Dr. Lisa Palmer

Today’s complex data environment requires greater granularity and multiple factors in access control decisions – beyond just identity.  Improve your security and risk posture with zero trust architecture. #GartnerSEC #Cybersecurity #ZeroTrust 

9

I'm attending the 8th Annual Denver Official Cybersecurity Summit, rated Top 5 InfoSec Conference, on Friday, May 17! Join me at this educational event to learn from leading industry experts about the latest threat landscape & best practices. #OfficialCybersecuritySummit #CSSDenver #CRAEvents #cybersecurity

4

I had the pleasure of being invited to this podcast to discuss the state of InfoSec in K12 education. Felicia King and her company, QPC Security are doing some amazing things! You're missing out if you're interested in InfoSec and haven't listened to her podcast. She is a wealth of experience and information. We identified some issues and are going to do a followup episode where we talk about some best practice measures and instant takaways to help improve cybersecurity and harden K12 as a target. If you have specific questions or suggestions, please comment. #k12schools #cybersecurity #cybersecurityrubric #InfoSec #RuleInfoSec #cybersecurityEducation #K12tech #EdTechSecurity #CyberSafeSchools #RiskManagement #VulnerabilityManagement #TechLeaders #DigitalEducation #SecureLearning #ItTakesAVillage

8

"By utilizing ZTDF, we are building a world where information flows freely and securely, empowering individuals, organizations and nations to collaborate and innovate like never before." Virtru Federal's Shannon Vaughn shared great insights on the importance of #datasecurity across the #PublicSector, and how agencies can embrace open standards like #ZeroTrust data format to achieve secure information sharing... https://carah.io/3ce9bf #ZTDF #Virtru Jason Green, John Ackerly, Bobby San Martin, David Robinson, Terry Drinkwine

20

1 Comment

Cyberattacks are a growing threat to our schools, with 80% of K-12 institutions targeted by ransomware last year. The FCC's new $200 million cybersecurity pilot program is a significant step forward. While this funding may not cover all needs, it emphasizes the importance of cybersecurity in education. It's not just about technology—leadership, training, and capacity are key. We must continue to advocate for comprehensive strategies to protect our schools and ensure a safe digital environment for students and educators. #Cybersecurity #Education #Leadership #FCC #EdTech #DigitalSafety

7

#OpenAI joined in the #AISeoulSummit and shared 10 practices rhey actively use and improve upon for ensuresing that #AI systems are both #innovative and #reliable, and can deliver benefits to #society. 1️⃣Empirical Model Red-Teaming and Testing: They are previewed internally and externally before the models are released into the market. Models are not released unless they show a risk potential of less than “Medium” until interventions improve the model’s safety; 2️⃣Alignment and Safety Research: Ongoing efficiency of model safety as a result of alignment research, practical safety systems, and post-study research. This is achieved through appearing efforts in lowering factual mistakes and other toxic output; 3️⃣Monitoring for Abuse: Moderation-specific models and tools to keep track of safety threats and abuse are employed; communicating important findings such as state actor abuse. 4️⃣Systematic Safety Approach: The safety consideration is employed at the different stages of the model namely pre-training; when deploying the model in the real world; and post-deployment safety enhancement. 5️⃣Protecting Children: ✔️Safety measures concerning children are also demonstrated to be rather robust in both ChatGPT and DALL·E; ✔️Working with more than 200 companies such as Thorn for identification and reporting of CSAM. 6️⃣Election Integrity: ✔️Engagement with governments to tackle misuse of AI in the elections; ✔️The disclosure methods that will help detect AI-generated content and legislation to prevent such political content from being created. 7️⃣Impact Assessment and Policy Analysis: ✔️Accomplished research for risk and impact assessment on AI interdisciplinary fields including various industries and occupations; ✔️Studies related to the management of risks in systems involving the use of artificial intelligence. 8️⃣Security and Access Control: ✔️Customers safety, patents, personal and customers’ data confidentiality by managing access, penetration tests, bug bounties, and cybersecurity; ✔️Investigations on new enabling technologies such as confidential computing to improve security. 9️⃣Government Partnerships: ✔️Engagement with governments to practice AI safety policies and to test assurance programs as a method of learning and improvement; 🔟Safety Decision Making and Board Oversight: ✔️Proper deployment of AI models’ safety entails employment of an organized decision-making framework that comprises of a safety advisory group, and the board of directors. 💡I believe that as part of the #ResponsibleAI it is necessary to directly reference #Ethics and #Ethical principles as well as the Responsible AI pillars. What do you think about? 💡Where we touched the AI Seoul Summit: https://lnkd.in/dp2VrPug ✅ Source: https://lnkd.in/duk-_tuC #GPT #LLM #ResponsibleAI #Safety #GPT5 #Development #Framework #Governance

