Sriram Dandapani

🚨 Data Breach: Kaiser Permanente® On October 25, 2023, Kaiser Permanente identified a privacy incident where certain online trackers (cookies/pixels) on their websites and apps transmitted personal info to third-party vendors Google, Microsoft Bing, and X (Twitter). Although no sensitive information like Social Security numbers or financial details were involved, it's a reminder of the importance of cybersecurity. At OccamSec, we serve companies in need of proven cybersecurity measures, and we have the proof with our Fortune 100 clients. With industry-standard accreditation, we can help you stay vigilant and protect customer data. Drop us a line, and let us help you enhance your security posture. https://lnkd.in/guGK3qax #CyberSecurity #DataBreach #Privacy #KaiserPermanente #OSec

6

In conversations about cyber risk quantification people will often refer to enterprise risk, vendor management/TPRM, and cyber insurance quantification all as confused interchangeable blobs. Vendors in these related spaces are more than happy to blur the lines as well. Yes these are related but how they are related to each other matters. Three clarifications: 1: Enterprise cyber risk management (ECRM) is the core problem. This is part of the root of the overall risk management tree for organizations which includes all aspects of enterprise risk. This is the actual full problem companies are trying to solve. 2: In order to answer the ECRM question companies need to address the risk introduced by third party relationships as it contributes to overall cyber risk - this is TPRM for cyber risk 3: Cyber risk insurance represents the residual portion of ECRM (including data breach risk, third party cyber risk, privacy risk, legal risk etc.) that could not be mitigated with controls and must be transferred - this is the portion of risk an organization chooses to offset with insurance payments A comprehensive view of ECRM would be based on data that allows an organization to view internal and external views of risk posture(lets start here), including third party relationship risks. For ECRM, an organization should be able to request access to another partner organizations ECRM data/reports. An insurance carrier should be able to request access to an organizations ECRM view for underwriting. Consistency, structure, transparency, accuracy. This is the dream. This is the hope.

12

5 Comments

Power up ⚡ your vulnerability remediation cycle with the platform designed to zap 21st century headaches. We're talkin' saving time spent patching, automating your work, and getting back on CISA's good side. Here's how Vicarius helps: 🔹 See everything in one place: Forget siloed data and endless spreadsheets. Vicarius provides a single source of truth for all your vulnerability data. 🔹 Prioritise like a pro: Vicarius goes beyond just severity scoring. It uses real-time context to prioritise vulnerabilities that matter most to your organisation. 🔹 Patch smarter, not harder: Integrate patching for Windows, Linux, Mac, and third-party applications – all from the same platform. 🔹 Automate the mundane: Free yourself from repetitive tasks. Vicarius automates patching, threat mitigation, and even vulnerability scans. Try vRx today, risk-free, pain-free. (Seriously, why wait? ) #vulnerabilitymanagement #cybersecurity #CISA #automatedsecurity #patching

2

It’s live! Devo published a new book, “The Modern CISO: An Essential Guide for CISO Success.” In it, we share insights from our survey of 200 security leaders and several industry-leading CISOs. In my perspective, the CISO role is one of the most ambiguous executive roles and is relatively still in its infancy. As new threats and regulations emerge, so does the role and our organizations’ understanding of it. The guide takes a deep dive into these dynamics and shares advice for CISOs on navigating these shifts. Check it out! https://bit.ly/49MqfRn #CISO #CybersecurityLeadership

98

4 Comments

Okta signed the Cybersecurity and Infrastructure Security Agency’s Secure by Design pledge at #RSAC to take meaningful steps in adopting #secure by design principles in the coming year. I am excited that we are accompanying our peers in the industry to take the steps needed to prioritize application security. Identity-based #attacks have become a top method for cybercriminals, and according to the Open Worldwide Application Security Project, broken access control is the number one most common web application security risk. It’s putting companies building their applications at risk. This is a priority for Okta. There’s never been a more critical time for us to come together and implement secure design principles to keep the #identity #secure. Learn more about this pledge https://bit.ly/3UQNLbz. Tomorrow is also Okta Showcase! I am excited to join Todd McKinnon, Sagnik Nandy , and others to share the latest product innovations & commitments Okta is making to secure identity. You can tune in here: https://bit.ly/4cLldaI

186

2 Comments

If you're curious about how NodeZero is setting new standards in cybersecurity, I highly recommend reading this insightful discussion from Cyber Defense Magazine!

4

The pressure on Chief Information Security Officers (CISOs) is at an all-time high. Vendict's latest CISO Burnout Report uncovers: ⚠️ Alarming levels of stress 🔥 Burnout among these key cybersecurity leaders Highlighting an urgent need for better support systems and sustainable work practices. 🔥 Vendict's CISO Burnout Report reveals the intense pressure on CISOs, leading to skyrocketing stress and burnout. It's critical to implement mental health resources and sustainable practices to safeguard these vital leaders. Click here to read Vendict's CISO Burnout Report: https://lnkd.in/euZUrNi9 #MentalHealth #CISO #CyberSecurity #SelfCare #BusinessPractices #Change #Resilience #Burnout #Stress #Vendict #Report #Leadership #Security #WorkLifeBalance #SupportSystems #Sustainability #TechLeaders #ITSecurity #Wellbeing

2

This Kiteworks article provides valuable insights into the NSA's approach to enhancing Zero Trust maturity within the data pillar, emphasizing the critical importance of safeguarding data in today's cybersecurity landscape. Understanding the value and risks associated with data is paramount, and the emphasis on implementing data-centric security controls aligns well with best practices in cybersecurity. Overall, this article serves as a comprehensive resource for organizations seeking to strengthen their cybersecurity posture in an increasingly interconnected digital environment. NSA’s Advancing Zero Trust Maturity Throughout the Data Pillar: A Comprehensive Guide 👉 Learn more: https://gag.gl/qQPSz9 #cybersecurity #zerotrust #NSA #blog

