Michael Flaherty

📚 Unlock the secrets of CMMC with our eBook: "The Alphabet Soup of CMMC: Common Terms Defined And Your Recipe for Success." Get clarity on the essential terms, acronyms, and concepts shaping cybersecurity discussions. Whether you're new or seasoned, this guide has insights for everyone. 🔍 Decode the jargon, understand compliance, and fortify your security posture. But that's not all! We go beyond definitions, offering a roadmap for CMMC success. Learn how to blend compliance, security, and efficiency seamlessly. 💡 Download now for a comprehensive CMMC journey. Secure your business, streamline processes, and elevate your cybersecurity game. Don't miss out! #CMMC #Cybersecurity #eBook #DownloadNow https://lnkd.in/gTckemEF

3

CISA is hosting a webinar on cybersecurity that would be relevant and useful for our members to join. Oregon Stakeholders Session: June 11th, 2024 1:00pm-2:00pm PT Location: Virtual via Microsoft Teams (Link sent upon registration) Registration Link: https://bit.ly/3Re27AM #cybersecurity #ransomware #oregon #publicschools #infosec #security #schools #learning #educationmatters

1

Keeping your organization safe from ransomware attacks is crucial for business survival. Discover how the CISA's pilot program is sending warnings to vulnerable businesses and learn how organizations can sign up.

11

1 Comment

#SEC finalized amendments for S-P, designed to protect PII. RIAs, BDs and more must, (1) have a written incident response plan (IRP) and (2) develop procedures to notify people whose PII was improperly accessed. To quote the SEC, "The basic idea for covered firms is if you’ve got a breach, then you’ve got to notify. That’s good for investors.”" 18-24 months to implement. #ria #rias #cybersecurity

4

Californians get hacked all the time. The state's top cybersecurity job is vacant - Jefferson Public Radio: Californians get hacked all the time. The state's top cybersecurity job is vacant  Jefferson Public Radio #CyberSecurity #InfoSec #SecurityInsights

2

Exciting morning in Defense Contractor land! The #CMMC Final Rule has moved to its last phase before publication. All the comments were responded to... Even the angry ones... (Golly geez I hope some of those errors in the proposed rule got fixed, since I and Kieri Solutions - Authorized C3PAO will be helping enforce it! 😬) Well done Stacy Bostjanick, Buddy Dees, and the DoD CIO team for keeping your cool during those late nights. 𝐖𝐡𝐚𝐭 𝐜𝐚𝐧 𝐰𝐞 𝐞𝐱𝐩𝐞𝐜𝐭 𝐧𝐞𝐱𝐭? Disclaimer: Below projections are best guesses, with help from the esteemed Jacob Horne (follow him!). The CMMC final rule (32 CFR) should be published in the Federal Register around Sept-Oct this year. Then we get 60 days to freak out before it "goes into effect". Somewhere around this time, CMMC eMASS (the database that holds the certification statuses of each company) should come online and C3PAOs like my company will start using it. Between News Years and March 2025, I think we assessors will be allowed to start doing CMMC assessments and certifications at full speed. I'm sure the DoD's intent is for it to be closer to New Years, but we will still need some prerequisites (eMASS, Cyber-AB procedures, a CMMC "certificate" template) to be figured out. The DFARS clause (48 CFR) that adds a certification requirement for contract award will go into effect a bit later - maybe March 2025? It will start with self-attestations for CMMC, then 6 months later new and renewing contracts will start requiring actual certifications for most programs (especially ITAR and Controlled Technical Information programs). If your company has over $30m in defense contract revenue, here is your call to action - get into our queue for Gap Analysis or Assessment. You can afford the cost to make sure you're ready to go when contracts start including CMMC requirements. If you have subcontractors that are vital to your operations, talk to them. You will be responsible for ensuring that your entire CUI supply chain is certified. 𝐇𝐚𝐬 𝐭𝐡𝐢𝐬 𝐟𝐢𝐧𝐚𝐥𝐥𝐲 𝐜𝐨𝐧𝐯𝐢𝐧𝐜𝐞𝐝 𝐲𝐨𝐮𝐫 𝐥𝐞𝐚𝐝𝐞𝐫𝐬𝐡𝐢𝐩 𝐭𝐡𝐚𝐭 𝐂𝐌𝐌𝐂 𝐢𝐬 𝐫𝐞𝐚𝐥? If you're scrambling at this late hour, let me suggest a few solutions: At Kieri, we have a CMMC compliance program (the KCD) that tells you exactly what you need to do, how to do it, and when, to get and stay compliant. If your current network can't pass assessment, check out our Reference Architecture (the KRA), which can be built and assessment ready in about 4-6 months, either by your team or ours. We specialize in helping IT teams be responsible for their own compliance. Kieri Solutions - Authorized C3PAO website: https://kieri.com

238

13 Comments

Intense budgetary pressures can make working in IT for a government organization even more challenging than a private enterprise. When the Arizona Department of Education (ADE) recognized the need to move to a more modern, secure cloud platform, the wizards of scrappy, innovative thinking turned to Azure to help maximize every dollar spent. Read more to learn how the Arizona Department of Education bolstered their backup capabilities and security while working within the confines of a very tight budget. Then speak to our team, we can help your business achieve more with Azure.

1

Three out of four data breaches can be linked 🔗to human error, privilege misuse, stolen credentials or social engineering. Learn key lessons from Verizon's Data Breach Investigations Report in this infographic.

1

Implementing edge-to-cloud security with #Aruba. Lakeshore IT Solutions, Inc. recommends checking out this eBook, where you'll learn how Aruba's WAN edge technology paired with best-of-breed security delivers high performance without compromising security. 🎯

2

Port of Los Angeles has had an honest outlook on maritime cybersecurity. In 2023, the Port of Los Angeles alone stopped 750 million cyber intrusion attempts. Makes you wonder what other maritime operations and shipyards are being attacked. Time to be vigilant. #maritime #usnavy #shipyards #dod #DHS #CISA #cybersecurity

3

"More vendors" doesn’t equate to "more protection." In fact, it leaves you more vulnerable to risk because it’s easy to overlook duplicate efforts, security gaps and growth opportunities. Bundling your GRC services into one platform is the most effective method for trimming the fat. It connects all your business groups to leave you with a better understanding of how your organization is functioning as a whole. Ready to reap the benefits of consolidation? Check out our recent guide to learn how to get the process started. #GRC #VendorConsolidation #RiskManagement

12

It's all too easy to feel overwhelmed by the rigorous demands of attaining or maintaining the CMMC compliance you need, knowing your current or future contracts could be at stake. This Stress Awareness Month, remember that preparation—and a helping hand from someone you trust—is the key to keeping your cool. Partner with a C3PAO with the experience and expertise to help you achieve CMMC certification. https://bit.ly/3MT8mH9 #Cask #caskgov #CyberConsulting #Cybersecurity #DataSecurityConsulting #StressAwarenessMonth

1

Ever experience this before? This has happened to us more often than we like to admit! Gotta use a password manager! #DataProtection #cyber #cybersecurity #security #tech #technology #utah #securityawareness #cyberconsulting #infosec #hacking #emailsecurity #securityawaresstraining #phishing #cybersecuritytraining

2