Lucas Hathaway

Lucas Hathaway has 10+ years of experience in information security. He is the Chief Revenue Officer at Rivial Data Security. He has worked with Rivial clients for years leading the consulting team and now leads the growth team with a focus on client success ensuring that Rivial’s platform exceeds client expectations.

2 min read

Frameworks to replace FFIEC’s CAT

Lucas Hathaway: 12 Mar 2025

Here are the key takeaways: FFIEC CAT retirement by August 2025: With the Cybersecurity Assessment Tool being phased out, institutions should begin transitioning now to alternative frameworks that support long-term compliance and cybersecurity...

4 min read

Assessing Fourth-Party Vendor Risk

Lucas Hathaway: 12 Feb 2025

Key takeaways from the blog:

5 min read

NIST Compliance: A Complete Guide

Lucas Hathaway: 05 Feb 2025

Here are the key takeaways from this blog: NIST is the foundation of modern compliance. Its frameworks underpin mandates like CMMC, FISMA, and HIPAA,...

3 min read

NIST 800-55: The Ultimate Guide

Lucas Hathaway: 28 Dec 2024

Here are the key takeaways from the blog: Risk-based, outcome-focused metrics: NIST 800-55 shifts the focus from compliance to measuring the...

4 min read

10 Best Virtual CISO Services for 2025

Lucas Hathaway: 11 Dec 2024

For security leaders responsible for safeguarding critical business data, choosing the right vCISO (Virtual Chief Information Security Officer)...

7 min read

Integrating MITRE ATT&CK within Security Risk Assessments

Lucas Hathaway: 25 Oct 2024

Here are key takeaways from the blog: Traditional Risk Assessments Fall Short: Most IT risk assessments overlook real-world adversary behavior....

4 min read

AI Risk Assessment: A Roadmap for Financial Institutions

Lucas Hathaway: 11 Oct 2024

Here are the key takeaways from this blog: AI Introduces New, Critical Risks: From data privacy breaches to algorithmic bias, AI systems in financial...

Properly Assessing Third and Fourth Party Cybersecurity

5 min read

How to Assess 3rd vs 4th Party Risk Management

Lucas Hathaway: 27 Sep 2024

Here are the key takeaways from this blog: Third- & Fourth-Party Risk Is a Growing Threat: Breaches increasingly originate from vendors—not your own...

4 min read

Preparing for FFIEC CAT Sunset: Key Takeaways for Financial Institutions

Lucas Hathaway: 30 Aug 2024

Here are the key takeaways from this blog: FFIEC will retire the Cybersecurity Assessment Tool (CAT) by August 2025, urging financial institutions to...

5 min read

Guide to Cyber Risk Treatment

Lucas Hathaway: 30 Aug 2024

Here is a summary of this blog: Organizations face an overwhelming and evolving landscape of cybersecurity threats that require strategic, ongoing...

Prev 1 2 3 4 5 Next