Joanna McDaniel Burkey

I Just wrapped up an insightful discussion on business risk, and cybersecurity threats to municipalities across Texas. Here are some thoughts on key points from my remarks:   ·      China, Russia, Iran, North Korea and other Nation States pose significant and evolving cyber threats to U.S. national security, and economic prosperity. They each leverage cyber capabilities for espionage, economic espionage, influence operations, and attacks on critical infrastructure. Just to name a few.    ·      Ransomware attacks impacting state and local governments often stem from exploited vulnerabilities and compromised credentials. Unfortunately, state and local governments too often face challenges involving inadequate cybersecurity programs, insufficient funding, outdated IT infrastructure, central control of budget and incident command with increasingly advanced and complex threats.   ·      Organizations large or small can take simple steps to enhance cybersecurity and significantly reduce risk to include require multifactor authentication, patch and update software, develop and test incident response plans specific to attack types, use backup systems and segment data, and conduct regular assessments and testing to validate your security plans and controls are working. Nothing new here. Unfortunately, we keep not doing it. Meaning for years the bad guys use a lot of the same attack vectors but the victims don’t change. The landscape of cyber threats is continually evolving, and it's critical to stay informed and be proactive in our defenses. #Cybersecurity #NationalSecurity #CyberThreats #InformationSecurit #LocalGovernments

53

11 Comments

The Texas Data Privacy and Security Act (TDPSA) goes into effect today which gives consumers the right to request information about how companies process their personal data. The law also allows consumers to request that companies correct, delete, or stop using their personal data. Companies must comply with these requests within 45 days and may be fined up to $7,500 if they don't. This is a great presentation by privacy expert Harvey Nusz, CRISC, CGEIT, CISA with an explanation of the details.

28

1 Comment

Amy Bogac is one of my favorite people in infosec! Everyone needs to listen to her perspective on how we've allowed SaaS to condition business leaders into thinking that data recovery is equivalent to disaster recovery -- IR plans & TTX must prepare us for both because you can't always trust your data or the hardware it's stored on. Having to do things like restate your financials is not an indicator of successful recovery.

3

Today, we announced our Series C funding and unveiled Zero Trust PAM to the world. Founded in Zero Trust principles and engineered to evaluate and govern every action—no matter how minor—PAM has been remade. Each command, query, or configuration change is evaluated in real time against dynamic policies that adapt to the context of the user, the sensitivity of the action, and the prevailing threat landscape. And that, my friends, is the future of PAM. It's a future we feel extremely bullish about. And we're not the only ones. With the support of our partners, StrongDM is taking Zero Trust PAM to a global scale with massive expansions in EMEA and APAC in 2024. First, thank you to our powerhouse investment partners Anchor Capital GP, Capital One Ventures, Cisco Investments, Frontline Ventures, Singtel Innov8, GV (Google Ventures), Sequoia Capital, and True Ventures. Now, let's get to work. May the best PAM win. Read about our Series C funding, global expansion plans, and Zero Trust PAM: https://bit.ly/4a813oy #ZeroTrust #PAM #identity #infosec #startups StrongDM

210

35 Comments

This year's RSA Conference theme is The Art of the Possible, underscoring the importance of building bonds, embracing the power of community, and going beyond ones and zeroes to stay ahead of threats. That's why Devo is laser-focused on stopping cyber burnout and enabling CISOs to tackle their biggest hurdles at this year's show. Learn more by reading the blog post below. #RSAC #RSAC2024 #CyberBurnout #CybersecurityLeadership

11

Tech job opportunities are on the rise in Austin and NYC. Read more in this article featuring data from CompTIA's 2024 State of the Tech Workforce Report.

1

I'm attending the 2nd Annual Austin Official Cybersecurity Summit, rated Top 5 InfoSec Conference, on Friday, May 17! Join me at this educational event to learn from leading industry experts about the latest threat landscape & best practices in combatting #cybercrime and protecting your company from a #breach. #OfficialCybersecuritySummit #CSSAustin #CRAEvents #cybersecurity

8

CBS News - ICYMI AT&T Hacked...here's what you need to know! ICYMI - This data breach is separate from one disclosed earlier this year by AT&T, the company told CBS MoneyWatch in an email. In that case, hackers have stolen personal information for millions of current and former AT&T customers, with the fraudsters sharing the data on the dark web. Even though the breach didn't include personally identifiable information, some security experts warned that any information could help hackers gain access to more data, opening the door to fraud. "These types of identity-based attacks that exfiltrate customer records can allow attackers to piece together the personal data of individuals, including names, phone numbers, addresses and financial and Social Security details, placing millions of people at risk for identity theft or fraud." Companies are required to disclose security breaches to customers within 30 days of becoming aware of an incident, according to U.S. securities regulations. But when AT&T reached out to the FBI about the breach, the agency authorized a delay because of concerns about security risks, the FBI told CBS News in a statement. The FBI noted that after learned of the breach, it worked with AT&T as well as the Department of Justice to investigating the incident. Want to know more? Catch my comments with WBZ | CBS Boston Mike Sullivan here ---> https://lnkd.in/euqpR3Md #ATTHacked #Cyberattack #Cybercrime #Privacy #Dataprivacy #Fraud #IdentityTheft #Cybersecurity InferSight TraceFire Stephen Walker #InferSight #TraceFire Tim Hurley

