Julian Waits

NCUA examiners have said that the ACET is no longer a requirement. They are now recommending that organizations choose an internal framework to align with such as NIST CSF 2.0, CIS, or other! They have stated the new NCUA ISE statements are for them to use as an examination tool and not for credit unions. I would recommend aligning with both an internal framework and the ISE by taking an evidence-based approach so you are prepped for your exam, and meet their requirements!

7

1 Comment

Very soon, there are going to be looooong lines for organizations to get their CMMC assessments. How do I know? Because our project funnel at MNS Group is beginning to fill, and other certified C3PAOs are experiencing the same thing. Even if your organization isn’t ready, it’s wise to start shopping around for an assessment partner. Obviously, I’m biased and want you to pick MNS Group. But even if you don’t choose us, get in line somewhere. Sign a contract now, so that you have a guaranteed place in line when the DoD releases the rule. Spots are limited. If you wait until you’re 100% ready, you may be waiting longer than you expect. #CMMC #BestAdvice #cybersecurity #assessment #DoD

78

13 Comments

Need help finding that ITGC talent for the upcoming audit season? Let Raul Ruiz & Associates source the top talent in the market for you. We focus on ITGC, cybersecurity, architects, and engineers. Reach out and start the conversation. https://lnkd.in/g3TgQ-zR #itgc #generalcontrols #auditprofessionals #cisapros #raulruizassociates #directhire #itgcplacements #cisspprofessionals

6

💲 Prepare NOW for the $200M K12 Cybersecurity Pilot Program 💲 In case you missed it, the FCC released the specifications and eligible services for the $200M K12 cybersecurity pilot program. We will have much more to share with you in the coming months as we approach the expected application window opening later this year. In advance of this opening, there are things you can do NOW to prepare for what the application will require. First, you can download the *DRAFT* version of the FCC Form 484 (https://lnkd.in/gbU_XDcX). This ONLINE ONLY form will be released later this year so that schools can apply to be part of the pilot program. This is the first part of the application, where applicants must provide general information about the school seeking support, including applicants’ experience with cybersecurity matters, whether they expect to implement cybersecurity recommended best practices and their current or expected use of free or low-cost federal resources.  Applicants will also be required to provide information about their proposed Pilot project, including a description of the goals and objectives to be achieved, the services and equipment to be purchased (and associated costs), and the cybersecurity risks the proposed Pilot project will prevent or address. But how can you gather this information? Vinson Protect CAN HELP! We have built a free audit tool (https://vinsonprotect.com) for you to use to audit your school’s preparation against various industry standards (including the K12 SIX Essential Cybersecurity Protections, Center for Internet Security's CISv8 Controls, and the ClassLink Cybersecurity Rubric) specifically called out in the pilot program announcement). This audit will help identify weaknesses and opportunities for improvement in your school preparedness program. It will give you a status report and security plan to help draft your proposal goals and objectives. Please let us know if you have any questions or want assistance getting started. #vinsonprotect #k12 #cybersecurity

26

1 Comment

My favorite new Action1 feature, CISA KEV integration, is a great way to prioritize #patching of vulnerabilities of utmost importance. This new blog post explains it in-depth.

17

3 Comments

USPS-themed smishing attacks are on the rise. Cybercriminals are exploiting trust in delivery notifications to steal personal data. It's crucial to stay vigilant and leverage threat intelligence to combat these threats. Learn more about these sophisticated scams: [link] #CyberSecurity #SmishingAlert #ThreatIntelligence https://lnkd.in/ezFXiiR9

3

The Florida Department of Health (FDOH) is currently managing a significant cybersecurity breach. Scott Schober, a cybersecurity expert, sheds light on the situation in an interview with Fox35’s Marie Edinger. Stay informed about the latest updates on this critical issue. #FDOH #VitalStatistics #health #cyberbreach #Ransomware #hacking

