Shannon Brewster

Are you passionate about responsible use of technology in our society? National Institute of Standards and Technology (NIST) is seeking public comments on four documents in support of last year's Executive Order on the Safe, Secure, and Trustworthy Development of AI. You can visit the NIST website and leave your comments on any or all of the draft documents until June 2. Let's do our part in shaping the future of AI development! Check out the link here: https://lnkd.in/g3ZsB7qV #NIST #AIdevelopment #responsibletechnology

27

1 Comment

CSO guidance on protecting yourself and others: Top 10 physical security considerations for CISOs | CSO Online (https://lnkd.in/eSmDganN)

13

Over the past 90 days in the professional goods and services industry's external threat landscape, APT campaigns attributed to the Chinese APT Mustang Panda and the North Korean Lazarus Group were identified with high confidence. The industry remains significantly vulnerable to spear-phishing attacks, often leading to ransomware incidents. Ransomware remains a high risk with BlackBasta targeting half of its victims from this industry and LockBit3 falling off after February's law enforcement actions. Read the detailed report for more insights.

1

SUMMARY: The NSA's Cybersecurity Collaboration Center offers free, proactive cybersecurity support to businesses and federal partners to combat advanced cyber threats. MAIN POINTS: - The CCC provides free threat intelligence and cybersecurity services to private companies with DOD contracts. - Services include threat analysis, mitigation guidance, and direct incident response assistance from NSA experts. - Small and medium-sized businesses can access high-level cybersecurity resources typically reserved for national security. TAKEAWAYS: - CCC aims to bolster public-private cybersecurity cooperation. - Over 1,000 industry partners have enrolled in CCC services. - CCC processes 70 million DNS queries daily, blocking billions of malicious activities. Bailey Bickley #ccc #nsa #dibservices #dib

146

8 Comments

The SoCal CISO Summit is only 3 weeks away! Don't miss this all-star lineup with Emily O'Carroll, Jonathan Chow, and Arthur Lessard, discussing "The Imperatives of PAM" on May 21st. Organizations have suffered relentlessly from cyberattacks, each week it seems there are new headlines highlighting ransomware attacks or data breaches. With the sensitivity of privileged accounts, unpatched vulnerabilities, and an extensive remote workforce, privileged access management (PAM) is essential to securing your most critical systems and data. Join this panel session to discuss: -Why PAM plays a crucial role in mitigating cyberattacks -Gaining executive buy-in on effective solutions -Having a proactive approach to implementation and configuration Qualified InfoSec leaders, register below! #evantaciso #socalciso #informationsecurity

55

4 Comments

Every month, I look forward to receiving the insider threat incidents report produced by Jim Henderson and the National Insider Threat Special Interest Group. The report highlights events caused by employees across various industries that cause financial and operational damage, put employees and customers at risk, and harm an organization's reputation. Background checks are rarely visited post initial background check, posing a significant insider threat. If you're not already subscribed to receive these monthly reports, let me know and I'll make sure to connect you with Jim and receive them. It's important to stay informed and take proactive measures to mitigate insider risks in your organization. #insiderrisk #insiderthreat #security #riskmanagement

1

2 Comments

With an increase in consumer banking done online post-pandemic, and the current geopolitical situation, it’s important for the Public and Private sectors to share threat intelligence to stop bad actors and Secure the Internet.

5

Great article by FedScoop with insights from my ATARC (Advanced Technology Academic Research Center) webinar earlier this month, where I joined a panel of esteemed federal cyber professionals to discuss the evolving role of AI in cybersecurity. As we navigate the complexities of adopting AI technologies, we emphasize risk-based approaches and the critical role of human oversight. It’s essential to enforce stringent controls around technology and its algorithms to guard against vulnerabilities. We must continue to innovate while ensuring our security frameworks are robust enough to manage these new tools effectively. Staying vigilant against potential risks is crucial as we push the boundaries of technology. #cybersecurity #artificialintelligence #digitaltransformation

