Chad Weinman

Listen to episode 67 of Cybersecurity Where You Are to hear from our experts as they share examples of responding to certain audit findings within your organization. https://bit.ly/46uxBZ1 #cyberaudit #cyberrisk #cybersecurity

3

Listen to episode 67 of Cybersecurity Where You Are to hear from our experts as they share examples of responding to certain audit findings within your organization. https://bit.ly/46uxBZ1 #cyberaudit #cyberrisk #cybersecurity

1

Hopefully you a process to frequently assess your organization's cyber risks. ⚠️ If you don't currently have process in place, and you should, here's 6 Types of Risk Assessment methodologies and their use case. 📝 Feel free to reach out if we can point you in the right direction🤝 #cybersecurity #nonprofit #riskassessment

1

Thomas Marsland offered me an opportunity to provide an early review of his new book, link below! My Amazon feedback; I'm including it here, as I was more than pleased with how he took such a joyless topic and breathed life into it. "I am not one to blow smoke and told him I'd give genuine feedback... Tom takes a topic as dry as the desert & and gives it life as lush as an oasis. Ok, that might be over the top, but you really can't understand how well Tom has woven in enough personality, so you can truly enjoy reading about this incredibly rigid material. He dissects the Risk Management Framework in a way that facilitates easy digestion and retainment of the material. As an Adjunct Professor of Cybersecurity curriculum, I would absolutely adopt this as required text for several of my courses. Seriously, Tom "break[s] down the framework into easy-to-understand topics..." He doesn't, "go into every detail, or provide every possible way you could implement the framework..." So it gets to the weeds, just not deep in them. I don't know if this will go live with graphics, attachments, or templates (not that it needs them) but there are no images currently in the text (just for those visual learners). But I assure you, Tom nailed it. The right info with just enough detail." https://lnkd.in/eJxu_da6

7

1 Comment

We've published over 80 tools and publications related to risk assessment on KnowledgeLeader, so dive in and explore all of the resources available to you! https://hubs.li/Q02wjF6t0 #RiskAssessment #RiskManagement #Cybersecurity

1

In this week's #AI governance series: 📍Putting the Map function in the NIST's AI Risk Management guidelines into practice. Data privacy experts David Manek, CPA, CIPP, CIPM, Kenric Tom, and Colleen M. Yushchak explain how to use the Map function to help your organization manage AI compliance ⤵ https://ankura.co/3VHBtTP Follow our page to view our next article focusing on the Measure function.

15

Your approach to TPRM should be informed by and an extension of your ERM framework.

6

Current state of MITRE ATT&CK: the essential tool to support the Intrusion Kill Chain Prevention Strategy.: Rick Howard discusses MITRE ATT&CK with Frank Duff, Amy Robertson, and Rick Doten #cyber #cybersecurity #cybersecurityjobs #innovation #management #informationsecurity #technology #cyberjobs

1

Before you can measure Key Performance Indicators for your human risk management program, it's a good idea to first try to understand what related variables you can control. For example, if you want to reduce the number of employees who fall for social engineering scams, that's usually because there is a noticeable problem of people being tricked when faced with this type of threat scenario. Or you may have used some kind of assessment to measure their risk decisions within an immersive social engineering scenario. Either way, you have an expectation that, if the employees show that they are vulnerable to a significant degree, you would want to make some change in something that you can control, to either improve their level of vulnerability, or provide some other compensating control. So, what inputs can you control that might be expected to reduce the likelihood and/or impact of a threat being successful? And you'd like to be able to measure the resulting outcomes in a way that isn't subject to other variables you can't control. Join us on July 10th at 1pm EDT for an interesting discussion of how metrics for Human Risk Management programs can be managed. #csaf #cybersecurityawarenessforum #ciso #cybersecurity #humanriskmanagement https://lnkd.in/guVN2vRb

6

The National Institute of Standards and Technology (NIST) recently released its first major update of the popular and well-respected Cybersecurity Framework (CSF). NIST CSF 2.0 broadens its reach, sharpens its focus on #governance and #supplychain risks, and introduces new tools to empower your #cybersecurity strategy. Stay ahead of threats with #TeamCAI here: https://lnkd.in/gEsUzmkj [VD: Video with text and B-roll footage scroll through-out, highlighting the updates surrounding The National Institute of Standards and Technology's update of their Cybersecurity Framework. The video highlights the main points such as the new focus areas, new tools and guidelines, implementation examples, and then ends with a call-to-action to read the full article on CAI's website.]

10

There are multiple approaches to quantify and manage risks, including attack tree analysis (pictured below). Get an overview of 7️⃣ popular approaches to calculating cybersecurity risk + examples of each: https://hubs.li/Q02tM76g0

4

The #CISSP exam continues to evolve – Beginning today, all CISSP examinations worldwide will take place in Computerized Adaptive Testing (CAT) format.   Learn More: https://ow.ly/jhGS50RgtpW   #CISSP30

4

ISC2's CISSP going full CAT format. _________________________ What is Cybersecurity? Cybersecurity is the practice of protecting internet-connected systems such as hardware, software and data from cyberthreats. It's used by individuals and enterprises to protect against unauthorized access to data centers and other computerized systems. An effective cybersecurity strategy can provide a strong security posture against malicious attacks designed to access, alter, delete, destroy or extort an organization's or user's systems and sensitive data. Cybersecurity is also instrumental in preventing attacks designed to disable or disrupt a system's or device's operations. Link: TechTarget https://lnkd.in/g-2D7ER8 _________________________ Want to learn more about CyberSecurity? Joining ISC2 would be one the smart choice to do so, as a non-profit organization which specializes in training and certifications for cybersecurity professionals, it has been described as the "world's largest IT security organization". Do DM/PM Ts. Hon Hao Kong the Director of Membership via LinkedIn for ISC2 Malaysia Chapter to enquire for more details. https://isc2chapter.my/ _________________________ Important Note: This is not an endorsement of the organisation, brand or product mentioned, just merely sharing of knowledge. _________________________ 👋 My name is Robin Yong 💻 I share CyberSecurity news, opinion and trend. 💡 Connect with me at https://lnkd.in/gVPUvc22 ⚠️ Opinions expressed are solely my own and do not express the views or opinions of my employer or the organisation I am associate with.

8

Let's talk about "risk management" methodologies and how "risk tolerance" is used to effectively manage human risks. Risk management isn't just something used by large enterprises. There are a number of "flexible" frameworks that can make it easier and more effective to know where to spend your "next security awareness dollar". Join us tomorrow at 1pm EDT in our next Live CSAF panel session: https://lnkd.in/dsDPXwFG #csaf #cybersecurityawarenessforum #ciso #humanriskmanagement #riskmanagement #cybersecurity

8

The National Institute of Standards and Technology (NIST) recently released its first major update of the popular and well-respected Cybersecurity Framework (CSF). 🔐 🖥 NIST CSF 2.0 broadens its reach, sharpens its focus on governance and supply chain risks, and introduces new tools to enhance your #cybersecurity strategy. Stay ahead of threats with #TeamCAI here: https://lnkd.in/gwS_tgKs

10

1 Comment