Insights

Reporting from the practitioners doing the work.

Industry analysis, regulatory updates, and original research from the Convergent team — written by the people who run engagements in regulated industries, not a content marketing function.

Recent insights

Industry research, regulatory analysis, and original reporting.

100 firms warn of a limited window to strengthen cyber defenses as AI-enabled cyber attacks are expected to become far more widespread and sophisticated in the coming months.

Security gaps across the media production supply chain remain widespread, and the threat is intensifying. As AI increases the speed, scale, and sophistication of attacks, Service Providers are struggling to keep pace.

The confusion hasn't gone away. After years of industry education, organizations still conflate penetration testing with vulnerability scanning — and routinely overpay for the latter while believing they've done the former.But something has changed. The cost of that mistake is higher than it was two years ago, because the threat landscape has shifted in ways that make real penetration testing more important, not less — and make automated scanning look even more insufficient by comparison.

Convergent Helps DNEG Achieve TPN Gold Across 17 Sites Globally

Announcing the release of the MPA Content Security Best Practices v5.3.1 and the new four-tier Trusted Partner Network Shield System launching on September 9

Convergent is proud to announce that Sr. Director, International; Ben Bradley has earned his Competence in Zero Trust (CCZT) from the Cloud Security Alliance.

Our very own Arnel Manalo, CSO for Convergent was featured recently on the Creditor’s Bar Buzz podcast discussing the NCBA Committed to Security program, AI privacy challenges, and PCI compliance.

AI presents real opportunities for creditors’ rights professionals to enhance efficiency, but also new privacy and compliance challenges. Convergent examines what law firms and NCBA members need to know.

Convergent is proud to announce that Ahmed Yusuff, Cybersecurity Assessor has earned his Competence in Zero Trust (CCZT) from the Cloud Security Alliance.

Convergent is proud to announce that Senthil Kumar, Cybersecurity Assessor has earned his Competence in Zero Trust (CCZT) from the Cloud Security Alliance.

Convergent is proud to announce that Director of Security Assurance; Wilhelm Wilim has earned his Competence in Zero Trust (CCZT) from the Cloud Security Alliance.

Convergent is proud to announce that Vice President International (Information Security); Nik Savchenko has earned his Competence in Zero Trust (CCZT) from the Cloud Security Alliance.

Does your organization rely on RFID locking technology to safekeep access to rooms or housing units? You should be aware of this latest security vulnerability — and how Convergent also works to identify these flaws and patch holes in RFID security.

OOONA and Convergent are collaborating to introduce a new security course for the media localization industry covering key content security requirements.

Federal credit union regulators are focusing on incident response in 2024 and there are several recent headlines — and new incident reporting requirements — that illustrate why these types of financial institutions need to be prepared.Community banks face heightened vulnerability when compared with larger financial institutions because of their limited information security resources and greater reliance on third-party service providers, which, in turn, have been prime targets for ransomware attacks, according to the Office of Financial Research’s annual report, which assesses risks associated with the U.S. financial system. Last November, 60 credit unions experienced outages after a ransomware attack on a widely-used cloud services provider.

Ransomware actors are now using SEC reporting requirements as leverage against victims — Convergent examines this emerging extortion tactic and what financial services organizations need to know.

Physical security and digital security are inseparable. Convergent examines how physical access vulnerabilities create direct pathways to sensitive digital assets.

Data compromises are at record levels. Convergent outlines concrete steps organizations can take to prepare and reduce their exposure to breaches.

Convergent is pleased to announce the addition of John Poole as Vice President for Strategy & Growth. John brings more than two decades of experience in cybersecurity sales and advisory services as well as a reputation for great customer service.

Convergent’s Director of Digital Forensics and Incident Response, Devin Hill, has earned the EC-Council’s Computer Hacking Forensic Investigator certification.

Convergent is pleased to announce that Devin Hill, Director of Digital Forensics and Incident Response, has completed the Certified Cryptocurrency Forensic Investigator (CCFI) program through the McAfee Institute.By earning this nationally accredited certification, Devin can utilize new state-of-the-art techniques to conduct blockchain and bitcoin-related investigations that can identify criminals using cryptocurrency. This knowledge will help Devin and the rest of Convergent’s digital forensics experts continue to arm clients with actionable intelligence that can help recover stolen funds.

Convergent is thrilled to announce it has hired Jeff Feliciano as Director of International Strategy. Jeff worked for 16 years in the aviation industry as a consultant and system engineer and he brings a seasoned international business perspective to Convergent.

