Ritesh Chauhan, CISSP

🔍 Unveiling NIST CSF v2.0 Audit Checklist - Part 5: Respond (RS) & Recover (RC) 🔍 Before you scroll down Follow Niranjan V for more such Infosec Content. Reach out for ISO 27001 Mentorship, Training, and Guidance, & join our exclusive infosec group for early access to creative infosec content PS: Infosec Community Link shared in Comments Section 1️⃣ Introduction to the Document: Delve into the final stages of the NIST CSF v2.0 framework with our latest checklist, focused on the crucial Respond (RS) and Recover (RC) functions. 2️⃣ What's in the Document: This part of the checklist offers detailed guidance on how to effectively manage and recover from cybersecurity incidents. It includes actionable steps, best practices, and key metrics to ensure your organization’s swift response and recovery. 3️⃣ Conclusion: Enhance your audit preparedness and resilience with this comprehensive guide. Download now to ensure your organization is ready to respond and recover from any security challenge. #NIST #NISTCSF #Respond #Recover #audit #checklist #infosec #cybersecurity #Governance #Risk #Compliance #incident #management #SOC #Disaster #recovery #Guidance #document #free

255

21 Comments

Techltalk Series: Demystifying Automated Security validation (ASV), Why do organisations require ASV? Methods of ASV, Compare ASV with traditional security validation. How can ASV help CISOs? Security Validation Checklist for CISOs. Role of (ASV) in Continuous Threat Exposure Management (CTEM), ASV Use Cases & Best Practices. In today's digital age, securing sensitive data and systems from cyber threats is critical for any organization. Automated Security Validation (ASV) plays a pivotal role in ensuring the safety and security of an organization's IT infrastructure. ASV involves a process of automatically testing and verifying the effectiveness of security measures and controls used by an organization to protect its data and systems from potential cyber-attacks. ASV tools are designed to identify vulnerabilities, misconfigurations, and other security issues in an organization's IT infrastructure. These tools can use various techniques, such as vulnerability scanning, penetration testing, and compliance checks, to evaluate an organization's security posture. By automating this process, ASV saves time and resources while enabling organizations to ensure that their security controls are always up-to-date and effective. The significance of ASV lies in its ability to identify and address potential security vulnerabilities before they can be exploited by hackers. It helps organizations maintain a proactive security posture and mitigate potential risks and threats. By regularly validating and testing their security measures, organizations can improve their overall security posture and minimize the likelihood of data breaches, cyber-attacks, and other security incidents. In conclusion, ASV is an essential aspect of modern-day security systems. It helps organizations maintain an effective and proactive security posture by automatically testing and verifying their security measures and controls. With the increasing frequency and sophistication of cyber threats, ASV has become a vital tool for organizations looking to safeguard their data and systems from potential security risks and threats. An Article by Praveen Singh, An Infographics by Netpoleon India, Techtalk Seres-An initiative by Mohan Kumar T L #ciso #cybersecurity #appsec #asv

139

10 Comments

"Is your organization prepared to face a Business Email Compromise attack?" Arm yourself with our comprehensive BEC Incident Response Playbook! Before you scroll down Follow Niranjan V for more such Infosec Content. Reach out for ISO 27001 Mentorship, Training, and Guidance, & join our exclusive infosec group for early access to creative infosec content PS: Infosec Community Link shared in Comments Section In this Business Email Compromise (BEC) Incident Response Playbook – your ultimate guide to detecting, containing, and recovering from sophisticated email-based attacks. This playbook is designed for both tabletop exercises and real-world incident response, Don't wait for an attack to test your readiness – download our playbook now and stay one step ahead of cybercriminals! Credits - Ministry of Security #cybersecurity #incident #response #business #email #compromise #playbook #free #download #guide #handbook #infosec #informationsecurity #ISMS #Data #protection

63

3 Comments

What is #PAM and #IAM, where do you get #SSO and where #JIT access? #identityaccessmanagement #iam #identitymanagement #cybersecurity #security #identityaccessmanagement #fortune #technology #accessmanagement #tiiam #it #technews #informationtechnology #companies #identitygovernance #issquared #dataprotection #sailpoint #iag #cti #ti #iiam #ethicalhacking #futureofsmartlife #globalcost #cybercrime #threathunting #orsus #decentralizedidentity #threatintelligence  #stayaheadofbreaches #iamcloud #itnews #cybersecuritynews #threatvector #cryptojacking #riskassessment #cloud #zerotrust #iamwithzerotrust #ginfrastructure #datasecurity #tech #iga #cloudsecurity #workfromhome #pechakucha #remotejobs #usermanagement #microsoft #distributiongroups #activedirectory #education #identitysecurity #software #access #iampam #groupmanagement #itupdate #iamtechnology

