Vittorio Maier MSyl

👁 SJUK Presents - 5 Pillars of Identity Security: Your Must To-Dos In this exclusive webinar in collaboration with ManageEngine, industry experts will discuss the identity-focused approaches that organisations can utilise to safeguard themselves and their people. They will explore how to authenticate and authorise identities, while also ensuring the appropriate levels of auditing. Key webinar takeaways: 💠 Learn about the anatomy of cyber attacks: The risks of unsecured digital identities 💠 Recognise which event IDs and user actions you must audit in your environment 💠 Understand how to ensure a solid, tested backup and recovery plan 💠 Discover the process to assess risk periodically in your IT environment 💠 Find out how to enable AI-driven user and entity behavioural analytics Reserve your space now for our exclusive webinar!👉: https://lnkd.in/eHRjhCkG

4

NCSC and insurance industry issues ransomware guidance for UK firms The guidance focuses on reducing attack impacts by offering advice on decision-making, legal considerations, and recovery. Organisations in the UK have been provided with new guidance to handle ransomware incidents, a significant threat in the current cybersecurity landscape. The guidance, developed jointly by the National Cyber Security Centre (#NCSC) and #insurance industry bodies #ABI, #BIBA, and #IUA, aims to assist organisations and their partners in responding effectively to #ransomware attacks. https://lnkd.in/euUUxi2f #cybernews #cybersecurity

1

Struggling to understand the NIST CSF 2.0 framework? Download your copy of this guide to access an in-depth mapping of BeyondTrust solutions to the categories and sub-categories outlined in the NIST CSF 2.0 guidance, the CSF Reference Tool, and more! In this comprehensive free guide, you'll learn: 💡 The true impact of NIST CSF 2.0 across the cybersecurity landscape 💡 A breakdown of what's new and what’s changed in version 2.0 💡 How to increase your alignment to the framework Download now and strengthen your security posture. https://lnkd.in/ePzrrtCQ #NIST #NISTFramework #Compliance #Cybersecurity #BeyondTrust

4

Why should everyone prioritise data integrity?     In a world driven by data, compromised data can lead to severe consequences - from security breaches to financial losses.    In the Spring edition of the Sunday Times Scotland Business Magazine Major General Martin Smith CB MBE DL of CyberPrism and IMRANDD CEO Innes Auchterlonie discuss why organisations across industries should focus more on data integrity, and the key challenges they face in maintaining it.   You can read the full article on page 11 here: https://lnkd.in/e3XByaDy   You can also find out more about how you can ensure the integrity of your data from CyberPrism and IMRANDD at the Scottish OT Cyber Summit at the end of May: https://lnkd.in/ek85pMz2

22

1 Comment

💡 Where can I access the PKI maturity assessment tools? Are you looking to enhance your PKI maturity and drive your organization to new heights of security excellence? 🔍 Discover the PKI Maturity Assessment Tools 🔍 Head over to the Tools section in the PKI MM documentation to access resources, including: 📋 PKI Maturity Assessment Tools 📚 Step-by-Step Guidance for Conducting Assessments 📝 Templates for Reporting Assessment Results These tools are crafted to help you evaluate your PKI maturity, pinpoint areas for improvement, and stay ahead of the curve with the latest best practices and industry standards. 🌐✨ 🔄 Why Wait? Take the First Step Towards PKI Excellence Today! 🔄 Tools are regularly updated to ensure you have the most current and effective resources at your fingertips. Stay tuned because we are preparing interesting updates to tools! Learn more about PKI Maturity Model: https://pkic.org/pkimm/ #pki #pkimm #pkic #maturity #improvement #assessment #benchmark #guidance PKI Consortium Paul van Brouwershaven Leigh Bailey

12

1 Comment

Responding to a cyber incident – a guide for CEOs Guidance to help CEOs in public and private sector organisations manage a cyber incident Who is this guidance for? This guidance helps CEOs in public and private sector organisations manage a cyber incident. It sets out aspects to consider at the start of an incident and throughout it. Why do I need this guidance? .

3

2 Comments

💡 Do I need to report PKI maturity level? Reporting your PKI maturity level isn’t just a checkbox! 🛠️ While not mandated by the PKI Consortium, documenting your PKI maturity level can: 📈 Highlight your current PKI status to stakeholders 🚀 Pinpoint key areas for improvement 📊 Track progress over time effectively Depending on your organization's needs, regulatory requirements, or improvement goals, reporting might be essential. Learn more about PKI Maturity Model: https://pkic.org/pkimm/ #pki #pkimm #pkic #maturity #improvement #assessment #benchmark #guidance PKI Consortium Paul van Brouwershaven Leigh Bailey

9

1 Comment

New report on Advance Security by Sector reveals 33% Firms with Advanced Cyber Security = Finance. Full report = https://lnkd.in/eNYcTbUV Bravo all to Diligent including Brian Stafford & Satheesh Ravala for their great work on #CyberSecurity

1

According to The Record, the UK government is planning to make reporting of #Ransomware attacks mandatory and to require a licence to be obtained before making ransom payments. The consultation - due to start next month - is also set to propose banning extortion payments by #CriticalNationalInfrastructure bodies. Are these proposals you would support? #Malware #Cybersecurity

14

Weekend halted pending some rebooting of machines? Outpost24 user and struggling of where to start fixing the windows machines? Log in to the netsec view - if you set collateral or business criticallity or availability priority, create a dynamic group based on this, then in findings view, open the filtering and set CSFalconService. Soon you will also be able to select product detection as well. This gives you a list of the most critical assets potentially impacted and off you go. Sadly no shortcuts for the fix. Keep an eye on our blog for more advice on the matter, including script IDs relevant.

