Part 4 of 5: Disaster Recovery (DR) and Incident Response (IR) Plans For financial firms, the ability to respond effectively to a cyber incident can make all the difference in safeguarding client data and ensuring continuity. Disaster Recovery (DR) and Incident Response (IR) Plans are critical components of 23 NYCRR 500, PCI DSS, and NY […]
Part 3 of 5: Risk Management, Encryption, and Continuous Monitoring For financial organizations, securing sensitive client data requires more than basic protections. 23 NYCRR 500 mandates proactive and continuous oversight, while PCI DSS requires specific measures to safeguard credit card data for businesses that accept card payments. Together, Risk Management, Encryption, and Continuous Monitoring play […]
Part 2 of 5: The Written Information Security Program (WISP) and Data Access Controls For financial professionals in New York, securing sensitive data isn’t just a best practice; it’s a legal obligation. 23 NYCRR 500, the NY SHIELD Act, and WISP—as defined in the Gramm-Leach-Bliley Act—all require organizations to maintain comprehensive data security protocols. Establishing […]
Part 1 of 5: Topic Overview and Understanding 23 NYCRR 500 Financial organizations in New York—especially smaller firms like CPA offices, insurance brokers, mortgage brokers, financial advisors, credit unions, and other financial service providers—are under increasing pressure to protect client data. As cyber threats grow more sophisticated, state and federal regulations mandate stringent data protection […]
In the latest Patch Tuesday update, Microsoft has issued an urgent warning about a serious, yet unpatched, vulnerability affecting Microsoft Office products. This vulnerability, identified as CVE-2024-38200, poses significant risks to businesses of all sizes. Exploitation of this vulnerability can lead to unauthorized access to sensitive data, execution of arbitrary code, and potentially severe disruptions […]
In the ever-evolving landscape of cybersecurity, recent incidents like the Volt Typhoon exploit serve as stark reminders of the vulnerabilities that businesses face. At CDML Computer Services, we recognize the critical need for comprehensive system monitoring, diligent patch management, and regular upgrading of old equipment to safeguard your IT infrastructure. The Volt Typhoon exploit, which […]
Recently, Ascension, one of the largest private healthcare systems in the country, fell victim to a significant cyberattack. This event has raised concerns across all sectors, emphasizing the vulnerability of digital infrastructures to cybersecurity threats. In this blog post, we will explore the details of the Ascension cyberattack, its implications for the healthcare industry, and […]
As the threat of corona virus looms ever larger,I feel that it’s apropos to dispense some advice on how to best prepare your business if disaster strikes.My name is Len Kaplan and I’m the CEO of CDML Computer Services, a Managed Service Provider based in Queens, NY. Since most of our clients are in the SMB market space,I will target my advice to small and medium sized companies. I will break this advice into two sections: interpersonal and technology.
As employers, we always worry about our workforce. Not just their performance, as some pundits would have you believe, but about their general well being. Employers recognize that their business is first and fore most a COMMUNITY and in any healthy community members care about each other. So, now, here we are-in the middle of this raging […]
This free report will explain in simple, non – technical terms what you need to look for when outsourcing your IT support, as well as cost – saving strategies, insider tips and 16 revealing questions you MUST ask any computer consultant before giving him access to your computer network. If your current guy can’t answer a confident “Yes” to all 16, it might be time to look for someone else You’ll discover:
© Copyright 2025 CDML Computer Services, Ltd. All Rights Reserved.
