Capital One, Governance, and the 90% Rule in Cybersecurity

CapitalOne

Most cyber breaches aren’t caused by elite hackers—they’re caused by missed steps, misconfigurations, and unclear accountability. The 2019 Capital One breach is a case study in how weak governance, not weak tech, opens the door to disaster. Here’s how stronger oversight could have changed everything—and why it still can.

Extending CDM into the Cloud

Extending CDM into the Cloud

ControlPoints led the first CDM deployment in the cloud across the US federal government. In this case study we share our lessons learned, some noteworthy challenges, and recommendations for improving the program with national security implications.