Wasiq Sultan

Coming Soon. A series of bitesize presentations to show how to create a business focussed Security Strategy. It will show you what to do in the first 30, 60, 90 days of joining an organisation, what to include in your strategy, how to plan, prepare and present it to the Board and how to report progress through implementation and beyond.

42

5 Comments

Stay ahead in the evolving world of cyber risk! Download our Cybersecurity Resilience 2024 report for a comprehensive analysis and key insights. Proud of so many experts colleagues at Allianz Commercial, who put together such an essential report to support to safeguarding the future. #Cybersecurity #RiskManagement #Resilience #CyberResilience #2024Insights #ExpertCollaboration #FutureReady #allianz

21

1 Comment

'Dear Sirs' _ for Resilience-Resilience Steer per our Teams Security BZK SSC-ICT CISO-office it's advised to use https://signal.org/ instead of WhatsApp' 'We Advise you to inform in future state opportunities that are relevant for our business partners network updates with use of signal #Secure and aware #Policy for °formal° messenger services, go to app via your Android or IOS device , our mobile numbers are same/same and always on #Availablity plus #Online, or via text message or e-mail.' Signal : https://signal.org/install NLSERVICES public announcement [email protected] 🌐

5

Always good to learn more about complex matters. Martin and Richard have gathered a lot of knowledge on the subject. Interesting session!

1

𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐎𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐚𝐥 𝐑𝐞𝐬𝐢𝐥𝐢𝐞𝐧𝐜𝐞 𝐀𝐜𝐭 (𝐃𝐎𝐑𝐀) The Digital Operational Resilience Act (DORA) is an EU regulation focused on strengthening the ICT (information and communication technology) security of financial institutions to bolster resilience across the European financial sector. It entered effect on January 16, 2023, with enforcement starting on January 17, 2025. 𝐆𝐨𝐚𝐥: DORA creates a comprehensive ICT risk management framework for the EU financial sector. Banks, insurance companies, and investment firms must implement measures to identify, assess, and mitigate ICT risks. 𝐇𝐚𝐫𝐦𝐨𝐧𝐢𝐳𝐚𝐭𝐢𝐨𝐧: DORA replaces varied regulations across EU member states with a uniform set of rules, ensuring consistent ICT security standards. 𝐒𝐜𝐨𝐩𝐞: DORA applies to numerous financial entities and critical third-party service providers (like cloud platforms and data analytics providers) that offer ICT-related services. 𝐊𝐞𝐲 𝐑𝐞𝐪𝐮𝐢𝐫𝐞𝐦𝐞𝐧𝐭𝐬: 𝐈𝐂𝐓 𝐑𝐢𝐬𝐤 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭 𝐅𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤: Institutions must establish a framework to pinpoint and manage potential ICT threats. 𝐈𝐂𝐓 𝐓𝐡𝐢𝐫𝐝-𝐏𝐚𝐫𝐭𝐲 𝐑𝐢𝐬𝐤 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭: Assess and manage risks associated with third-party ICT vendors. 𝐃𝐢𝐠𝐢𝐭𝐚𝐥 𝐎𝐩𝐞𝐫𝐚𝐭𝐢𝐨𝐧𝐚𝐥 𝐑𝐞𝐬𝐢𝐥𝐢𝐞𝐧𝐜𝐞 𝐓𝐞𝐬𝐭𝐢𝐧𝐠: Regular testing to ensure preparedness for ICT disruptions. 𝐈𝐂𝐓-𝐑𝐞𝐥𝐚𝐭𝐞𝐝 𝐈𝐧𝐜𝐢𝐝𝐞𝐧𝐭 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭: Institutions need a plan for reporting and handling ICT-related incidents. 𝐒𝐮𝐩𝐞𝐫𝐯𝐢𝐬𝐨𝐫𝐲 𝐎𝐯𝐞𝐫𝐬𝐢𝐠𝐡𝐭: Authorities in EU member states will oversee implementation and enforcement. 𝐈𝐦𝐩𝐚𝐜𝐭: DORA aims to significantly enhance the cybersecurity of the European financial sector, promoting greater resilience against digital threats and safeguarding consumers and the financial system. Thank You PECB, Thank You 🔐 Peter GEELEN. Community, as usual, look out for my PECB Digital Operational Resilience Act (DORA) Lead Manager Certificate!!!