5

2 Comments

This article focuses on how the government needs to grow its AI workforce. Every agency has the opportunity to upskill and reskill its workforce now and enable them to accelerate AI skill development. If AI is the new “must have” skill, then the time to move forward is now. #aiskills #pluralsight

7

https://lnkd.in/ghe5GFDm The days of Mayberry are long gone. Nowadays, simple cyber attacks can be carried out with basic tools available on the internet. As professional organizations, we should have systems in place to stop these mischevious but disruptive acts. This incident at Klein ISD (a Texas school district with a $590 million annual budget and 53,000 students) reminds us that children have ways of testing our vulnerabilities. (thats saying it nicely...) This event highlights the importance of staying up to date in our understandings of cyber defenses. Regularly testing your cyber security configurations for strength and stability should be a routine management task. This kind of network disruption exposes basic gaps and the the lack of routine audit and testing. CIO level guidance can prevent larger, more significant issues in the future. (Yes, DDos testing is an easily accessible paid service online.. this is very common knowledge) Heads up, the elementary age kids armed with Raspberry Pi's are not far behind folks.... Let's all keep ourselves updated! 🤨 Are we getting old? 😂 #CyberSecurity #CyberAttackPrevention #STAARTesting #KLEINISD #Texas #TechnologyPreparedness

2

K-12 schools cyber security challenges and mitigation K-12 schools face a variety of cybersecurity challenges that are critical to address in order to protect sensitive data, ensure the continuity of education, and maintain a safe digital environment for students, staff, and faculty. By proactively addressing these challenges, K-12 schools can better protect their digital environments and ensure a safer, more secure learning experience for all. Here are some of the key cybersecurity challenges in K-12 schools: 1. Limited IT Resources 2. Inadequate Security Awareness and Training 3. Outdated Infrastructure 4. Increased Use of Technology and Remote Learning 5. Sensitive Data Protection 6. Cyberattacks and Ransomware 7. Third-Party Vendor Risks 8. Cyberbullying and Online Safety 9. Policy and Governance 10. Physical Security   Mitigation Strategies: To address these challenges, K-12 schools can consider the following strategies: - Invest in Cybersecurity Training: Regular training for students, teachers, and staff to build awareness and resilience. - Upgrade Infrastructure: Allocate budget for updating hardware and software, and implementing modern security measures. - Develop Incident Response Plans: Establish and regularly update incident response plans to prepare for potential cyberattacks. - Enhance Data Protection: Implement strong encryption, access controls, and regular audits to safeguard sensitive data. - Engage with Vendors: Ensure that third-party vendors adhere to high security standards and conduct regular security assessments. - Implement Monitoring Tools: Use cybersecurity tools to monitor networks, detect threats, and respond promptly to incidents. For more information about XeneX support for K-12 cyber security needs and a more detailed version of this blog please visit us at www.xenexSOC.com #cybersecurity #soc #compliance #incidentmanagement #cyberinsurance

5

Microsoft Friends - Heading to the NASCIO Midyear Conference at National Harbor? Let's meet! We’re proud to be a sponsor and our team will be there to listen, learn, and collaborate with State CIOs and other corporate members. Government agencies must rigorously prioritize Microsoft 365 security and governance. Did you know? 📊 The data shows that 94% of organizations face attacks on collaboration tools like Teams and SharePoint. 😱 And, if that wasn't enough, Gartner reports that 99% of cloud data breaches are the result of human misconfigurations. Agencies can prevent M365 misconfigurations, find and fix critical collaboration and identity risks, and minimize privilege exposure with end-to-end M365 security, governance, and automation from CoreView. 💬 Let's talk about Copilot, M365 governance best practices for government, and more at NASCIO. Schedule a meeting with us here: https://okt.to/2qxea1 #NASCIO2024 #NASCIO #Microsoft365 #M365 #GovIT #stateIT

