2026-services-overview/https://sidechainsecurity.com/insights/news/sidechain-publishes-2026-services-overview/Tue, 29 Sep 2026 00:00:00 +0000NewsOne reference for everything Sidechain does: IT management, 24/7 monitoring, endpoint and email protection, encryption, backup, private cloud, and testing.https://sidechainsecurity.com/insights/guides/hipaa-security-rule-readiness-checklist/https://sidechainsecurity.com/insights/guides/hipaa-security-rule-readiness-checklist/Fri, 25 Sep 2026 00:00:00 +0000GuidesAndrew LanceEvery Security Rule control mapped against the proposed changes, with a self-assessment for each area and a prioritized action framework.https://sidechainsecurity.com/insights/articles/hipaa-security-rule-changes-what-to-do-now/https://sidechainsecurity.com/insights/articles/hipaa-security-rule-changes-what-to-do-now/Fri, 18 Sep 2026 00:00:00 +0000ArticlesAndrew LanceHHS proposed the first major Security Rule update in over a decade. Here is what changes, why waiting is a mistake, and the order to tackle it in.https://sidechainsecurity.com/insights/articles/what-a-good-penetration-test-report-looks-like/https://sidechainsecurity.com/insights/articles/what-a-good-penetration-test-report-looks-like/Wed, 26 Aug 2026 00:00:00 +0000ArticlesAndrew LanceMost pen test reports are scanner output with a cover page. Here is what to expect from a real one, and how to tell the difference before you sign.https://sidechainsecurity.com/insights/guides/questions-to-ask-a-penetration-testing-vendor/https://sidechainsecurity.com/insights/guides/questions-to-ask-a-penetration-testing-vendor/Wed, 12 Aug 2026 00:00:00 +0000GuidesAndrew LancePen test proposals look alike. These questions separate a real engagement from a rebranded vulnerability scan, before you sign.https://sidechainsecurity.com/insights/articles/prompt-injection-is-a-permissions-problem/https://sidechainsecurity.com/insights/articles/prompt-injection-is-a-permissions-problem/Thu, 30 Jul 2026 00:00:00 +0000ArticlesAndrew LanceYou cannot patch a language model into ignoring malicious instructions. The fix is deciding what your AI is allowed to do, and testing whether that holds.https://sidechainsecurity.com/insights/guides/microsoft-365-security-baseline/https://sidechainsecurity.com/insights/guides/microsoft-365-security-baseline/Wed, 15 Jul 2026 00:00:00 +0000GuidesAndrew LanceMost organizations pay for Microsoft 365 security features they have never turned on. This baseline covers the changes that close the most common gaps.https://sidechainsecurity.com/insights/articles/who-holds-your-encryption-keys/https://sidechainsecurity.com/insights/articles/who-holds-your-encryption-keys/Wed, 24 Jun 2026 00:00:00 +0000ArticlesAndrew LanceEncryption at rest is table stakes. The question auditors, regulators, and sophisticated customers ask next is who controls the keys. Here is how to answer it.https://sidechainsecurity.com/insights/articles/security-from-the-data-up/https://sidechainsecurity.com/insights/articles/security-from-the-data-up/Wed, 20 May 2026 00:00:00 +0000ArticlesAndrew LanceMost managed security providers begin at the perimeter and work inward. Sidechain began with the data. Here is why that matters to regulated organizations.https://sidechainsecurity.com/insights/news/thales-platinum-partner-eighth-consecutive-year/https://sidechainsecurity.com/insights/news/thales-platinum-partner-eighth-consecutive-year/Tue, 10 Feb 2026 00:00:00 +0000NewsSidechain Security has retained Thales's highest partner tier for eight straight years, with every data security engineer certified on CipherTrust and Luna.