105

11 Comments

This is an interesting article from McKinsey, that is two years old already, but still gives a good overview about the migration towards #postquantumcryptography - why to migrate ? (depending on the value of your data) - when to migrate ? - how to migrate ? (adopt now, fix later or keep efforts low) https://lnkd.in/eQJAXFrz

13

1 Comment

Boards are to lead by example, also in relation to Cyber Security

2

Dutch Police Disrupt Major Info Stealers RedLine and MetaStealer in Operation Magnus The Dutch National Police, along with international partners, have announced the disruption of the infrastructure powering two information stealers tracked as RedLine and MetaStealer. The takedown, which took place on October 28, 2024, is the result of an international law enforcement task force codenamed Operation Magnus that involved authorities from the U.S., the U.K., Belgium, Portugal, and Australia. urojust, in a statement published today, said the operation led to the shut down of three servers in the Netherlands and the confiscation of two domains. In total, over 1,200 servers in dozens of countries are estimated to have been used to run the malware. As part of the efforts, one administrator has been charged by the U.S. authorities and two people have been arrested by the Belgian police, the Politie said, adding one of them has since been released, while the other remains in custody. Stay Connected to Sidharth Sharma, CPA, CISA, CISM, CFE, CDPSE for content related to Cyber Security. #CyberSecurity #JPMC #Technology #InfoSec #DataProtection #DataPrivacy #ThreatIntelligence #CyberThreats #NetworkSecurity #CyberDefense #SecurityAwareness #ITSecurity #SecuritySolutions #CyberResilience #DigitalSecurity #SecurityBestPractices #CyberRisk #SecurityOperations 

1

Interested in Cybersecurity Compliance/Standards in the EU region?? Make sure you grab a bit on the below GDPR: Data protection regulations of EU region giving more stress on information privacy. Covers all core aspects on how data is identified, collected and processed. Makes clear demarcation on data owner, processors, controllers roles. NIS: Stands for Network and Information Systems with the latest version 2. This directive is a key item practiced in the EU region aimed at enhancing the cybersecurity posture among EU member states. They follow some key aspects or canons that forms the basis of any organization's cyber security stand. Aims to strengthen resilience against cyber threats and helps protect your digital infrastructure DORA: Digital Operational Resilience Act. Aims to enhance the IT security of mainly financial entities. Ensures operational resilience. Enhances on ICT risk management, third party risk amanagement TPRM, resileince testing and incidence reporting. CyClone: Cyber Crisis Liasion Organization NEtwork forms a cooperation network for EU member states national authorities in charge of CyberCrisis Management. Aims to collaborate and develop timely information sharing and situational awareness in CyberSecurity  👁

8

The #human aspects of #cybersecurity are really poorly adressed in most security #frameworks. Neither #ISO27002, #NIST CSF, #PCI-DSS, #DORA, nor our Belgian NIS2 framework #cyfun, go further than making #securityawareness and cybersecurity #trainings mandatory. Ok, it is not bad, it is just not enough. If you stick to this only, it won't change your risk posture as we need to change behaviours to reduce risks. The only standard that seems to really grasp the importance of human risk management and how to make a positive impact on it is the #ECB (European Central Bank) "Cyber resilience oversight expectations for financial market infrastructures" (#CROE). That is, up to my current knowledge (and I would be glad to discover other ones), the only regulatory requirement in Europe that address cybersecurity #culture and #behaviour: Just one example - Requirement 36 of the Role of the Board and senior management: "Senior management should validate the effectiveness of its cyber resilience training programme (e.g. social engineering or phishing tests) and assess whether training and awareness programmes positively influence behaviour. Based on the lessons learned from its training programme, the FMI should improve the employee awareness programmes." Centre for Cybersecurity Belgium, it would be great if you could include some of their wisdom in the next version of your fabulous CyFun. It would confirm again Belgium as leader in Cybersecurity.