1

Incident Response Preparation: Do Not Skip This Step! Effective incident response begins before an incident occurs; preparing in advance can reduce impact and ensure a swift response when an attack happens. Here are 7 Essential Tips for Effective Incident Response Preparation: • Develop an Incident Response Plan and exercise it • Ensure you are logging the correct events • Regularly update software and systems • Conduct regular security assessments and Third Party Risk Reviews • Train employees and set up a Secure Communications Channel • Establish partnerships • Understand what your Cyber Insurance Covers Source: https://lnkd.in/g-renukM Adequate preparation not only boosts the incident response capabilities but also enhances data analysis and threat detection. Discover over 10+ essential data analysis techniques for effective threat hunting in my "Cyber Threat Hunt 101" YouTube series, explained simply: https://lnkd.in/gkVB6B2j Please share and subscribe if you enjoy the content! #cybersecurity #threathunting #threatdetection #blueteam #soc #socanalyst #skillsdevelopment #careergrowth

454

6 Comments

Mail Server Attacks Cheat Sheet Thank to Aryaa Mathur for Sharing. #CyberSecurity #VulnerabilityAssessment #InfoSec #CyberDefense #RiskManagement #SecurityTesting #ITSecurity #CyberAwareness #TechSecurity #InfoSec #Handbook #StaySecure #WebSecurity #Vulnerabilities #TechInsights #InfoSec #DigitalProtection #StaySafeOnline #ITSecurity #RiskMitigation #DataPrivacy #CyberThreats #nmap #networking #vapt #networkpentesting #CyberNetch

6

🔐 Dive into Cybersecurity Frameworks Cybersecurity frameworks are not just guidelines; they're strategic tools to safeguard your organization's assets and ensure regulatory compliance. They encompass identifying risks, implementing safeguards, detecting threats, responding to incidents, and ensuring swift recovery. Popular frameworks like NIST CSF and ISO/IEC 27001 empower businesses to enhance security and continuously evolve their defenses. Discover how adopting a cybersecurity framework can fortify your data protection strategy. #Cybersecurity #RiskManagement #Compliance #NISTCSF #ISO27001 #BusinessSecurity

7

ControlCase’s Information Security Roles & Responsibilities Template helps your organization document key IT security professional roles and responsibilities. Download your template today to assist in meeting the requirements of several IT Security Standards, including PCI DSS, SOC 2, ISO 27001, and more. #ControlCase #informationsecurity #itsecurity https://lnkd.in/dXcr8njS

1

Learn about CISSP Objective 1.1 and the importance of upholding ethical standards in cybersecurity. The CISSP Code of Ethics emphasizes integrity, trust, and professionalism. Watch this short video to understand how these principles help ensure career and exam success. #CISSP #CyberSecurity #Ethics #cybernous #cissp Cybernous Infosec Consulting LLP Pratima Sharma

22

DVA is not associated with this job post. Senior Detection Engineer, India https://lnkd.in/gZ9rkRpt What you will be doing: threat hunting activities SOC Engineering: responsible for building and optimizing detection and investigation capabilities operationalized in the Security Operations Center (SOC) Detection Engineering: design and configuration of Cyber Security Operations correlation and alerting to ensure coverage against known malicious tactics, techniques, and procedures (TTPs) Build new detection capabilities based on research of new attack techniques Maintain, tune, and sunset existing detection capabilities Work closely with SOC Operations team to design and improve process flows Work closely with Security Engineering to improve tooling and processes Provide mentorship and leadership for other Cyber Defense personnel Research new security technology trends that can be used to reduce exposure Work with cross functional teams as a security representative during incidents Ensure the confidentiality, integrity, and availability of information assets... #innovation #management #digitalmarketing #technology #creativity #futurism #startups #marketing #socialmedia #socialnetworking #motivation #personaldevelopment #jobinterviews #sustainability #personalbranding #education #productivity #travel #sales #socialentrepreneurship #fundraising #law #strategy #culture #fashion #business #networking #hiring #health #inspiration