We are excited that Leslie Martin has joined Convergent as Managing Director. With 20 years of experience in client management, Leslie is a trusted advisor known for assembling elite teams to achieve outstanding client results. In her new role, Leslie remains focused on delivering exceptional customer satisfaction and successful project outcomes as Convergent continues to provide world-class cybersecurity, business continuity, and transformation solutions to our valued customers.

Most cybersecurity problems ultimately end up on a lawyer’s desk. Convergent examines how security practitioners can support legal teams before, during, and after a security incident.

Not every organization knows when it’s time to bring on a Chief Information Security Officer. Convergent identifies four clear signals that your organization needs dedicated security leadership.

Once you’ve decided to bring on a Chief Information Security Officer, the real challenge begins. Convergent shares what to look for and how to set your CISO up for success.

Convergent and Evercast jointly announced the completion of the first TPN Gold Shield assessment for cloud security in the TPN+ program.

Convergent announces the promotion of Pritam Parab to VP Asia Pacific Services and the appointment of Wilhelm Wilim as Director of Security Assurance for European operations.

The Chief Information Security Officer role has evolved to board-level importance. Convergent examines what this shift means for organizations building or reshaping their security leadership.

Phishing attacks keep evolving. Convergent breaks down the key types of phishing every organization’s team should know and how to defend against them.

Mobile app attacks are increasing rapidly. Convergent explains how organizations should approach auditing their mobile application security posture.

SMEs are increasingly targeted by ransomware and breach attacks. Convergent outlines the core cybersecurity steps smaller organizations can take to reduce their risk.

Global cybersecurity threats require coordinated responses. Convergent examines the themes from Davos and what cooperation in a fragmented world means for enterprise security.

Convergent announced it is working with leading VFX provider DNEG on security assessments through the new TPN+ platform.

With ransomware attacks up more than 130% in 2022, Convergent urges organizations to set clear cybersecurity goals and build a realistic roadmap for the year ahead.

Data unavailability is an overlooked cybersecurity threat. Convergent examines how law firms and regulated organizations can plan for and protect against business disruption attacks.

Convergent reviews the major cybersecurity vulnerabilities and breach trends from 2022 and explains why the same risks continue to expose organizations going into the new year.

Insider threats remain one of the most dangerous and underestimated risks in cybersecurity. Convergent examines patterns, warning signs, and defenses against threats from within.

Convergent forensic analyst Cloye Hairgrove was recognized among Colorado’s top innovators under 25 by the Denver Business Journal.

Social engineering attacks are growing more sophisticated and targeted. Convergent examines the latest schemes and how businesses can protect their teams.

Passwordless authentication is gaining traction. Convergent examines what the shift away from passwords could mean for enterprise security.

Convergent expands its application security practice with the recruitment of Jason Shea, strengthening the firm’s AppSec assessment and advisory capabilities.

Demand for CISOs is outpacing supply. Convergent examines the talent gap in security leadership and what organizations can do when a full-time CISO isn’t immediately available.

Convergent co-founder and COO Dan Nelson was named to The American Lawyer’s 2022 list of Trailblazers in cybersecurity and legal technology.

Convergent’s Threat Intelligence Practice Lead Erin Beffa presented at the 2022 NALA Conference and Expo.

Convergent Threat Intelligence Practice Lead Erin Beffa has earned the Open-source Intelligence Professional (OSIP) certification from IntelTechniques.

Despite years of awareness campaigns, attackers continue to exploit the same proven vulnerabilities. Convergent examines why old techniques keep working.

Meet Devin Hill, Convergent’s Director of Digital Forensics and Incident Response.

Convergent has joined the Media & Entertainment Services Alliance.

Convergent honored as a Colorado Company to Watch.

Convergent announces the addition of Devin Hill as Director of Digital Forensics and Incident Response.

Convergent examines how attackers exploit search engine behavior to reach victims.

Convergent team attended the Automotive ISAC to provide professional cybersecurity training.

Data breaches were the leading cause of CCPA lawsuits in 2021. Convergent examines what this means.

Cybersecurity incidents inevitably land on legal counsel’s desk. Convergent outlines what lawyers need to understand about incident response to protect their clients and manage disclosure obligations.

Convergent examines the cybersecurity implications of digital access control technology.

Convergent’s Erin Beffa recognized among ColoradoBiz Top 50 Most Influential Young Professionals.

The Trusted Partner Network expands its program to cover cloud and application security. Convergent contributed to the framework development.

Meet Victor Teissler, Convergent’s Penetration Practice Lead.

Remote working has accelerated adoption of SaaS and cloud tools in M&E workflows, creating new security challenges for content owners and their supply chains.

