Chris Ensey

Join us on Wednesday, May 29th at 8:30 AM to discover how CERT Ukraine and CISA work together to combat cyber threats! Limited tickets available - act fast! Link in bio for more details and to get tickets. #CERTUkraine #CISA #CyberDefense #Collaboration #CyberSecurity.

12

A very insightful post by a fellow CISO Aus Alzubaidi on how to fight #disinformation in a systematic and organized manner bases on #MITRE ATT&CK methodology ... A topic indeed every CISO must consider on their priorities. #InformationSecurityManagement #InformationSecurity #CyberSecurity #CISO

5

The following is an excelente piece by Francisco Ramírez de Arellano (VP, Tenable) on how cybersecurity becomes a national security issue. He explains how the convergence of Operational Technology (OT) and Information Technology (IT) systems in today's facilities of most industries and companies, certainly a fortunate and welcomed trend in so many ways, it also gives way to a greater exposure to cyber threats such as exploiting known but unpatched vulnerabilities and deploying ransomware. Are we discussing that in Mexico? no, not really or not at least with the depth and level of priority that we should be, especially with the size of our economy and our level of integration with the U.S. economy. As in so many other things, we lack strategic vision in Mexico, busy with the scandals and distractions of our village-like public life. https://lnkd.in/efTE6rTQ

6

Can you pitch? Excited to be puling together an AI challenge designed to tease out a viable concept for an accelerated approach to an increasingly burdensome and repetitive cybersecurity challenge that corporations and government spend millions on. The Alan B. Levan | NSU Broward Center of Innovation has one of the coolest rooms designed just for this type of event. What CSP has the best and most cost effective AI tools that can speed time to market? How quickly can the tools be adapted to the challenge? Can security as needed for CUI be baked in? Can the fidelity of the training data be guaranteed on a continuous basis? What will the return on investment look like? See you soon in the pitch room, the judges will have their catcher’s mitts on! Watch this space! U.S. Cyber Command Academic Engagement Network- National Security Agency Centers of Academic Excellence in Cybersecurity accredited colleges and Universities-Nova Southeastern University SOFWERX United States Southern Command Florida International University #Cybersecurity #AI #GRC #GenerativeAI #AWS #Google Amazon Web Services (AWS) Microsoft Azure Oracle Google

9

3 comentarios

GSA announced last week that, "Starting June 8, 2024, GSA will begin collecting Common [#SSDF Attestation] Forms for new contracts (including micro-purchases) and the exercise of contract options, that include the use of software, regardless of whether or not the software is considered critical." This is a major update because it means all vendors dealing with GSA or a GSA contracts must comply in June and NOT in September, like originally thought. #ZeroTrust, #CyberSecurity, #SoftwareDevelopment, #DepartmentOfDefense, #InfoSec, #NationalSecurity, #DefenseTech, #CyberDefense, #SecureSoftware, #MilitaryTechnology, #DevSecOps, #InformationSecurity, #CyberAwareness, #GovernmentTech, #CyberThreats, #TechInnovation, #DigitalTransformation, #CloudSecurity, #DataProtection, #NetworkSecurity, #SecurityArchitecture, #CyberResilience, #IdentityManagement, #Encryption, #Compliance, #SecureCoding, #CyberRiskManagement, #AIInCybersecurity, #ThreatIntelligence, #CriticalInfrastructure, #CyberLaw, #CyberEthics, #TechnologyLeadership, #PublicSectorInnovation, #TechGovernance, #SecureByDesign, #PrivacyByDesign, #MilitaryInnovation, #DefenseStrategies, #CyberWarfare, #CyberDiplomacy, #GovernmentContracting, #DefenseContractors, #MilitaryTec, #TechPolicy, #SecureInfrastructure, #NationalCybersecurity, #TechForDefense, #SecureDevelopment, #GovernmentIT 

16

2 comentarios

I want to record some episodes of Cyber Frontiers: The Nearshore Cyber Podcast about cyber incident response tabletops. Who are Mexico's best TTX experts? If you do a lot of cyber IR tabletops, speak English, and live in Mexico, I want to talk to you. 🎙 Please tag TTX experts' profiles in the comments, send me a connection request, or DM me. Nearshore Cyber #ttx #mexico

22

The transition to PQC is estimated to cost U.S. federal agencies $7.1 billion by 2035, with costs likely to increase. Sitehop demonstrated our PQC 100Gbps SAFE Series solution last year. Now that NIST has made its recommendations for PQC, we will release our solution by the end of this year. Message us to learn how you can get on the list for the first release!   #PQC #cybersecurity #future

32

1 comentario

The key to Digital Trust is building a CULTURE capable of mitigating digital risk to protect organizational DIGITAL VALUE. The DVMS Institute NIST Cybersecurity Framework Overlay System assures that every digital service created is protected and delivered in alignment with an organizational cybersecurity risk management plan. Creating and Delivering DIGTIAL TRUST requires more than theory. It requires a culture plus an underpinning overlay system capable of assuring the digital business performance, resilience, and trust government regulators and operational stakeholders expect. https://lnkd.in/g_mQWH4T

11

Join us on Wednesday, May 29th at 8:30 AM to discover the joint strategies used by CERT Ukraine and CISA for cyber defense! Don't miss out on this opportunity to learn from the experts. Link in bio for more details and to get tickets. #CyberDefense #CERTUkraine #CISA #CyberSecurity #EventAlert