16

Imagine diving deep into threat intelligence to uncover insights on potential threats targeting your industry, company, or even your colleagues. With Investigations Management, you can seamlessly manage and share these findings without leaving Ignite! 🕵️‍♂️💼 Investigations Management serves as your personal case management system for Flashpoint intelligence. It allows you to assign tasks, control access to sensitive information, and keep a close watch on threat actors or groups—all within the Ignite platform. 📊🔒 - Keep all your investigations organized in one place, ensuring no detail gets overlooked. - Assign tasks related to threat analysis or response directly within Investigations Management, keeping your team aligned and productive. - Safeguard sensitive data with controlled access settings, ensuring confidentiality at all times. - Stay updated on ongoing investigations and monitor threat actors or groups proactively. - Seamlessly integrate Flashpoint intelligence updates into your workflow, leveraging the latest insights effortlessly. - Collaborate effectively with your team, sharing insights and recommendations to strengthen your security posture. Empower your team to stay ahead of potential threats while optimizing your workflow within Ignite. It's your ultimate tool for proactive threat management and intelligence sharing. 🔍🛡️ #threatintelligence #investigations #Flashpoint #intelligence #risks #security

5

Career change seekers 🔎 read more about how the DoDM aligns with the CompTIA global certification tracks that extends future opportunity success in DoD technology roles. Learn more about how the Lion Solutions - Career Catapult Bootcamp Program as a CompTIA Delivery partner will provide the core foundations of your career exploration to information technology. Shannon Miller Contact us at - contactus@lionsolutions.com if you reside in the District of Columbia, Maryland and Virginia to get started! Workforce Development organizations, we would love to discuss community partnerships to support your tech explorers.. #techequity #technologycareers #whynotyou #technologygrowth #technologydevelopment #technologywealthgap #workforcedevelopment #techforcedevelopment

19

🚨 DFARS 252.204-7021 (the CMMC clause) is currently at the Office of Management and Budget (OMB) 🚨 The abstract states, "DoD is amending an interim rule to implement the CMMC framework 2.0 in order to protect against the theft of intellectual property and sensitive information from the Defense Industrial Base (DIB) sector. The CMMC framework, as defined in Title 32 of the Code of Federal Regulations (CFR), assesses compliance with applicable information security requirements. This rule provides the Department with assurances that a DIB contractor can adequately protect sensitive unclassified information at a level commensurate with the risk, accounting for information flow down to its subcontractors in a multi-tier supply chain." Once approved, the rule will be sent to the Federal Register for publication 👀 You can see the rule here: https://lnkd.in/eyP5dqre Shoutout to Eric Crusius for breaking this news! #cmmc #dod #cybersecurity

35

The call for an independent cybersecurity agency to protect consumer data is a significant step forward in addressing the growing concerns around data security. Centralizing efforts under a dedicated agency can enhance coordination, improve response times, and ensure more advanced protection measures for consumer data. As cyber threats become more sophisticated, having a focused approach to cybersecurity is essential for protecting sensitive information and maintaining trust in digital transactions. #CyberSecurity #ConsumerProtection #DataPrivacy

51

3 Comments

Additional detail on #blackbasta and the attacks on Healthcare Organizations.

3

Great piece by Craig Burland that explores how the principles of accountability and teamwork can fortify your organization's security culture. Give it a read to transform your cybersecurity from a task to a team sport. 

11

ATTENTION: HEALTHCARE BOARD MEMBERS AND C-SUITE EXECUTIVES. ODDS ARE YOUR ORGANIZATION HAS NOT CONDUCTED AN OCR-QUALITY® RISK ANALYSIS! Shocking? NO! Since ... 90% of the organizations subjected to an OCR investigation involving electronic Protected Health Information (ePHI) are found to have failed to conduct the very first requirement (risk analysis implementation specification) in the very first standard (Security Management Process) in the very first area (Administrative Safeguards) of the ol' HIPAA Security Rule. OCR Audits produced equally dismal compliance findings. How can you address your cyber risks if you don't know what they are? EASY FIX! Attend the upcoming COMPLIMENTARY Clearwater OCR-Quality® Risk Analysis Working Lab. #HIPAA #riskanalysis #riskmanagement #cyberriskmanagement #boardcyberoversight #boardofdirectors

1