GDPR treats voice as personal data. Convergent warns M&E companies must respect voice actor rights and process voice data in full compliance with GDPR.

Convergent has joined the Cloud Security Alliance, reinforcing its commitment to cloud security standards and expanding its cloud assessment expertise.

As hybrid and remote work becomes permanent, Convergent outlines three essential cybersecurity steps organizations must take to protect a distributed workforce.

Convergent outlines the critical considerations that determine response quality when handling security incidents under pressure.

Convergent outlines five essential questions every organization should ask before commissioning a penetration test.

Convergent explains the critical difference between vulnerability assessments and penetration tests.

Convergent examines what critical infrastructure operators need to do to comply with new cybersecurity requirements.

Convergent examines how trusted third-party vendor relationships become security liabilities and attack vectors.

Convergent examines rising geopolitical threats and what financial institutions need to do in response.

The Trusted Partner Network names Terri Davies as its first full-time President, signaling continued growth and investment in content security standards.

Convergent explains the difference between penetration testing and vulnerability assessments and when each is appropriate.

Convergent examines the Red Curl threat actor group’s tactics and what defenders need to know.

In late January 2021, news outlets across the globe published reports about the downfall of what many called the most disruptive botnet of recent history: EMOTET. Not unlike Imhotep the mummy, who had similar sinister goals of domination and colorful phonetics, EMOTET is rising from the grave.

Convergent contributes to the DPP Cloud for Media Post Production report as cloud workflow migration accelerates across the M&E sector.

Our own JT Gaietto co-presented with Chase Cunningham at the recent Mortgage Bankers Association conference, showing how real and costly cyberattacks have become, particularly in 2021.

The DPP Committed to Security Programme will be delivered through Convergent’s Sanctum platform, providing suppliers an interactive security self-assessment experience.

Some of the best online security features aren’t so secure anymore: Online “secrets” erode Multi-Factor Authentication efforts.

Convergent participated in the DPP panel discussing cloud and SaaS application security assurance for post-production workflows.

Convergent expands cloud and application security capabilities with new leadership, meeting growing demand for cloud-native security assessments.

IN2CORE and QTAKE Cloud completed a cloud and application security assessment with Convergent, validating security controls for their production workflow platform.

Convergent examines why perimeter security testing became critical as organizations shifted to distributed working during the pandemic.

ftrack, the production tracking and review platform, has completed a cloud and application security assessment with Convergent.

Convergent presented a different perspective on workflow security at a CPS event, challenging outdated controls and advocating for context-aware security assessment.

Convergent explains open-source intelligence and how it is used in real-world offensive and defensive security engagements.

A message from Convergent founder Justin Whitehead on Veterans Day 2020, honoring those who have served.

Convergent launches a managed cloud configuration vulnerability scanning service, helping organizations continuously identify and remediate cloud security misconfigurations.

Convergent CEO Mathew Gilliat-Smith spoke at M&E Day about securing the newly distributed M&E supply chain and the security implications of remote collaboration tools.

Convergent has expanded capacity in the APAC region with additional full-time security assessment resource, responding to increased demand from content owners.

Convergent and other TPN assessors adapted their assessment methodology to overcome COVID-19 challenges, maintaining assessment quality through remote and hybrid approaches.

Convergent highlights the increasing threat of cyber attacks targeting celebrities and the entertainment industry’s high-value personal data.

True data protection compliance requires a holistic approach that goes beyond checkbox exercises — Convergent examines what effective privacy programs look like in practice.

Convergent develops open-source intelligence capabilities helping clients understand their external exposure and information adversaries could exploit.

Convergent examines whether security should be viewed as a cost or an investment, and what high-profile cyberattacks reveal about organizational security maturity.

IYUNO Media Group presented its security enhancement program and regional expansion strategy at the HITS Europe Annual Summit.

Convergent joins SMPTE Hollywood for an evening of dialogue on how Hollywood studios are evolving their approach to cybersecurity across the content supply chain.

Convergent argues that effective security requires deep understanding of business processes and workflows — not just technical controls applied in isolation.

Convergent adds experienced industry executives to its TPN security assessment team to meet growing demand from post-production facilities.

Tony Ramsay, Senior Director Americas at Convergent, has relocated to Los Angeles to expand TPN security assessment capacity across North and South America.

Convergent expands its team and capabilities to meet rising demand for TPN security assessments and broader security consultancy across the M&E supply chain.

Convergent has reached its 75th confirmed engagement for studio vendor security assessments since the start of the Trusted Partner Network program.

Subscribe

New insights, in your inbox monthly.

One email per month, no marketing, just the analysis the team has been working on. Unsubscribe with one click.

Consent Preferences