<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[LockFort]]></title><description><![CDATA[LockFort]]></description><link>https://www.lockfortsecurity.com/field-notes</link><generator>RSS for Node</generator><lastBuildDate>Sun, 31 May 2026 22:12:44 GMT</lastBuildDate><atom:link href="https://www.lockfortsecurity.com/blog-feed.xml" rel="self" type="application/rss+xml"/><item><title><![CDATA[Most Small Organizations Don't Have a Security Problem. They Have a Decisions Problem.]]></title><description><![CDATA[Why the most useful security work doesn't start with a tool. Walk into any small organization and ask, "What's your biggest security risk right now?" The most common accurate answer is some version of "I'm not sure." That's not a failure of effort or competence. Most small organizations have done things. They've got antivirus running on their laptops. They've got a firewall. They've sent reminders about not clicking phishing links. Maybe they've had a vulnerability scan done at some point....]]></description><link>https://www.lockfortsecurity.com/post/most-small-organizations-don-t-have-a-security-problem-they-have-a-decisions-problem</link><guid isPermaLink="false">6a0a31732fd8b3b69694933a</guid><pubDate>Mon, 18 May 2026 11:30:10 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/f4830e_9f87b4a8d9204b1b8f93ea25fca43af0~mv2.png/v1/fit/w_1000,h_630,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Johnnie L. Johnson III</dc:creator></item><item><title><![CDATA[Three Questions That Make Cybersecurity a Real Board Conversation]]></title><description><![CDATA[For nonprofit leaders who want their board to engage on security but don't know where to start. I've been in a handful of nonprofit board meetings where cybersecurity came up. The shape is usually the same: a bullet on the risk register, a brief mention, a nod, and on to the next agenda item. Sometimes there's a flurry of concern triggered by something in the news. Sometimes there's a question or two. Then the topic recedes for another six months. That's not anyone's fault. Most nonprofit...]]></description><link>https://www.lockfortsecurity.com/post/three-questions-that-make-cybersecurity-a-real-board-conversation</link><guid isPermaLink="false">6a0a3bfb2fd8b3b69694a57d</guid><pubDate>Mon, 18 May 2026 11:15:04 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/f4830e_a6720b69bca14102904c629aecabccee~mv2.png/v1/fit/w_1000,h_630,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Johnnie L. Johnson III</dc:creator></item><item><title><![CDATA[Cyber Insurance Questionnaires: What to Do When the Answer Isn't Yes]]></title><description><![CDATA[A practical guide for small organizations and nonprofits. For many small organizations, the cyber insurance questionnaire is the first time security shows up as a hard requirement rather than an abstract concern. The questions are technical, the stakes feel real — your premium, your renewal, your coverage — and the temptation is obvious: check "yes" wherever possible and move on. This is a post about why that temptation is a trap, and what to do instead. Why accurate answers protect you more...]]></description><link>https://www.lockfortsecurity.com/post/cyber-insurance-questionnaires-what-to-do-when-the-answer-isn-t-yes</link><guid isPermaLink="false">69ee9dac40a0465aa6c83d1a</guid><pubDate>Mon, 18 May 2026 11:00:16 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/f4830e_6a3bc9fcc18045148ec27a8b05e2efca~mv2.png/v1/fit/w_1000,h_630,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator>Johnnie L. Johnson III</dc:creator></item></channel></rss>