8

Ensuring your cybersecurity program is robust and comprehensive is no longer a luxury—it's a necessity. One critical element that often gets overlooked is the integration of compliance into your cybersecurity strategy. Compliance frameworks such as ISO 27001, NIST, and GDPR aren't just boxes to check; they serve as the backbone of a strong information security management system (ISMS). Incorporating these frameworks into your cybersecurity program has profound internal and external benefits. Internally, compliance helps mitigate business risks. By adhering to established standards, you reduce the likelihood of data breaches and cyber-attacks. A study by IBM revealed that organizations with a fully deployed security automation program saved an average of $3.58 million per breach compared to those without. This shows how a proactive approach to compliance can safeguard your business's financial health and reputation. Externally, demonstrating compliance builds trust with your clients. In an age where data breaches are all too common, customers want to know their information is secure. By following recognized standards, you're showing clients that you take their data protection seriously. This transparency can be a competitive advantage, helping you attract and retain clients who prioritize security. For example, a report by PwC highlighted that 92% of consumers agree that companies must be proactive about data protection. Integrating compliance into your cybersecurity strategy is a clear signal to your clients that you are committed to maintaining their trust and safeguarding their data. In today's digital landscape, where threats are constantly evolving, integrating compliance into your cybersecurity program is essential. It not only helps you manage risks internally but also strengthens your reputation and trust externally. Make compliance a core part of your cybersecurity strategy to protect both your business and your clients. #CyberSecurity #Compliance #BusinessRisk #RiskManagement #DataProtection #ISO27001 #NIST #GDPR #InfoSec #BusinessContinuity #Trust #ClientSecurity

7

1 Comment

Hello, #CTI Family! I have a few cti-industry questions I’ve been mulling over lately and I'm wondering if you can help - If you could integrate your “super spreadsheet” (or Sharepoint, or OneNote, or whatever)—which tracks all your stakeholders, their requirements, your resources, and all that—into your day-to-day toolset, what would that platform be? Some of the ideas I had were: 1. Microsoft Outlook (a.k.a. The “original” threat intelligence platform) 2. Microsoft Teams or Slack?  3. JIRA or ServiceNow? 4. SOAR/MISP?   5. TIPs?   6. Other? Would something with more program management features, templates, and how-to guides be useful?  How important are  #AI and #Machinelearning in your operations?  What do you want more of? How about decision-support and semi-automated analytical technique tools?  What are you using now? Finally, what is missing from the current intelligence tool offering landscape? What frustrates you? (Asking for a friend, thanks) #threatintelligence #riskinteligence #fraudintelligence #CISO #cybersecurity

22

1 Comment

Threat actors take advantage of systems with lingering security flaws and weak configurations. With Assura, Inc.’s risk-based approach to vulnerability management, we prioritize and address what’s most critical to the business. Watch our full demo to learn more. #vmaas #vulnerabilitymanagement #cybersecurity

9

🚩 The momentum going into #blackhat2024 couldn't be better at DirectDefense! This momentum is driven by strategic leadership, industry partnerships, and compelling research, positioning the company for a powerful second half of the year! Can you think of a better time then #blackhat to reach out, connect and setup some time to talk with our team about how we can help? (I can't..... incase you are wondering the correct answer 😉 ) DirectDefense will be hosting a number of events at Blackhat in and around #mandalaybaylasvegas. Reach out and lets set up some time. #mssp #applicationsecurity #pentesting #iotsecurity #otsecurity

8

This is a great post that summarizes 5 key trends in the MSP space. These insights come from Jay McBain's speaking session at the Pax 8 event earlier this month. One thing that stood out was that security has become a major MSP opportunity, with 99% of MSPs deeply engaged with cybersecurity. #MSP #ChannelPartners #CybersecurityServices

3

1 Comment

State, County, and Local Governments in Florida, are you aware of the mandatory cybersecurity awareness training and cybersecurity for executives and managers? The Arruda Group is here to help you check this off your to-do list with a compliance logo for your website. Contact us today at (813) 382-0859 or training@arrudagroup.com to schedule your training and get your compliance logo. Let us help you focus on your job as a network fire fighter. #Florida #CybersecurityAwareness #ComplianceLogo #cybersecuritytraining

4