Lucas Hathaway

Lucas Hathaway has 10+ years of experience in information security. He is the Chief Revenue Officer at Rivial Data Security. He has worked with Rivial clients for years leading the consulting team and now leads the growth team with a focus on client success ensuring that Rivial’s platform exceeds client expectations.

4 min read

Incident Response Plan: Data Breach

Lucas Hathaway: 29 Apr 2025

Here are the key takeaways from this blog: Know the Regulatory Definitions and Deadlines — NCUA and FDIC have strict criteria and timelines (72 and 36 hours) for reporting breaches. Understanding these definitions is critical to ensure timely,...

4 min read

NCUA Examiner Insights: 2025 Top Priorities

Lucas Hathaway: 28 Mar 2025

Here are the key takeaways from this blog: NCUA's top findings in 2024: Credit unions struggled with BCDR readiness, outdated or inconsistent risk...

3 min read

Governance, Risk, and Compliance (GRC): 2025 Guide

Lucas Hathaway: 22 Mar 2025

Key takeaways from this GRC guide: AI's Impact on GRC: The rise of AI-driven cyber threats highlights the urgent need for organizations to strengthen...

2 min read

Frameworks to replace FFIEC’s CAT

Lucas Hathaway: 12 Mar 2025

Here are the key takeaways: FFIEC CAT retirement by August 2025: With the Cybersecurity Assessment Tool being phased out, institutions should begin...

4 min read

Assessing Fourth-Party Vendor Risk

Lucas Hathaway: 12 Feb 2025

Key takeaways from the blog:

5 min read

NIST Compliance: A Complete Guide

Lucas Hathaway: 05 Feb 2025

NIST frameworks form the backbone of modern compliance and are essential for meeting regulatory mandates and demonstrating security maturity. When...

3 min read

NIST 800-55: The Ultimate Guide

Lucas Hathaway: 28 Dec 2024

Here are the key takeaways from the blog: Risk-based, outcome-focused metrics: NIST 800-55 shifts the focus from compliance to measuring the...

4 min read

10 Best Virtual CISO Services for 2025

Lucas Hathaway: 11 Dec 2024

For security leaders responsible for safeguarding critical business data, choosing the right vCISO (Virtual Chief Information Security Officer)...

7 min read

Integrating MITRE ATT&CK within Security Risk Assessments

Lucas Hathaway: 25 Oct 2024

Here are key takeaways from the blog: Traditional Risk Assessments Fall Short: Most IT risk assessments overlook real-world adversary behavior....

4 min read

AI Risk Assessment: A Roadmap for Financial Institutions

Lucas Hathaway: 11 Oct 2024

Here are the key takeaways from this blog: AI Introduces New, Critical Risks: From data privacy breaches to algorithmic bias, AI systems in financial...

Prev 1 2 3 4 5 Next