12

1 Comment

Headed to RSA Conference? Here are a few tips from someone who has been there ~22 times, (but who is counting?!) In addition to the big vendors who often host informational talks at their booths, make time to visit the small booths on the expo floor. You will see cool, new technology; meet interesting people; and the vibe is less intense. Go to the sessions that interest you the most and turn on your active listening skills. Your texts and emails can wait. The speakers spend months preparing high quality, compelling content. They deserve our attention and informed Q&A. Help the new folks with directions, tips, and advice they seek. We were all new once. Network. Make it a goal to meet 5 new people and build a plan to stay connected to them. Rest. It is a marathon, not a sprint. There are a lot of competing events and demands on your time. Make sure you take time every day to recharge and rehydrate. Create a buddy system for your safety. Prioritize rest and safety. Have fun. RSA week is one of the coolest weeks of the year. It can be as entertaining and compelling as you make it. The opportunity for engaging conversations, deep topic discussions, forging new friendships, and building industry depth is unsurpassed. Hope to see you there!

586

39 Comments

Accelerate your credibility with the executive leadership team, regardless of your reporting line. Be seen as a trusted ally, especially if you are new to the CIO role; and reinforce your standing if you are a veteran! To quickly build credibility with the C-suite, CIOs should: Turn IT into a digital revenue generator Adopt franchising digital delivery mindset Build reliability by anticipating GenAI for their industry Learn more here. Gartner for IT | #GartnerIT #CIO #Leadership #DEEPakAI

4

If you are in Higher Ed and you have implemented the HIPAA Compliance for Google Workspace, I would greatly appreciate if we can connect. We are confused by some of the instructions we see in this guide - https://lnkd.in/g_wAYtbt - and would love to learn how others have implemented it so we can apply them to our instance. Thanks in advance.

9

1 Comment

ICTCIT 2024 is in full swing at the University of Texas at Dallas! Today's topics? AI and Cybersecurity. Specifically, we're diving into Generative AI and Large Language Model Applications in Medicine. A mouthful, I know, but fascinating nonetheless. 🧠 We're exploring how these technologies can revolutionize healthcare. Imagine AI predicting diseases before they happen. Or personalized treatment plans generated in seconds. The potential is mind-boggling! 🚀 I'll be sharing insights from the conference here. Stay tuned for the latest in AI and Cybersecurity. Remember, the future of medicine is digital. Let's embrace it.

40

3 Comments

Attention North Eastern Oklahoma Professionals: Are you interested in a seminar on creating or maturing your cybersecurity, privacy, risk, or compliance programs? I'm planning to host a series of free workshops, offering springboard documentation and discussions on effective approaches. Contact me directly if you're interested! #PositiveDisruptor #PosDisruptor #DigitalDucks #ThinkDifferently #ProgramBuilding #Cybersecurity #TechnicalDocumentation #OrgChange #OrgCulture

2

Today, the joint Cybersecurity Information Sheet “Deploying AI Systems Securely” was published by CISA. The guidance provides best practices for deploying and operating externally developed artificial intelligence (AI) systems and aims to: · Improve the confidentiality, integrity, and availability of AI systems.  · Ensure there are appropriate mitigations for known vulnerabilities in AI systems. · Provide methodologies and controls to protect, detect, and respond to malicious activity against AI systems and related data and services. #cisa #ai #artificialintelligence #cybersecurity #informationsecurity #ciso https://lnkd.in/ewjU2C9x

23

The integration of AI in cyber threat intelligence is redefining cybersecurity paradigms. GDIT's latest whitepaper unpacks the role of AI in enhancing CTI, offering insights into leveraging technology for advanced threat detection and response. https://ow.ly/IZul30sBRae

10