Randy Lindberg

Randy Lindberg is the founder and CEO of Rivial Data Security. He has more than twenty years of experience in information security and started Rivial to fix the issues he saw as an Information Systems Security Officer in the U.S. Air Force and Information Security Manager at a $4 billion dollar financial institution.

9 min read

How to Choose the Right vCISO: A Guide for Highly Regulated Organizations

Randy Lindberg: 08 Jul 2026

Quick answer: Choose a vCISO who acts as a strategic security leader, not an operator. The right one owns risk, governance, board reporting, and the examiner relationship, asks for read-only access, and can explain their cyber risk model in dollars....

9 min read

NIST AI RMF: Where to Start with AI Governance

Randy Lindberg: 10 Jun 2026

Quick Answer: AI governance starts with the Govern function of the NIST AI RMF. That means establishing an AI policy, updating existing cybersecurity...

4 min read

Risk Assessment vs. Risk Analysis

Randy Lindberg: 12 Nov 2025

Risk assessment and risk analysis are distinct but complementary, and understanding the difference helps organizations avoid blind spots in security...

3 min read

How to Create a Cybersecurity Program

Randy Lindberg: 02 Apr 2025

Here are the key takeaways from this blog: Start with a self-assessment: Understand what data you're storing, audit systems and devices, and evaluate...

3 min read

NIST Vendor Security Framework 101: A Comprehensive Guide

Randy Lindberg: 28 Mar 2025

Key takeaways from this guide:

2 min read

Data Breach Statistics to Know for 2025

Randy Lindberg: 06 Mar 2025

Here are the key takeaways from this blog: The average cost of a data breach continues to rise, reaching $4.88 million globally in 2024, with...

3 min read

NIST Special Publication (SP) 800 Series

Randy Lindberg: 05 Mar 2025

Here are the key features of this blog: NIST SP 800 Series serves as the gold standard for information security, offering detailed guidelines on...

5 min read

6 Cybersecurity Metrics Security Leaders Should Avoid Reporting

Randy Lindberg: 06 Feb 2025

Here are the key features of this blog Avoid Reporting Overly Technical Metrics: Common metrics like spam emails blocked or CVSS scores can mislead...

3 min read

Complete Guide to Cyber Risk Quantification (CRQ)

Randy Lindberg: 29 Jan 2025

Here are four key takeaways from the blog: CRQ turns cyber threats into financial terms, allowing organizations to assess and prioritize risks based...

4 min read

Advanced IT Risk Assessment Techniques

Randy Lindberg: 06 Jan 2025

Here are the key takeaways from the blog: Advanced techniques streamline IT risk assessments: The firm's innovative approach reduces client effort,...

1 2 3 4 5 Next