43

WHAT WOULD YOU DO? Recently I had an issue with an online training provider where I signed up for their service but I forgot which email address I used when creating the account (that's called an SUT or Stupid User Trick). The INVOICE from the service went to my regular business email and not the signup email, so I contacted their support staff and asked for the signup email address. I was able to provide the date, time, payment information, phone number, physical addresses, real name of the company and user, and all the details from the provider's invoice. What would YOU do in this situation? Would you give me the sign-up email address or not, and why? The underlying inquiry regards the authentication of virtual-only relationships. If you would NOT give out the original sign-up email address, you are saying that the email address is necessary and sufficient for authenticating the human user, and that all the other details of the transaction, including details much more specific and "authenticative" such as payment information, are neither necessary nor sufficient. Regardless of my SUT, this is a bad risk decision. That is because good authentication involves multiple factors. There is NO factor that, by itself, is categorical for authentication. I could be missing any one or two pieces of that information, but if I have all the others, that authentication is at least as good as me having the correct email address. In a world of virtual-only interactions you face intrinsic risk from impersonation. And the possession of the username and password may in fact be the weakest form of authentication compared to someone who can relate all the temporal and financial details an interaction. A compensatory control is to note an out-of-protocol authentication and information disclosure with the who, what, where, and whens of the request, and perhaps to monitor the account in question for a period of time for unusual behavior.

1

Do you have an overview of the risk level in your organisation? 🟢 🟡 🔴 Risk management is crucial for GDPR, Information Security, and NIS2. You're assessing risks from various areas and perspectives, but the tools you need remain the same. One such tool is the Risk Matrix, which not only helps you calculate risk levels but also provides a clear overview, enabling you to identify where your risks are concentrated. This clarity makes it easier to determine where to implement mitigating actions. Read more about what a risk matrix is and how it is used in our blog post 👉 https://lnkd.in/duQMZV7W

4

The cybersecurity threat landscape in the UK is steadily increasing, with half of businesses reporting either a breach or an attack in the last 12 months. In response, the EU has introduced the Digital Operational Resilience Act. 👉 https://zurl.co/oFep #WF #Cybersecurity

1

Cyber Essentials has a long history within the UK cyber community. In our new blog, we explain the importance of the scheme and what it means to achieve #CyberEssentials and Cyber Essentials Plus certification. ✍️ https://lnkd.in/eK9uMeyY

10

💡 Unlock the Potential of Your PKI with the PKI Maturity Model! Are you maximizing the benefits of your Public Key Infrastructure (PKI)? The PKI Maturity Model (PKI MM) isn't just a tool - it's your roadmap to elevating your PKI's performance and security standards. 🛠️ Tailored Guidance: PKI MM offers a comprehensive framework, integrating best practices and expert recommendations to refine your PKI's maturity. From identifying improvement areas to implementing robust security measures, it's your go-to resource. 🔍 Assess, Improve, Excel: Leverage PKI MM to conduct thorough assessments, pinpointing vulnerabilities, and enhancing efficiency. Elevate your PKI's maturity level, mitigate risks, and align seamlessly with industry benchmarks. 👥 Stand Out: As a service provider, showcase the caliber of your PKI offerings by leveraging PKI MM to demonstrate excellence to your clientele. Consultants and auditors, use it to drive tangible improvements and provide unparalleled guidance to your clients. 📊 Benchmark and Adapt: Gain invaluable insights by benchmarking your PKI against peers. Stay ahead of trends, refine practices, and ensure your PKI stays agile and resilient. 🌐 Flexible and Dynamic: Designed to cater to diverse organizational needs, PKI MM is adaptable across various PKI implementations - both internal and external. Learn more about PKI Maturity Model: https://pkic.org/pkimm/ #pki #pkimm #pkic #maturity #improvement #assessment #benchmark #guidance PKI Consortium Leigh Bailey

22

Why should everyone prioritise data integrity? In a world driven by data, compromised data can lead to severe consequences- from security breaches to financial losses. In the Spring edition of the Sunday Times Scotland Business Magazine CEO Innes Auchterlonie and Major General Martin Smith CB MBE DL of CyberPrism discuss why organisations across industries should focus more on data integrity, and the key challenges they face in maintaining it.   Read the full article on page 11 here: https://lnkd.in/eYxthqss   

57

During our DigitalTrust® Professional (DTP®) Foundation Certificate we discussed the importance of information and cybersecurity management in establishing and maintaining consumer confidence and trust. Common standards and frameworks to help were covered, from the UK National Cyber Security Centre Cyber Essentials scheme, through to the NIST Cybersecurity Framework, and including ISO 27001:2022. This overview of the requirements of ISO 27001:2022 and useful ISO 27000 family/series guidance standards will be of benefit to those seeking to further their understanding in the area of implementation and audit. Promo Code CCIS27001LI will secure significant discounts off listed pricing on the Certified ISO/IEC 27001:2022 Lead Implementer self-paced, eLearning course (including exam voucher and free exam resit!): https://lnkd.in/dsx7QfG Promo Code CCIS27001LA will secure significant discounts off listed pricing on the Certified ISO/IEC 27001:2022 Lead Auditor self-paced, eLearning course (including exam voucher and free exam resit): https://lnkd.in/dFVqsax #thedigitaltrustacademy #enablingdigitaltrust

3

⚠ Over the last 6 months, the threat landscape has gotten immeasurably worse, and with a series of upcoming changes likely to impact SMEs across the UK at once, now is the time to act by strengthening your IT resilience. 📰Read more: https://lnkd.in/eGwEcqk6

6