John Mracek

John Mracek has exceptional insights and best practices to share at #Secure360. The cyber landscape is experiencing an increasing sophistication of threats along with rapid modernization of tech. Learn how model of shared accountability is ideal since no one can do it alone! #tech #cyber

32

1 Comment

Your organization’s cyber defense is important. But your #CyberResilience is even more critical. Find out why in this look back at #RSAC 2024 with CDW EVP, Global Security Strategy Office, Buck Bell. It’s a must-see! #Security #DisasterRecovery https://dy.si/quRT6

15

The 5th annual Data Protection Trends report from Veeam summarizing data protection strategies of up to 13,300 organizations over 2020‑2026. Download the report to learn how business and IT leaders addressed these issues from shared insights: https://lnkd.in/gK_JiS8u #Veeam #DataProtection #Report

11

This was an excellent discussion about how to integrate positive practical mental health methods for Cybersecurity professionals. If you love your career as I do, you also know it comes with mental health pressures and it can take a toll on us as individuals. Learn how you can deal with, and beat burnout!

18

A recent experience with a vendor has me thinking about how much effort cybersecurity practitioners put into tearing down the reputation of being the "department of no" and building partnerships with our executive leaders to achieve the common goal of pushing the business forward. This particular vendor has become my "department of no". Fundamentally, we're in a customer-vendor relationship. I get that it's your job to sell your product, and my job to buy it. But that relationship should go deeper. If I easily get value from your product, that leads to word-of-mouth recommendations, an almost guaranteed chance of retaining my ARR, and as many suggestions from me on how to make the product better that you'll accept. If you disappear once the contract is signed, are opaque with your product roadmap, remove features, or implement arbitrary restrictions on my usage of the product, what impression am I supposed to have of your company and your product? If you can't bother to give me a regularly scheduled call with a shared TAM (that every other vendor provides), but prefer that I submit a ticket every time I want to ask product roadmap questions that you take 48 hours to respond to, is your goal to stop me from asking questions altogether? It feels like you don't think of this as a partnership, but just a transaction. We have companies in this space that don't understand our community and the type of relationships that we invest ourselves into building and maintaining everyday. We don't have time for vendor relationships that don't serve our company's needs; our time and attention is too precious.

38

2 Comments

This is a quick shout out to the folks behind the "Minimum Viable Secure Product" https://mvsp.dev/. If your are looking for a brief and concise checklist to verify the security of something (be it your org, a supplier, a service ...), this is by far the best checklist that I know of to cut through the noise and get actionable results fast. #mvsp #security #audit

54

7 Comments

I had a great conversation with @David Monnier on The Future of Cyber Risk Podcast. We discussed: How I started in philosophy and ended up at a tech desk, then building a security program. Signs that it's time to discard the old way of doing things for something better. The importance of storytelling for connecting with your customers (and your Board). And more...! Check out the full episode here: https://bit.ly/3WmoFmp #futureofcyberrisk #cybersecurity #riskmanagement #cyberrisk 

53

3 Comments

What is Today's Cost ("Good Investment" ) for a CyberSecurity Program..? How about $22 Million..? Think this is (too) High..?? Then... Is $1 Billion too much..? How about $1.6BB..? The Costs of Change Healthcare (Ransomware) CyberSecurity Attack is now close to exceeding $1 Billion... (currently at $872 Million)... but projected to be between $1.35 - 1.6 BB when the while event is concluded. This includes the $22 Million Ransomware Payment to the AlphaV BlackCat criminal organization. This Cost will "eclipse that of Casino Group MGM, which didn't pay a ransom following an attack on its systems last year, and which faces recovery costs of $100 million to rebuild its systems and paying for the fallout...". 95% of Ransomware is Preventable.. CyberSecurity A-Team has an Industry-PROVEN Ransomware Methodology that will help prevent Companies from suffering a Ransomware Attack. Don't wait until it's Too Late..! (after you are Attacked) to contact them - www.CyberSecurity-A-Team .com #Ransomware #CyberSecurity-A-Team #Healthcare #MostVulnerable https://lnkd.in/g5B7fqEu

6

When your assessor advises their client the work products they have will not pass a C3PAO inspection.

