Pinned Tweet
One of the best parts of bringing our fully remote team together? The chance to give back. 🤝
The BARR team traveled earlier this year to Kansas City, where we volunteered our time with Heart to Heart International to support their mission of improving healthcare access around the world.
Learn more about how we're making a difference in our communities year-round: hubs.li/Q04s1LFk0
#RaiseTheBARR
How can your team use the CIS Benchmarks? 🤔
These practical, community-driven recommendations were designed to help you:
✅ Establish secure configuration baselines
✅ Identify security gaps
✅ Strengthen your cybersecurity programs
Learn more about what the CIS Benchmarks are and how to use them on our blog: hubs.ly/Q04BhpRn0
#CIS #SecurityEngineering #GRCEngineering
🎓 Higher education institutions manage vast amounts of sensitive data, from student records to financial information and research. Protecting that data is essential to maintaining trust and reducing cybersecurity risks.
SOC 2 and ISO 27001 offer valuable frameworks to strengthen information security, improve risk management, and demonstrate a commitment to data protection.
🔎 Learn why these frameworks matter for higher education in our latest blog: hubs.li/Q04C2G8C0
#HigherEducation #Cybersecurity #SOC2 #ISO27001
We’re always looking for ways to raise the bar. 🚀
Members of the BARR team recently traveled to Kansas City for an impactful in-person event full of learning, collaboration, and growth.
Because being an expert means staying curious, staying current, and staying ready for what’s next. 💡
#RaiseTheBARR #FutureReady #CompanyCulture
From malware to MedTech, the latest edition of Take5️⃣ covers everything you need to know in cybersecurity this month.
🗞️ Get the scoop: hubs.li/Q04B48YT0
#TechNews #CyberNews #CybersecurityNews
BARR Advisory retweeted
On Random but Memorable, Brad Thies of @barradvisory explains how to govern AI agents and the importance of least privilege.
Implementing the correct policies and controls will ensure that agent access doesn't derail your next audit.
📺 Watch the full episode here: bit.ly/3WhUdLX
📋 How much time is your team spending answering the same security questions over and over again?
For B2B companies, redundant vendor questionnaires are more than an administrative headache. They can drive up operational costs, slow sales cycles, and introduce compliance risks.
The good news? You don’t have to choose between efficient assessments and strong security.
✅ Standardize security responses
✅ Centralize evidence and documentation
✅ Automate repetitive assessment workflows
Discover how your organization can spend less time repeating answers and more time reducing risk.
🔗 Read our latest blog to learn more: hubs.li/Q04Bh-gC0
#Cybersecurity #VendorRiskManagement #GRC #Compliance
What are the CIS Benchmarks? 🤔
Each one focuses on a specific technology or product and provides recommendations for mitigating potential security risks.
We explain more about the purpose of CIS Benchmarks and how to use them in our latest blog post: hubs.li/Q04zBjKV0
#CISBenchmarks #Cybersecurity #SecurityEngineering
Today’s the day! 🚨 The BARR team is live at the New England HIMSS Digital Health Conference.
Stop by Booth 14 to connect with our healthcare services leader, Steve Ryan.
See you soon! 👋
#NEHIMSS #DigitalHealth #TechEvent
Delivering excellence means constantly raising the bar. 🚀
Members of our team recently gathered in Kansas City for an impactful professional development workshop.
We’re proud to have a culture that prioritizes continuous learning so we can stay at the forefront of our industry and continue delivering expert guidance to the organizations we serve. 🤝
#RaiseTheBARR #FutureReady
What should you actually expect when partnering with an MSSP?
Offloading technical complexity to a Managed Security Services Provider is one of the fastest ways to bolster your security and compliance readiness—if you choose the right partner.
Our latest resource covers key expectations every organization should set before onboarding an MSSP, from continuous monitoring to expert-led threat management.