28

2 Comments

While the Council of the European Union aims at providing guidance and setting the principles towards building a more cybersecure and more resilient Union, the role of enterprises become more vital. This is an immense opportunity towards a cybersecure society! #cybersecurity #secureeurope #regulation #cyberstrategy

11

More good news. A joint operation by the Dutch and French authorities has lead to arrests and seizures of servers, and the takedown of the encrypted Matrix messaging service used by criminal gangs. The takedown of Matrix follows operations against similar services; Sky ECC, EncroChat, Exclu and Ghost. Apart from the obvious success and the use of the information gathered, operations like this one cause increasing concern among crime gangs that their supposed secure communications are being intercepted. From the Europol press release: "By using innovative technology, the authorities were able to intercept the messaging service and monitor the activity on the service for three months. More than 2.3 million messages in 33 languages were intercepted and deciphered during the investigation. The messages that were intercepted are linked to serious crimes such as international drug trafficking, arms trafficking, and money laundering. " https://lnkd.in/d_A3WmnP

5

Happy Friday 🚀 Exciting news! I wrapped up an article on the upcoming Digital Operational Resilience Act (DORA) and what it means for businesses navigating today’s digital landscape. If you’re in finance or tech, this is definitely something to have on your radar. Let me know what you think!

6

1 Comment

🫣 𝗬𝗼𝘂𝗿 𝗜𝗧 𝘀𝘆𝘀𝘁𝗲𝗺𝘀 𝗱𝗼𝗻'𝘁 𝗳𝘂𝗹𝗹𝘆 𝗽𝗿𝗼𝘁𝗲𝗰𝘁 𝘆𝗼𝘂 𝗳𝗿𝗼𝗺 𝘁𝗵𝗿𝗲𝗮𝘁𝘀... Sad, but true: You simply cannot firewall lack of awareness, dumbness or ignorance, can you? 😜 📖 I've been through 𝗔 𝗟𝗢𝗧 guides, frameworks, ISOs etc. and one thing became almost certain: Besides having an insane technical fortress, security is more about mindset, culture and strategic approach than you might think. 🧐 So I am always a little bit sceptical when people or companies tell me they implemented the latest and greatest tech to be fully secure. 😘 Don't get me wrong, apparently there should be a security baseline and ofcourse there's that holistic approach to tackle every identified risk and try to set security by default - as much as your specific systems allow it. But then again there's also that insider threat who never really didn't quite understand why that annoying security protocol even existed. 🫣 Aaaand who knows, maybe trusting your IT systems to a degree that it will protect you from every threat is also a form of confidence bordering on ignorance 🤪 #informationsecurity #isms #cybersecurity #itgovernance #security

1

I am delighted to be moderating a roundtable discussion at the Gartner Evanta event! I'll be leading an in-depth conversation on threat intelligence and third-party risk. This is a great opportunity to connect with top industry leaders and share insights on the latest trends and challenges in cybersecurity. Looking forward to a productive and insightful discussion. #Mastercard #Gartner #Evanta #Cybersecurity #CISO

115

We understand that protecting your digital assets is a top priority. That's why GotBackup is here with an irresistible offer that not only safeguards your data but also opens doors to exceptional earning potential through our lucrative affiliate program. Act Now – Opportunities Like This Don’t Last Seize this chance to enhance your digital security while taking advantage of a profitable affiliate opportunity. With GotBackup, you’re not just getting top-notch data protection; you’re also unlocking a pathway to significant earnings. Click here: https://lnkd.in/gj73qCYh to sign up and become a GotBackup affiliate today.

Hi BCM, Resilience Professionals In April 2024, there were 35 mentionable BCM-related incidents and 10 recalls/safetywarnings in the Netherlands. I made also a page with headlines. Some organisations had to activate their Safety & Health plan, other their crisis management and crisis communication plan maybe their recovery plans. Perhaps organisation had to activate the full BCP containing the 3 mentioned plans. What if when they did'nt have any plan? Be prepared for the futere and mitigate BCM-related incidents with an up to date and tested BCP.  You it know practice makes perfect. https://lnkd.in/e9q3FBKC

1