17

The world of governance, risk, and compliance is transforming. Are you ready to adapt? Check out our white paper, "GRC in 2030: A CISO Survival Guide." 🔍 Key takeaways include: • Addressing challenges in cloud and regulatory landscapes • How AI can transform your compliance approach • The importance of Continuous Controls Monitoring (CCM) • Benefits of Compliance as Code/OSCAL Gear up for 2030 and beyond. Get the insights and strategies you need for GRC success. Download the white paper now! 📥 https://loom.ly/fdOxM6w #GRC #Compliance #CyberSecurity #AI #CCM #ComplianceAsCode RegScale

12

🔐Securonix's Ankit Deka Featured in the San Francisco Examiner San Francisco Examiner Discussing the Future of Gen AI in Cybersecurity🔐 Ankit Deka, our UX designer, recently shared his expertise on designing Gen AI-led security products. According to Ankit, embracing Gen AI in UX design is crucial to staying competitive and delivering cutting-edge user experiences. 📰 Read the article: https://lnkd.in/ghVJuEtY Ankit was part of our team that developed Securonix EON, our groundbreaking suite of AI-Reinforced capabilities, which was recognized by CRN as one of the 20 Coolest Cybersecurity Products at RSAC 2024.🙌🏽 🌟 Join Us in Shaping the Future 🌟 We're excited about the transformative potential of Gen AI and are pioneering its integration into our cybersecurity solutions, transforming how CyberOps detects and respond to threats. Learn more about Securonix EON: https://lnkd.in/gjUGnBiF #GenerativeAI #Cybersecurity #UXDesign #Innovation #GenAI #AIReinforced #SOC #CyberOps #SIEM #AI

4

When the SolarWinds and Codecov breaches unfolded, Ashish Kurmi and I were driving CI/CD security initiatives at our previous employers. The glaring lack of security in CI/CD pipelines that these incidents highlighted compelled us to start StepSecurity. We looked around, spoke with peers, and realized there was no solution to prevent such CI/CD attacks. So, a couple of years back, we started building our product in the open and offered it for free to help secure CI/CD pipelines for open-source developers. Little did we know that it would be the beginning of something special. 🎉 Today, we are thrilled to announce that StepSecurity has secured $3 million in seed funding to protect CI/CD pipelines for open-source communities and enterprises. This round is led by Runtime Ventures (David Endler and Michael Sutton), with participation from Inner Loop Capital (Justin Label), SaaS Ventures (Collin Gutman and Seth Shuldiner), DeVC (Aakash Kumar and Divyanshi Chowdhary), and several notable industry leaders as angel investors, including Anmol Malhotra, Ash Devata, Ashish Popli, David B. Cross, Deepen Desai, Kamal Shah, Lucas Moody, Prabhdeep (PD) Singh, Rinki Sethi, Sekhar Sarukkai, and Travis McPeak. 🚀🚀

404

79 Comments

Bitsight is leading the charge in cybersecurity, securing a Leader position in The Forrester Wave™: Cybersecurity Risk Ratings Platforms, Q2 2024! Discover why we believe our unmatched strategy and innovation set the industry standard. Download the full report to see how we are transforming cyber risk management. https://ow.ly/mtXh30sCG1G #ForresterWave #Bitsight

8

Are current remediation efforts enough? We measured the percent change in the number of open vulnerabilities each month for each firm. Taken together, these monthly measures reveal whether security exposures are piling up... Read the full report: https://lnkd.in/e4EAeQ6v

1

🚀 Introducing Design Static Application Security Testing (DSAST) with Devici Code Genius Discover the power of generating threat models directly from existing code. Learn how DSAST is changing threat modeling efficiency and scalability. 🔗https://hubs.ly/Q02DrFLZ0

8

"With regulatory shifts, third-party service incidents, and looming economic uncertainties, the need for board engagement in risk management programs is critical." Check out this great guide to materiality and risk determination tailored for CISOs https://hubs.li/Q02tpSYc0

2

A new blog from Office of the CISO: "Staying on top of AI Developments and Learning AI and Security"

1

While CrowdStrike is preparing to resolve this quickly, here's one possible way recommended by CrowdStrike to get your system back up and running smoothly in no time: Boot Windows into Safe Mode. Navigate to the C: \Windowsystem32\drivers\CrowdStrike directory in Explorer. Locate the "C-00000291-00000000-00000032.sys" file, right click and rename it "C-00000291-00000000-00000032.renamed" Boot the host normally. #CrowdStike #outage #resolve

7

Just wrapped up an insightful cybersecurity meeting with our long-time client, Manly Plastics Inc.! We discussed the importance of centralized protection across all branches, tackling real threats head-on—from perimeter to endpoints. While detection and reactive measures are crucial, we also introduced proactive strategies. One highlight: our cutting-edge on-premise AI-aided Unified Threat Detection and Response (NDR) solution. Together, we're taking strides towards a safer digital landscape! #Tech2go #SDWANenabler #ManagedConnectivity #NDR #DigitalInfrasructure

6

1 Comment

🧠 Learn how to put your startup's #compliance on autopilot with Drata and AWS Partners in our upcoming joint webinar! Save your spot for Tuesday, July 16 at 8 a.m. PT for an informative session covering topics like: ✅ Why compliance matters to startups and common challenges in the industry ✅ An overview of compliance frameworks including #ISO27001 and #SOC2 ✅ Success stories from other startups on achieving and maintaining #compliance ✅ A Q&A with leading experts in the industry Don't miss out—register today!

7