Brian K. Tuskan ✨️

Follow the DVMS Institute for exciting announcements on "HOW" organizations of any Size, Scale, or Complexity can Operationalize a NIST Cybersecurity Framework Digital Value Management System™ capable of delivering the Trusted, Resilient, and Auditable digital outcomes government auditors expect

16

Tired of being overwhelmed by security exposures? Discover the power of Continuous Threat Exposure Management (CTEM). Identify critical assets, prioritize risks, and get actionable recommendations for improved security posture. Get started 👇 https://hubs.li/Q02rDs8B0

52

Recent shifts within The NIST NVD operations have raised alarms among researchers and practitioners. ⚠️ These changes have led to delays in vulnerability analysis and a noticeable decline in enriching CVEs with critical data such as CPEs, CVSS scores, CWEs, and references. This creates significant hurdles for organizations striving to effectively identify and prioritize vulnerabilities. 💡 Meet DeviceTotal, a transformative solution reshaping this vulnerable pyramid. Our AI-powered technology propels vulnerability management into a new era, offering substantial enhancements in accuracy, speed, and automation. 🚀 DeviceTotal sources security information directly from vendors, ensuring data is updated well before it reaches the NVD. This proactive approach empowers organizations with timely insights, enabling swift and informed actions to mitigate threats. 💪 On top of that, DeviceTotal provides actionable insights for every threat, offering precise indications for available updates, mitigation options, workarounds, End-of-Life alerts, and more.  And the best part? No agents, no installations—just swift value delivered directly to your organization. Don't let your vulnerability management strategy crumble—elevate it with DeviceTotal. Experience the difference today. #VulnerabilityManagement #CyberSecurity #DeviceTotal #cybersecurity #infosecurity #riskmanagement #vulnerabilitymanagement #nationalsecurity (cartoon copyright by XKCD.com)

24

Download Our Essential White Paper on Active Shooter Prevention In an age where active shooter incidents are becoming more frequent, relying on reactive strategies is no longer sufficient. The Active Shooter Prevention Project (ASPP) introduces a pioneering approach to prevent such tragedies before they occur. Why Download This White Paper? Expert Insights: Learn from a collective of over 500 years of experience from experts in law enforcement, military, and security. Innovative Strategies: Discover the P.R.O. Model (Prevention, Response, & Options) that focuses on advanced prevention techniques, integrating cutting-edge technology and tailored response strategies. Data-Driven Analysis: Understand the trends with FBI data and comparative studies that underscore the necessity of a shift towards preemptive measures. Real-World Solutions: Get an overview of actionable steps and comprehensive emergency action plans that could be vital in safeguarding your organization and community. What Will You Gain? A Deeper Understanding of Active Shooter Dynamics: The white paper delves into the evolving nature of active shooter definitions and incidents, offering clarity and insight. Actionable Prevention Techniques: From environmental design to community training and advanced security technologies, learn how to implement a robust prevention strategy. Community and Expert Support: Join a network of professionals dedicated to creating safer environments through innovative and practical solutions. Join the Movement Towards a Safer Tomorrow The knowledge presented in this white paper is vital for those in charge of safety in schools, workplaces, and public areas. Arm yourself with the understanding necessary to not just respond but also to prevent, securing a safer tomorrow for all.

24

2 Comments

Webinar Alert - Advanced Threat Protection for Government Infrastructure - May 2, 1:30 pm - 2:30 pm ET. From understanding the most recent emerging threat vectors affecting agency infrastructures to leveraging #cloudnative security solutions, this webinar promises a comprehensive exploration of proactive measures to mitigate cyber risks. Join ATARC, top #government leaders and myself for an indepth conversation on how to stay ahead of the curve and fortify your organization's defense mechanisms in today's dynamic #cybersecurity landscape. Register now here ➡ https://atarc.org/5/2Aqua ATARC (Advanced Technology Academic Research Center) Aqua Security

8

Join us for the upcoming Webinar "Protecting the Mental Wellbeing of Security Professionals" on May 1, 2024 12:30pm EDT This webinar will present by Ken McCarthy, PCI®, who will discuss about how to protect the mental wellbeing of security professionals in the face of their often emotionally strenuous work. Also, he will share his experience with vicarious trauma and compassion fatigue resulting from his involvement in workplace investigations. In this webinar you will learn best practices in incident and case management to prevent, mitigate, and respond to trauma specific to security practitioners. ☑️ Learn more and register here: https://lnkd.in/e6e-wmWR #ASIS #Myasis #Webinar #Security #development

