Marene Allison

Sampling methodology for FedRAMP Authorization to Operate (ATO) involves selecting a representative subset of systems and processes to evaluate compliance with FedRAMP security requirements. This approach ensures that the assessment covers critical areas while managing time and resource constraints efficiently. Learn more about the FedRAMP pre-assessment journey by watching the full presentation by our very own Zyad Nabbus and Nathalie Baker of Aquia. https://lnkd.in/euv7rSE4

10

1 Comment

New Hampshire Public Radio Suffers Cybersecurity Data Breach New Hampshire Public Radio is collaborating with cybersecurity experts and law enforcement to assess a recent data breach. NHPR Chief Financial Officer Travis Boucher shared that the breach appears to have had a minimal effect on the group’s internal systems. The breach only affected a limited number of business-related folders, Boucher explained, emphasizing the preliminary nature of the findings. He reassured listeners and donors that the extent of the breach was contained thanks to NHPR’s strong cybersecurity infrastructure and swift response measures. However, specific details about what the folders contained or the precise timeline of the attack have not been disclosed to maintain the integrity of the ongoing investigation. Boucher’s communication did not specify who the external cybersecurity experts are but confirmed their engagement in a rigorous review process. He also mentioned that while the investigation into the full scope of the breach continues, the impact on the station’s operations has been negligible. NHPR’s news output and programming schedules remain unaffected. The public broadcaster has already taken significant steps towards data recovery and bolstering its defensive measures to protect its databases. https://lnkd.in/gRsebcxU #cybersecurity #cyberattack #cybercrime #cyberrisk #cyberthreats #informationsecurity #infosec #breach #databreach #malware #google #bing #networksecurity #technicalsupport #itservices #itsupport #dataprotection #datasecurity #itnews #hackingprevention #cloudsecurity #riskmanagement #fbi #vciso #securityexpert #cisa #financialrisk #manufacturing #iot #ransomware

7

Learn about freely available resources that can help you implement a #ThreatInformedDefense and see the value of collaborative #RandD. Download the Center for Threat-Informed Defense's latest annual report now. https://hubs.ly/Q02tSpSp0 #cybersecurity #cyberattack #cyberdefense #cyberthreats #ctid #mitre

14

Dealing with civil unrest can be challenging, but our Principal Advisor and Certified Threat Manager, Dave Benson, MS, CTM, is here to share his expert insights.   In this two-part series, Dave discusses steps for effectively managing demonstrations and civil unrest. The first part focuses on the Organizational Response, providing valuable strategies for organizations to prepare for and handle such situations.   With recent demonstrations erupting on college campuses nationwide, this timely guidance couldn't be more relevant. Stay tuned for the second part tomorrow, where Dave will cover the Individual Response, equipping you with the knowledge to stay safe amidst civil unrest.   Don't miss out on this invaluable resource! Share this post with your colleagues, friends, and family to ensure they're well-informed and prepared.   #civilunrest #demonstrations #protests #security #securityresponse #violenceprevention #securityprofessional #securitymanagement

10

Keep up with changes to NYS DFS regulations, and transform compliance challenges in to competitive advantages. Learn more in our latest blog. #cybersecurity #DFS500

5

In this white paper, learn how you can confront the challenges facing public safety agencies when handling digital evidence with a platform that redefines what’s possible in the pursuit of justice: https://ow.ly/xzEY50Rkcj6 #DFIR #MagnetOne

24

New ASIS Blog: “CSO Center Security Insights: Security Risk Management.” The energy industry is simultaneously experiencing changes to the core business model while dealing with a rapidly evolving risk landscape, and security executives need to know how to adapt to change without compromising security risk management. To expand further on this topic and on the SM Magazine article, “Girding the Grid” by Michael Gips and Brian Harrell, hear from CSO Center member Scott Gibson, with The Chertoff Group, on what you need to know as a senior security executive. https://brnw.ch/21wJ8yD #security #securityprofession #MyASIS

35

4 Comments

Tolerable Risk in Railways: Meet industry leaders from CSX, Amtrak and MTA NY this June 11/12th in Florida for the 4th annual Rail Cybersecurity USA conference .buff.ly/3IiNhCi How are risk thresholds determined and adjusted to align with industry standards and regulatory requirements? What are some of the challenges of establishing and maintaining acceptable risk levels in an evolving cyber threat landscape? #railcybersecurityusa #railcybersecurity #riskmanagement #cyberrisk #railways