15

Chile's CCU Cybersecurity Breach: Why Zero Trust is Non-Negotiable The recent cybersecurity breach at Chile's CCU underscores the pressing need for businesses to reevaluate their security strategies. No company is immune from cyber threats in today's landscape. Adopting a Zero-Trust approach is crucial in mitigating risks and safeguarding sensitive data. This model emphasizes continuous verification of access, regardless of whether it's from internal or external sources. By implementing Zero-Trust, companies can enhance their security posture, contain breaches, and uphold customer trust in an era of rampant cyberattacks. #ZeroTrustAdvocate #Cybersecurity #DataProtection #BusinessSecurity #DigitalResilience #PINCommunityAdvocate

2

ICYMI: Office of Inspector General Report in Brief from the Alabama Medicaid Management Information Systems (MMISs) and Eligibility and Enrollment (E&E) systems security audit. The scope of the audit was limited to external facing systems and a phishing exercise (GoPhish). https://lnkd.in/emGaGWQa The OIG audit reports are always good to get a glimpse of the focus of these security audits. The response to recommendations can also be helpful for orgs struggling with some of the same issues (Starting on page 14). Key Takeaways 1) Vulnerability Management: Existing tools were not effective in detecting system flaws. 2) Software Development: Issues were not remediated prior to deploying on production systems. 3) Phishing was not successful (0 opened emails......) #healthcare #hipaa #cybersecurity #hhs #riskmanagement #risktolerance #riskassessment #criticalinfrastructure #hitrust #criticalcontrols #penetrationtesting #vulnerabilityassessment #vulnerabilitymanagement

2

Stimson's series on accountability in cyberspace continues

8

The base requirements of the CMMC are largely based on the security control families defined in the Federal Information Processing Standard Publication 200 (FIPS 200) and used in the National Institute for Standards and Technology Special Publication 800-53 (NIST SP 800-53) , the NIST Special Publication 800-171 (NIST SP 800-171) and the NIST Special Publication 800-171 (NIST SP 800-172). Within NIST S800-53, NIST SP 800-171, and NIST SP 800-172 security controls are grouped into families of a general security topic such as access control, or awareness & training. Control families are labeled by their full name and a unique two-character identifier to make the listing of controls within the family less tedious. For example, the access control family is referred to as “AC.” CMMC uses these same control families and two-character identifiers as the NIST documents. The complete set of CMMC domains currently contains 14 groups of controls, each with a unique two-letter identifier. See Figure 2.2: CMMC Cybersecurity Domains. From the CMMC Assessment Handbook - get your on Amazon: https://buff.ly/3X0VWns

6

Do you know how many cybetattacks attempts America Latina & the Caribbean received in 2023? 🚨 200 Billion 🎯 Our #FortiGuardLabs team has released the 2023 FortiGuard Labs Report revealing a new era of advanced cybercrime: 🛡️50% of malware detections were distributed through Microsoft Office files 🛡️Double Pulsar represented 75% of all exploitation activity Download the key insights infographic: https://ftnt.net/60425zDMg

8

🌐 Cybersecurity in Mexico: Rising Threats & Solutions Mexico faces an escalation in cyber espionage and extortion, with key sectors targeted. Mandiant's report highlights the importance of proactive measures to combat these threats. Recommended actions include: Enhanced threat detection and response systems to identify attacks early. Stronger government collaboration to share intelligence and coordinate defenses. Public-private partnerships to develop resilient cybersecurity infrastructure. Regular employee training on security protocols to reduce human errors. Now is the time to invest in cybersecurity before the impact worsens. 🔗 Read more: Cyber Threats Intensify in Mexico https://lnkd.in/ewAq_W5n #CyberSecurity #ThreatDetection #EspionagePrevention #CyberDefense #RansomwareProtection #DataSecurity #MandiantReport #MexicoCyberThreats #PublicPrivatePartnership #CyberResilience #InfoSec #CyberAwareness #CyberRiskManagement

1

As Homeland Security considers the request of Registries (Verisign, Public Interest Registry/PIR) and Registrars (GoDaddy, NameCheap, Tucows) to be carved out of the US cybersecurity reporting requirements under CISA (see link here: https://lnkd.in/gF6RtEWd), it should be noted that under the EU NIS2 regulations, Registries and Registrars are required to report. Here is a link to the NIS2 recommendations https://lnkd.in/e9Tranut See "Technical Guideline: Security Measures for Top-Level-Domain Name Registries (.pdf)" Scope of incident reporting Article 14 NISD Annex II of the NIS Directive lists several sectors and subsectors which should be considered by the EU Member States when identifying and designating operators of essential services: • Energy: electricity, oil, gas • Transport: air, rail, water and road • Banking: credit institutions • Financial market infrastructures: operators of trading venues, central counterparties • Health: healthcare settings • Water: drinking water supply and distribution • Digital infrastructure: IXPs (internet exchange points), DNS (domain name system) service providers, TLD (top level domain) name registries #nationalsecurity #cybersecurity #cisa #homelandsecurity #i2coalition #godaddy #tucows #isoc #pir #internetsociety #verisign #namecheap

4

1 comentario