14

The Office of the National Cyber Director (ONCD) recently released the first-of-its-kind Cybersecurity Posture Report at #RSAC: https://bit.ly/3UybTyD The report evaluates the strategic environment and cyber risk landscape, taking into account trends in threat actor capabilities, as well as the opportunities and challenges within U.S. cybersecurity policy. From highlighting the rise of nation-state actors disrupting U.S. critical infrastructure to the prevalence of new attack vectors such as supply chain attacks in emerging technologies like #AI, the report underscores the urgent need for enhanced collaboration between government agencies, private sector entities, and international partners. As an industry leader in threat intelligence, we're committed to providing insights and solutions to empower organizations to defend against emerging threats effectively. We commend ONCD for their efforts and look forward to our continued partnership in shaping the future of cybersecurity policy.

38

Mapping out all the nitty gritty details on #LockBitSupp suspect "Dmitry Khorosev" with ShadowDragon Horizon is easy and fast. #OSINT #OSINT4good #LockBit

81

New from Jen Easterly, Director, Cybersecurity and Infrastructure Security Agency, addressing this year's Cyber Storm exercise. I'm grateful some our Gate 15 team and orgs we support were able to participate in this significant national exercise. "Cyber threat actors continue to infiltrate critical #infrastructure networks with increased sophistication, persistence, and malicious intent. While some actors remain financially motivated, others such as nation-state actors aligned with the People’s Republic of #China, aim to compromise U.S. critical infrastructure networks to potentially disrupt critical services in the event of a geopolitical conflict. Organizations need to be prepared to respond and remain resilient in the face of these challenging threats, and exercises, such as #CyberStorm, serve as a critical tool to enhance preparedness. A few weeks ago, approximately one hundred exercise planners convened at CISA headquarters for the ninth iteration of the national cyber exercise, Cyber Storm. The planners, representing private industry, federal, state, and international government partners, managed an exercise that spanned across the globe to simulate a coordinated #cyberattack targeting critical infrastructure. What sets Cyber Storm apart from other cyber exercises is the depth and breadth of the exercise. We hosted over 2,200 participants from 300 organizations from more than 80 private sector companies, 35 federal departments and agencies, 11 states, and nine partner countries… Cyber Storm gave the participants an opportunity to exercise organizational response plans and capabilities, foster relationships with counterparts, and improve organizational and national cyber readiness and resilience. Participating organizations worked directly with CISA and coordinating bodies such as Sector Risk Management Agencies and Information Sharing and Analysis Centers to understand roles and capabilities during a cyberattack…" https://lnkd.in/emBig_j3 #cybersecurity #gate15 #cisa #preparedness #resilience

1

Physical security considerations for CISOs and IT professionals... This list is in no way comprehensive, but I think it outlines a number of really good topics for non-physical security leaders to consider when managing risk for your organization's data. 🔏 Hardening IT facilities and data centers 🔏 Day-to-day office facility concerns 🔏 Blocking lateral movement in physical spaces 🔏 Protecting assets in co-located and cloud facilities 🔏 Physical-cyber connections in OT environments 🔏 IoT devices in far-flung locales need special consideration 🔏 Locking down devices in a remote or hybrid world 🔏 Integrated access control is ideal 🔏 Securing surveillance systems and their data 🔏 Ready access to surveillance data for investigation For me, the most important topic on this list that I often see overlooked, is protecting assets located in multi-tenant data center facilities. Developing and disseminating comprehensive physical security design guidelines to the hosting facility is essential to ensuring your assets are protected to appropriate levels. As the saying goes, "you are only as strong as your weakest link." And often, your organization's weakest link may the multi-tenant data center facility where you have edge or remote node devices. So, make sure you instruct them on how you want your assets protected, otherwise they will decide that for you. #physicalsecurity #securitymanagement #CISO #datacentersecurity #defenseindepth https://lnkd.in/g3X_hf-B

28

Los Angeles County Public Health Discloses #Data Breach Affecting 200,000 Individuals, reports Security Week Incident Report: LA County DPH disclosed a data breach impacting 200,000 individuals. Breach Timeline: Occurred between February 19 and February 20, 2024. Cause: Phishing attack compromised 53 employees' login credentials. Immediate Actions: Disabled affected accounts, reset and reimaged devices. Preventive Measures: Blocked #phishing websites and quarantined suspicious emails. #cybersecurity #cybercrime #data #informationsecurity #CISO #CIO

