Lake Ridge Technologies, LLC

Home
United States
New York, NY
Lake Ridge Technologies, LLC

Cub Cyber is a cybersecurity and compliance firm that specializes in helping you navigate the scope

10/01/2026

DoD suspended CMMC Phase 2 on July 13, 2026, but inflated SPRS scores still carry False Claims Act risk. Phase 1 self-assessments remain enforced, so each claimed control needs current, verifiable evidence. Treat every SPRS point as a claim you can prove.

09/30/2026

ECC 2-5-3 calls for firewall and IPS configuration reviews at least once a year. A dashboard screenshot won’t carry the assessment; keep the dated review record and proof that necessary changes were approved. Can you pull last year’s review and approval without chasing three people?

09/29/2026

Disabling a former vendor’s account can still leave an active Microsoft 365 session open. Revoke sign-in sessions at the same time, then log both actions so partial offboarding doesn’t create false confidence. Does your offboarding process revoke active sessions or only disable the account?

09/24/2026

A 30-minute screen-lock delay exposed patient data just 6 minutes after an employee left a shared Chromebook. MFA couldn’t help because Gmail and Drive were already open in the active session. Set short idle locks and require sign-out at every shared-device handoff.

09/23/2026

A 4-hour triage target falls apart when Defender shows the alert sat unassigned for 2 days. For ISO 27001 5.25, the matching ticket must record the analyst’s review and closure or escalation decision. Can your team trace one recent alert from detection to a documented decision?

09/22/2026

One unreviewed Google Apps Script sent content from 37 files, including 6 controlled technical documents, to an outside server. A user approved broad Drive access, and an installable trigger ran the script without another launch. Could your team identify every Apps Script with Drive access today?

09/17/2026

Two break-glass accounts should be the limit for Global Administrator access in Microsoft 365. Other admins can use time-limited roles through PIM, with MFA and approval from a different person. If one admin can create an account, grant privileged access, and conceal the change, AC.L2-3.1.4 isn’t met.

Keep Global Administrator access to two emergency accounts.

09/16/2026

Your media disposal contract should require at least 7 years of retention for manifests and destruction certificates. If the vendor can’t produce that evidence later, proving chain of custody during an audit gets much harder. Does your current contract state how long those records are kept?

09/15/2026

45 CFR § 164.310 can reach something as ordinary as a network closet lock. If a former contractor doesn’t return a key, document the rekey date, invoice, and updated keyholder list. A lock change without a record leaves a gap in your HIPAA evidence.

09/10/2026

HIPAA’s 6-year documentation rule doesn’t automatically mean every audit log must be kept for 6 years. Log retention should reflect your risk analysis, legal needs, investigation needs, and system limits. Set a written retention standard you can defend, then measure against it.

Address

New York, NY

Website

https://www.lakeridge.io/

Alerts

Be the first to know and let us send you an email when Lake Ridge Technologies, LLC posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.