Cross-sector · Operations & Workforce
Articles in this selection, newest first. Change the filters, or clear them to see every article.
8 articles · Cross-sector · Operations & Workforce
Articles
Week of 29 September 2025
How the lapse of a 2015 law put counsel in the threat-sharing loop
The 2015 law protecting cyber threat sharing expired as the October 2025 shutdown began, and sharing did not stop. But every warning sent outside the building picked up a legal question, and teams without written rules found analysts waiting on lawyers.
Week of 15 July 2024
Channel File 291 measured every recovery plan in hands per device
One faulty CrowdStrike update turned millions of remotely managed Windows computers into a hands-on repair job. How fast each organization recovered came down to three things few plans covered: access to recovery keys, people at keyboards, and the order of repair.
Week of 26 February 2024
CSF 2.0’s biggest addition was the one a security team could not deliver
NIST’s refreshed cybersecurity framework added a new function called Govern. It looked like a technical update. In fact it hands work to executives, HR, procurement and the board, and organizations that left it to the security chief missed what had changed.
Week of 21 February 2022
Shields Up had no end date, so vigilance needed a staffing plan
Russia’s invasion of Ukraine brought a request from CISA for every US organization to raise its guard, with no date to lower it. Staying alert for months turned out to be a management problem: who watches, who decides, and what work stops.
Week of 6 September 2021
Vaccination status was the easy record; exemptions were the hard one
President Biden’s September 2021 vaccination plan sent employers scrambling to collect proof. It demanded three things: status records, weekly testing and exemption decisions. The third carried the lasting legal risk, and most organizations built it last and least.
Week of 15 February 2021
Why working from home failed when Texas froze
A year into the pandemic, many continuity plans answered every site outage with “work from home.” Winter Storm Uri took out power, water, roads and home internet together, showing that one fallback fails when people, sites, networks and suppliers all fail at once.
Week of 12 October 2020
Why one phone call beat Twitter’s login controls
No clever code, no exotic exploit. New York’s report on the Twitter hack traced it to a phone call and a fake login page. The people who verify callers and reset logins turned out to be a security control few had designed or measured.
Week of 24 February 2020
Buildings intact, workforce gone: the scenario continuity plans skipped
As markets fell and federal health officials warned of community spread, most continuity plans still imagined losing a building. A pandemic takes away people, suppliers and the usual tools all at once, and plans had to be rebuilt and tested around those three losses.