3

During economic downturns, security management faces significant challenges due to reduced budgets, increased economic crimes, and heightened legal risks. Economic contractions lead to a rise in theft, fraud, and embezzlement, as individuals justify unethical actions due to financial desperation. Insurance premiums also rise, leading to prolonged disputes and legal risks. As corporate budgets tighten, security departments are often asked to do more with fewer resources, cutting back on non-essential services and finding cost-effective methods to maintain safety and security. Strong security measures are necessary during economic downturns, such as background checks, employee training, workplace violence protection, environmental and regulatory compliance, and drug testing, and whistleblower follow-ups. Background checks are crucial to prevent fraud and ensure a secure hiring process. Employee training programs educate both security and non-security staff, focusing on avoiding legal pitfalls and compliance with security protocols. Workplace violence protection programs are more critical than ever, reflecting lessons learned from past incidents. Environmental and regulatory compliance investigations become more frequent as companies seek to avoid fines and sanctions that can exacerbate financial strain. Drug testing remains a critical component of maintaining workplace integrity and safety, particularly in industries where impaired ability can lead to significant risks. Strategic planning and operational agility are essential for companies to navigate economic downturns successfully, integrating strong security measures with larger corporate strategies to protect assets and personnel from increased risks. #security #securitymanagement #economicdownturns #economicviability #crime #securitydeterrents #securityvalue

1

1 Comment

This Kiteworks article provides a comprehensive guide to navigating the complex landscape of sensitive content communication risk within the context of NIST CSF 2.0. It's crucial for organizations to understand and mitigate these risks effectively, especially considering the ever-evolving cybersecurity threats. Well worth a read for any organization serious about safeguarding sensitive information in today's digital age. NIST CSF 2.0: The Ultimate Guide to Managing Sensitive Content Communications Risk 👉 Learn more: https://gag.gl/BSKceP #cybersecurity #compliance #NIST #NISTCSF #CybersecurityFramework

12

1 Comment

The NIST Cybersecurity Framework 2.0. States that- Cybersecurity Risk Management is Part of Organizational Culture. Is Your Culture in Alignment with Your Cybersecurity Risk Management Program? Sign up for our FREE Beta today at https://lnkd.in/degjngmy The DVMS Cultural Assessment Tool (DVMS-CAT™) survey and resulting report explore the essence of that force, using the Johnson and Scholes culture web¹ as a lens to examine the complex tapestry woven within an organization. Just as a spider diligently constructs its web, thread by thread, culture also quietly binds organizational values, behaviors, and beliefs together. This intricate network, often invisible to the naked eye, exerts a powerful influence on every facet of the organization, from collaboration and innovation to decision-making and engagement. Our objective in creating the cybersecurity culture assessment tool was to unearth the implicit perceptions that guide interactions, the shared assumptions that inform choices, and the narratives that bind. The resulting data presents a nuanced picture of the cultural landscape, revealing both areas of undeniable strength and opportunities for strategic improvement. The survey should be conducted across multiple departments and management levels to illuminate this hidden web. The survey attempts to reveal and, therefore, understand the implicit rules that guide interactions, the shared assumptions that underpin choices, and the stories that bind the organization together. The results paint a portrait of the current cultural landscape, revealing both strengths and areas for growth.

8

Another great example of EDR agent exploitation and turning that into a weapon! That is an excellent research article be Shmuel Kohen, who proves once more the importance of a holistic approach to security monitoring, which should not be tied to a single solution and one dimensional line of defence. It doesn't matter how mature EDR vendor is, any EDR may have security flaws. https://lnkd.in/dCy4UmQg

9

Limited Time Offer: Save $1,450 on Certified All Source Intelligence Professional (CASIP) Unlock your potential in the field of intelligence with the McAfee Institute's Certified All Source Intelligence Professional (CASIP) program. This certification is designed for professionals seeking to enhance their expertise in gathering, analyzing, and interpreting intelligence from multiple sources. Why Choose the CASIP Program? - Comprehensive Curriculum: Our program covers a wide range of intelligence disciplines, providing a holistic understanding of both tactical and strategic intelligence operations. - Skill Enhancement: Develop critical skills in analysis, synthesis, and presentation of complex intelligence data, crucial for making informed decisions in security and law enforcement. - Career Growth: Elevate your professional profile and become a vital asset to any organization by mastering the art of intelligence from multiple sources. Take advantage of this special offer to advance your career in intelligence. Enroll now and save $1,450 on your certification. Transform your intelligence capabilities and advance your career. Enroll in CASIP today! https://bit.ly/4aGdRns #Intelligence #AllSourceIntelligence #McAfeeInstitute #CASIP #CareerDevelopment #ProfessionalGrowth

1

With an increase in consumer banking done online post-pandemic, and the current geopolitical situation, it’s important for the Public and Private sectors to share threat intelligence to stop bad actors and Secure the Internet.

5