8

1 Comment

Visibility 🤝 #CyberResilience Discover how greater visibility can improve your organization’s ability to prevent, defend and recover from cyberattacks in CDW's 2024 #Cybersecurity Research Report. #Security https://dy.si/ywkfJ7

5

The latest enhancements to Microsoft Windows 11 bring a slew of new privacy, security and accessibility features to your fingertips. Read this blog for an overview.

2

Your network edge is often the first line of defense against cyberattacks. Bad actors will target your edge frequently and can cause a lot of havoc if they get through. In this next video featuring Rob Parsons, he explains how strong identity and access controls can safeguard your edge and organization.

9

Impact Advisors Being prepared costs much less than picking up the pieces after the incident. It saves more than money when practiced regularly. #impactful #thatsimpact #businessresilience

2

This was an interesting class on DMARC, DKIM, & SPF.

12

In a fantastic example of why I love what Joanne C Klein ☁️is putting out there, here is a description of a number of flow-on effects from making retention labels auto-apply only. This user-centric approach needs to be taken wherever possible - focussing on letting the tools do the work, not constraining the user. As we move to holistic application of Data Security, this <must> be the focus.

6

1 Comment

smb signing vs smb encryption ask Questions for all the folks out there: 1. How many folks are using both? 2. What is the performance hit you experienced? Can you quantify smb s vs smb e? 3. Let's hypothetically say you have smb signing enabled did you hit any road blocks when you turned on smb encryption? DM me. Help a fool out =) #cybersecurity #blueteam #redteam #bitcointeam

1

3 Comments

The Power of a Polo: A Swag Story At the dawn of my career, the standard uniform was a button-up shirt and slacks—practical yet prone to the daily hazards of a data center, from grease stains to the inevitable tear from those unforgiving Compaq server rails. Like many just starting out, balancing a budding career and a new family meant every dollar counted, and work clothes were no small expense. Back then, vendors would often gift us T-shirts plastered with logos, a nice gesture but hardly workplace appropriate given the dress codes of the time. Then came a welcome shift—polos became acceptable work attire, blending professionalism with practicality and ease of maintenance. Amidst these changes, the swag evolved too. Socks became the new giveaway—playful, colorful, but again, they missed the mark on practical professional use. They were fun but did little to connect us more deeply with the brands or bring them tangible returns. As my career advanced, the nature of the swag I received transformed. I started to get business polos emblazoned with vendor logos. These weren’t just items of clothing but tokens of professional relationships and experiences. Over the years, they filled my wardrobe, turning into a collection representing a decade of industry connections. Now, these polos aren't just apparel; they're conversation starters. Whether I’m discussing strategy with C-level executives or networking at IT events, these polos prompt inquiries and dialogues about the vendors they advertise. On the golf course, they've even helped me connect with fellow customers, fostering new relationships over shared vendor experiences. This is the essence of effective swag—it turns every wearer into a walking billboard, no strings attached. So, what’s the takeaway for anyone thinking about promotional items? Understand the environments where the swag will be used and aim for maximum visibility. Consider every level of your audience—from the fresh-faced tech newbie to the seasoned executive. Today’s junior team member in a logoed polo could be tomorrow’s industry leader, still valuing and showcasing your brand a decade on. And who knows? Perhaps the next big trend in swag is just around the corner. I’m betting on the quarter-zip—casual, stylish, and perfect for any professional meetup. Keep an eye out; your next piece of swag might just be a game changer.

21

3 Comments

In the event of a cybersecurity breach, every second matters. It's a critical moment where having a well-thought-out Incident Response Plan can make all the difference. Join Mytech Partners on Wednesday, April 24th for an in-person workshop where our security experts will guide you through the intricacies of crafting an effective Incident Response Plan tailored to your organization. Together, we'll explore how this plan fits into your broader information security strategy, to ensure that you are well-prepared to navigate any cybersecurity challenge with confidence and resilience. https://lnkd.in/gVJmFVss

4

Don't rely on outdated methods to secure your organization in today's dynamic threat landscape. Join us on May 8 for the #CyberRiskSeries: Navigating the Broken CMDB. Learn from industry experts how to adopt a risk-based approach to manage your attack surface effectively and protect against growing threats beyond #CMDB limitations. https://lnkd.in/gFk4iGGp

50