Ross Bellak

Did you know identity and credential misconfigurations represent a majority of security exposures in organizations? Patching these vulnerabilities isn't a complete solution, but it is still important. If you weren't aware, many exposures end up being dead ends, which allows companies to focus more on areas that actually pose a threat. I recommend identifying attack paths and paying more attention to high-risk choke points to reduce risks efficiently. #Cybersecurity #Cyberattacks #Business #Cybercriminals

3

Knowing and understanding your entry points would improve your endpoint security. Understanding them impacts your cybersecurity strategy, so start looking for the endpoints most susceptible to cyber threats. I recommend categorizing your endpoints by function and importance to get the best results. #Cybersecurity #Endpoints #CyberThreats

2

Experts weigh in on AI's impact on cybersecurity. Matt Aldridge states that it accelerates exploitation and "helps criminals manage stolen data, often unstructured and vast." However, it can also defend against risks and suspicious behavior. There are both good and bad sides to this technology, and it really depends on the user's intentions. #AI #Cybersecurity #Technology

3

As an MSP, your clients rely on you to keep their data safe. But are you equipped for the upcoming CMMC requirements? My 'CMMC Desktop Reference Guide' is designed specifically for MSPs, giving you the tools and knowledge to not only meet compliance, but also impress your clients and attract new business. Don't wait until it's too late – download the guide now and stay ahead of the game. https://lnkd.in/g4_veZz8 #CMMC #guide #compliance #business

3

As an MSP, your clients rely on you to keep their data safe. But are you equipped for the upcoming CMMC requirements? My 'CMMC Desktop Reference Guide' is designed specifically for MSPs, giving you the tools and knowledge to not only meet compliance, but also impress your clients and attract new business. Don't wait until it's too late – download the guide now and stay ahead of the game. https://lnkd.in/g4_veZz8 #CMMC #guide #compliance #business

3

STANDING OUT IN A CROWDED COMPETITIVE MARKET - HOW CAN YOU GET MY ATTENTION? 🎯 👀 Greg Crowley, CISSP, CISM & Tia (Yatia) Hopkins discuss how vendors can cut through the noise on the CISOnomics podcast - links in comments. eSentire

4

1 Comment

Your organization’s cyber defense is important. But your #CyberResilience is even more critical. Find out why in this look back at #RSAC 2024 with CDW EVP, Global Security Strategy Office, Buck Bell. It’s a must-see! #Security #DisasterRecovery https://dy.si/quRT6

15

In today’s fast-paced digital world, it’s crucial to stay ahead of the curve. Whether you’re a small business owner looking to streamline your IT operations or a large corporation seeking to optimize your technological infrastructure, New Resources Consulting has got you covered.

3

The 5th annual Data Protection Trends report from Veeam summarizing data protection strategies of up to 13,300 organizations over 2020‑2026. Download the report to learn how business and IT leaders addressed these issues from shared insights: https://lnkd.in/eRzc85Wh #Veeam #DataProtection #Report

12

Phishing Reminder - Be Extra Vigilant! Malicious phishing attempts explode immediately following a major news event (such as the events from this past Saturday, and the worldwide IT systems outage yesterday) - so please be extra vigilant. Emails, social media posts, and SMS, even if they look like it’s from someone you know, can all be faked and can all contain malicious content. The creativity and impersonation levels of attackers is at an all-time high. A real-life, personal example that is also been used across the country: Someone saying they were "Greenville County Deputy Tony Hannon" called my wife on her cell phone stating that she had failed to show up for Jury Duty. His caller ID showed “Greenville County Sheriff” and his caller ID showed the number that is listed in the phone book. If you search “Tony Hannon” online, he is a real Sheriff’s Deputy. He provided her full name and mailing address and asked her to verify that information (she refused). He started using various threats, including threatening to send someone to her place of work to arrest her immediately. Although quite shaken, she had the presence of mind to not comply and insisted on calling the Sheriff's office back directly, as this was in fact a very creative scam. So what should you do about all of this? • Check it before you click it. Hover your mouse over any link before you click on it to make sure it's going to take to you a site that you trust • If you do slip up and click something from a company computer, NOTIFY YOUR IT DEPARTMENT IMMEDIATELY! It can happen to any of us during a momentary lapse of attention, or during a period of heightened curiosity • Be extra cautious when giving out (or even confirming) your personal details. Anytime you get a call that starts to get personal or starts becoming threatening, tell the person you’ll call them right back at the number you have on file – and don’t use any number they give you! If it’s legitimate, the person on the other end will understand. Sadly, this is the world we now live in. Be safe out there.

15

ConnectWise CEO Jason Magee discusses why AI and cybersecurity go hand in hand to outpace and outsmart threat actors. Watch his conversation with me following his keynote at last week's IT Nation Secure conference in this episode of CRN Asks A CEO for CRNtv: The IT Nation #ITNation #ITNSecure

5

For years, I championed the reporting structure of the CISO to the board. Building on insights from Bob Zukis, I now advocate for CISOs and Technical experts serving on boards. Recent congressional interviews with breached organizations underscore the insufficient focus on cybersecurity in the boardroom. Cyber attacks continue to disrupt organizations, significantly impacting shareholder profits. It's time to prioritize cybersecurity on par with finance and audit. #Cybersecurity #Boardroom #BusinessSecurity #CISO #business #systemicdigitalbusinessrisks

85

18 Comments

Insider threats are a risk for your business as well as your vendors & consultants. Interview tough, run those background checks, have a third-party risk management program, and make sure you have a solid plan for asset management and DLP!

15

No matter where your organization is on your #ZeroTrust journey, achieving optimal maturity is always the end goal. Check out some tips and tactics to help you build your #ZTA with CDW VP of Security Stephanie Hagopian! #Security https://dy.si/RhqFA

19

How deep is your IT security bench strength? Check out this lineup of five types of #cybersecurity professionals to confirm your bases are covered.

6

📌 Recently, an incident occurred that made me realize the need to adjust disaster recovery process and Business Continuity Plan (BCP). This event prompted me to ask myself several critical questions to ensure our systems and teams are better prepared for any future disruptions: ✏ Should the system administrators have dual boot? Having dual boot options could provide our sysadmins with the flexibility to switch between operating systems in case one becomes compromised or unusable. This could significantly reduce downtime and enhance our response time. ✏Should critical teams have a % running on another OS? Diversifying the operating systems used by critical teams could minimize the risk of a single point of failure. By ensuring that a certain percentage of our critical operations run on alternative OS platforms, we can improve our resilience against OS-specific vulnerabilities and issues. ✏Should we have different OS images with different "vendor" agents? Utilizing different OS images with varied agents from multiple vendors could enhance our security posture. This approach can prevent a single vendor's failure from affecting our entire infrastructure, thereby increasing our overall reliability and security. 🔔 These considerations are essential as we strive to build a more robust and resilient infrastructure. By addressing these questions, we can better prepare for unforeseen challenges and ensure continuity of our operations. 🎙 Your thoughts and feedback on these points would be greatly appreciated as we work towards improving our disaster recovery and BCP strategies. https://lnkd.in/eA2qvyzH

1