👉 Check out the blog post to learn more: hubs.li/Q04zkS9k0
#Cybersecurity #MSSP #GRC #DataProtection
In the healthcare space, building a strong cybersecurity and compliance program can feel like a moving target. 🎯
Transform security from a regulatory obligation into a foundation for trust, growth, and long-term success with our free guide for health tech startups.
👉 Read here: hubs.li/Q04xFMHm0
#HIPAA #HITRUST #Startup #StartupCulture
AI is moving fast—but are your governance practices keeping up?
For business leaders, AI governance isn’t just about putting rules around technology. It’s about making sure AI is being used responsibly, securely, and in a way that supports the business.
A few things worth thinking about:
• ❓ What exactly is AI governance—and why does it matter now?
• 🔐 How do you manage AI-related security, privacy, and compliance risks?
• 👥 Who should be responsible for AI decisions across the organization?
• 📋 What policies and controls should be in place?
• 🚀 How can organizations encourage AI innovation without creating unnecessary risk?
We put together a practical guide to help business leaders understand the fundamentals of AI governance and what it can look like in practice.
👉 Read the full guide: hubs.li/Q04y3jLd0
#AIGovernance #ArtificialIntelligence #Cybersecurity #Compliance #ResponsibleAI
What's new in cybersecurity this month? Our cybersecurity consulting team has the answer. 💡
From calls for a new AI safety framework to warnings about malicious browser extensions, get the scoop in this month's issue of Take5️⃣.
Read now: hubs.li/Q04xtZkQ0
#AI #GRC #Compliance #Phishing
Risk management and compliance aren’t the same thing.
🛡️Compliance asks: Are we meeting the requirements?
🔍Risk management asks: What could go wrong, and what should we do about it?
Both matter—but simply checking compliance boxes doesn’t always mean an organization is managing its biggest risks. Understanding the difference can help organizations better prioritize security, strengthen controls, and build resilience.
➡️ Read more in our latest blog post:
hubs.li/Q04xP1fF0.
As your company grows, so does your risk. 🚀
More employees, data, systems, and vendors can create new vulnerabilities and make it harder to understand where your biggest risks reside.
Our experts have created a step-by-step guide to help you build a sustainable process for assessing and managing risk. 👉 Check it out here: hubs.li/Q04w212X0
#GRC #RiskAssessment #StartupCulture
CCPA compliance isn’t just about checking a legal box—it’s about earning and maintaining customer trust.
As businesses collect and process more personal information, understanding the California Consumer Privacy Act (CCPA) has become increasingly important—even for organizations outside California.
So, what does CCPA compliance really require?
🔹 Understanding whether your organization falls within the law’s scope
🔹 Building a privacy-first culture across your organization
🔹 Giving consumers meaningful control over their personal information
🔹 Establishing processes for data access, deletion, and opt-out requests
🔹 Continuously monitoring regulatory changes and adapting your privacy program
Read our latest blog to learn more: hubs.li/Q04w7ksG0.
#CCPA #CaliforniaConsumerPrivacyAct #Cybersecurity #Privacy
From the team at BARR Advisory, we hope you and yours have a safe and happy Labor Day.
Our offices are closed today and will reopen tomorrow, Tuesday, September 8.
💡 When it comes to cybersecurity and compliance, the lowest price doesn’t always mean the lowest cost.
A budget auditing firm may seem like an attractive option, but cutting costs can create bigger risks down the road—from missed vulnerabilities and compliance gaps to costly remediation.
Our latest blog explores the drawbacks of using a budget cybersecurity and compliance auditing firm and what organizations should consider when choosing the right partner.
👉 Read the full article now: hubs.li/Q04vr21x0.
#Cybersecurity #Compliance #RaiseTheBARR
What’s new in cybersecurity? BARR’s consulting team has the scoop. 🗞️
From damaging data leaks to new macOS vulnerabilities, read our team’s picks for the top 5 headlines in cybersecurity this month: hubs.li/Q04tsHTr0
#CybersecurityNews #News #DataBreach

