3

When breaking news hits, organizations must have up-to-the-minute situational awareness. Protests and unrest can affect your people, infrastructure and assets. Click the link below for a free 30-day trial to MSA's executive package intelligence subscription for timely threat intelligence. https://ow.ly/ewpa50Rr73L #MSASecurity #BreakingNewsAlert #SituationalAwareness #ProtestPreparedness #AssetProtection #ThreatIntelligence #MSAExecutivePackage #StayInformed #RiskMitigation #SecurityAlert

6

This Cybersecurity and Infrastructure Security Agency guide offers actionable steps to combat the evolving tactics of foreign malign influence operations. More resources available here: https://lnkd.in/ebM9fqFn #security #nationalsecurity #homelandsecurity #infrastructure #criticalinfrastructure #CI #resource #research #resources #highthreat #threat #threats #cybersecurity #cyber #electionsecurity

7

In the latest video from our series, Cynomi Co-founder and CEO, David Primor and cyber expert William Birchett from Logos Systems discuss CMMC 2.0 and its implications for defense contractors and subcontractors. CMMC 2.0 is the latest requirement for defense contractors and subcontractors. Anyone who sells to the Federal Government—from Windows to widgets to safety gear—must meet these compliance standards. As MSSPs and MSPs, you play a crucial role in helping your clients achieve CMMC 2.0 compliance. 🌐 Here are three ways you can assist: ✅ Self-Comply ✅ Assist in Self-Attestation ✅ Encourage Timely Audits For more assistance, leave us a note in the comments. We're here to help your MSSP/MSP navigate the complexities of CMMC 2.0 compliance. 🎥 Watch the full video here to find out more: https://hubs.la/Q02yZY8p0

8

Cybersecurity and Infrastructure Security Agency (CISA) has recognized April as Emergency Communications Month with this year’s theme being #Resilient Together. Given the recent incident in which the 9-1-1 service in four states was disrupted for several hours in the past week due to an #accident, and the #severeweather season, effective #communications and organizational #resilience is particularly relevant. Building a communications program that understands its audience, leverages primary, alternate, #contingency, and #emergency #communications, and ensures key individuals and all employees understand their roles can ensure that the organization, and larger community, are prepared to respond in the event of an incident or #emergency. https://lnkd.in/eYuCAE4e

5

#LawEnforcement agencies are undergoing major transformations driven by new technologies. Our recent blog covers 3 key advancements for modernizing policing and enhancing #publicsafety. Gain insights here: https://ow.ly/9MsW50SeeEJ

1

NY governor says cyberattack on legislative office is holding up state budget Read more on the link below. #defense #sbir #military #jointwerx #cmmc #cyber #cybersecurity @jointwerx @blackhaysgroup #GovernmentContracts #InfoSec #CyberDefense #NationalSecurity #DigitalTransformation #PublicSector #Startups #TechInnovation

1

Cyber Force measure expected to resurface in House defense bill debate. Why it matters: 1. "Why it matters": A proposed bipartisan amendment by the House Armed Services Committee could usher the U.S. military into a new era of battlefronts, this time in digital space. 2. The proposal aims to capitalize on the exponential growth of cyber threats and equip U.S. defense better by creating a dedicated Cyber Force—an initiative that, if successful, would mark the military's second new branch since 2019, following the Space Force. 3. Critics argue that the initiative could detract from existing military cyber efforts, highlighting the major changes facing federal defense strategy. However, if created, the Cyber Force could address the longstanding issue of inadequately trained digital personnel across different military branches, transforming the U.S.'s cybersecurity landscape. Learn more by visiting The Record from Recorded Future News: https://lnkd.in/e7Teb9Jn

2

Have burning CMMC readiness questions? We've got the answers! We teamed up with Coalfire Federal to bring you a must-watch webinar on CMMC assessments. Join CMMC experts Laura Spencer of Systems Engineering, and Tom Sunderland of Coalfire Federal as they dive into: ✅ Key insights on CMMC readiness ✅ Common pitfalls and misconceptions during Joint Surveillance Voluntary Assessments #JSVA ✅ The role of external service providers (ESP) ✅ Essential takeaways for CMMC assessment readiness Plus, they answer burning questions from organizations in the Defense Industrial Base #DIB, under the United States Department of Defense. Watch the interactive webinar now and get your CMMC questions answered! https://hubs.ly/Q02zVC4w0 #LeadingTheITConversation #CMMC #Cybersecurity

5