10

CISOs - please don't squander your earned trust on dubious purchasing decisions. I cannot verify the veracity of this article, but even the mere premise of CISOs receiving kickbacks for their security product purchases is deeply disturbing. As a profession, we have worked too hard to earn trust and credibility, and can't have our decisions second-guessed. If you are doing this, then please stop. Say no to kickbacks and declare any conflict of interests / recuse yourself from any purchasing decisions 🙏🏼 https://lnkd.in/gXgfkvd3

5

One of the #cybersecurity topics that doesn't get enough attention, IMHO, is the need to secure the Crown Jewels. Next week, Jeffrey Martin and I will be presenting a Dark Reading webinar with Becky Bracken on Protecting the Crown Jewels: Source Code Security. Come join us!

30

3 Comments

I’m looking forward to seeing everyone at the ElevateIT Summit in Irving next week. The world is rapidly changing with new advances in AI-driven tech and we’ll be discussing how cyber-physical security and resilience needs to be a priority for all organizations. We’ll also present some best practices and new AI technologies that can help on-ramp your cyber-physical convergence strategy. #elevateitsummit #cyberphysicalconvergence #cyberphysical #cybersecurity #ai #aisecurity

18

🌟 Here's a lot of wisdom from a guru with the experience of having applied the theory (and the scars to show for it). A must-read for any #startup looking to understand the nuances of product-market fit and how to navigate the challenges that come with it. Dive in and gain insights that could steer your journey towards success! 🚀 #Entrepreneurship #BusinessStrategy"

2

Transcending CVEs and Leveraging Environmental Variables - part three of my seven-part series on optimizing your vulnerability and exposure management strategy. https://lnkd.in/g5dRkKwz Sevco Security #VulnerabilityManagement #ExposureManagement #CAASM

14

Have you experienced the 𝘱𝘰𝘸𝘦𝘳 of Entitle Just-In-Time access yet? ⏱ Revolutionize your security with Just-in-Time (JIT) access - in just 15 minutes! Join Ron Nissim, Entitle's CEO & Co-Founder, for these rapid-fire, 15 minute Entitle demo sessions. Ron will show you how JIT access can: ✔️ 𝗦𝘁𝗿𝗲𝗮𝗺𝗹𝗶𝗻𝗲 access control across your entire cloud estate ✔️ 𝗘𝗺𝗽𝗼𝘄𝗲𝗿 users with secure, temporary access when they need it ✔️ 𝗕𝗼𝗼𝘀𝘁 efficiency with automated workflows ✔️ 𝗘𝗻𝗵𝗮𝗻𝗰𝗲 security with least privilege principles ✔️ 𝗘𝗻𝘀𝘂𝗿𝗲 compliance with data privacy regulations Bring your questions to ask Ron live, and if there's time, you might even score a personalized demo! Check out the schedule via the link below. https://lnkd.in/eft9wW_W #JITAccess #LeastPrivilege #DataPrivacy #PrivilegedAccess

2

Here's a question for you: why settle for a simple glazed donut when you could relish a gourmet creation, customized for your taste buds? Yes, a plain donut is good, but it's hardly enough to leave a lasting memory. Similarly, it's critical to choose a great IT partner who can deliver exceptional results. Don't settle for the bare minimum. Send us a message and we'll show you how we can tailor a solution for you.

2

Are you breach ready? Check out the latest article featuring insights from Bob Palmer, and other industry experts! Read on to hear about proactive measures towards cybersecurity: https://bit.ly/4b8HGfx Be Breach Ready With ColorTokens Inc.! #internetsafetymonth #BeBreachReady #Cybersecurity #Microsegmentation

14

1 Comment

Looking forward to speaking with Joel Jacobs, Matthew Ebben, and Marc Woolward at 11:00am EDT this morning, about navigating Cyber Resilience -- touching on contemporary Trends, Challenges, & the Role of Dependencies. Thanks to our host, vArmour. Hope you can join us, or register and catch the recording later. #cyberthreat #cyberentropy #complexity #cyberdependency #vulnerability #cyberrisk #situationalawareness #riskawareness #riskmitigation #cyberresilience #ciso #cio #coo #boardofdirectors #bia #businessimpactanalyses

12

2 Comments

One of the topics I have discussed most since joining CyberRisk Alliance is #securitymetrics. CISOs and senior leaders face a daily challenge of putting their security programs into a context that results in action. I have always said metrics fall into 4 categories, “what should I track”, “what can I track”, “what am I tracking”, and “what doesn’t need to be tracked.” Finding what goes in which bucket is the challenge.

18

2 Comments