1

Critical Vulnerability in Cisco’s SSM On-Prem released on July 17,2024 #penetolabs #penetolabsnotifications #cvid #vulnerabilityassessment #penetrationtesting #cyberattack #cybersecurity #cybersecuritythreats #cybersecurityawareness #penetolabsintelligenceadvisory

1

🚨 Critical Security Advisory for Android Users! 🚨 The Indian Computer Emergency Response Team (CERT-In) has issued a high-severity advisory (CIVN-2024-0349) regarding multiple vulnerabilities in various versions of Android. These vulnerabilities could allow attackers to obtain sensitive information, gain elevated privileges, execute arbitrary code, or cause denial of service conditions. Affected Versions: Android 12, 12L, 13, 14, 15 Potential Impacts: -Unauthorized access to sensitive data -Elevated privileges -Arbitrary code execution -Denial of service (DoS) -Data breaches -System instability or crashes Recommended Actions: Apply the appropriate updates provided by your device's OEM (Original Equipment Manufacturer) as soon as they are available. Stay secure and ensure your devices are up-to-date to protect against these critical vulnerabilities. #CyberSecurity #Android #Vulnerability #SecurityAdvisory #CERTIn #DataProtection #SoftwareUpdate

6

Great information, Here are few more: - Having Compliance-Driven Priorities (focusing too much on non-technical aspect of security) - Absence of Remediation Framework (not knowing what to do after getting the vulnerabilities detected) - Lack of Vulnerability Management (Knowing what to do with vulnerabilities, but not being able to drive a system to keep it running for a really long time)

9

Some useful tips for security leaders to counter this. 1. Increase Threat Monitoring and Analysis : Analyze recent network activity for suspicious behavior and indicators of compromise (IOCs) associated with the attack type mentioned in the RBI warning. 2. Review and Update Security Protocols: Conduct an immediate review of your existing cybersecurity policies and procedures. 3. Simulate a Cyberattack Drill: Consider conducting a tabletop exercise or simulation drill to test your incident response plan and team's preparedness in case of a real attack. 4. Patching and Vulnerability Management: Double-check that all systems and software are fully patched with the latest security updates to address known vulnerabilities. 5. Data Backups and Disaster Recovery: Test your backups regularly to ensure they are functioning correctly. https://lnkd.in/gh3EiyVG

17

What is the completion date for PCI DSS assessments documented in a Report on Compliance and its related Attestations of Compliance? In PCI DSS assessments documented in a Report on Compliance (ROC), the "Date of Report" is considered the completion date, marking when the QSA Company and assessed entity agree on the final version of the ROC. This date can be found in Section 1.2 of the ROC and on the cover page and in Section 3 of the ROC Attestations of Compliance (AOCs). The AOC includes a Merchant (or Service Provider) Attestation and a Qualified Security Assessor (QSA) Acknowledgement, both requiring signatures within a reasonable timeframe (typically two to three weeks) of the Date of Report. These signatures confirm the ROC's accuracy but do not indicate the actual completion date of the assessment. Any questions about these dates should be directed to the relevant submitting entity, such as an acquirer or payment brands. https://lnkd.in/gQ_yKQkX

11

Investigation Scenario 🔎 While threat hunting, you encounter a system with an abnormally high number of executions of WerFault.exe during a short time span. What do you look for to investigate whether an incident occurred? #InvestigationPath #DFIR #SOC

62

13 Comments

It is widespread that people go for tradeoffs between CISM and CISSP. People go for CISM first as they see CISM as a low-hanging fruit because of the comparatively lesser syllabus than CISSP, but one should also remember that this low-hanging fruit doesn't come cheap; only exam cost is 760 dollars, even we exclude training and study material cost. CISSP and CISM are two different certifications with different focuses; CISM is more managerial in nature with more emphasis on governance, Risk management, Information security program development and management, whereas CISSP covers all these things along with technical concepts and it has an equal focus on technical concepts and managerial concepts both. CISSP and CISM certifications can't be tradeoffs. Remember, if someone is looking for tradeoffs, he will also have to do CISSP, as there is no substitute for CISSP. So carefully choose between the two. CISM is a go if there is a genuine requirement to do it, as your role is primarily in InfoSec management and governance. Choose CISM if it is a genuine requirement, not because it is easy to achieve. No InfoSec certifications, be it CISA, CISM, CCSP, or CISSP, are easy; all require hard work and drain your energy and time, and none comes cheap. So you can choose your certs wisely.

178

20 Comments

I am writing a long, detailed post on Boring AppSec on CISA's Secure by Design (it should be out in a few days). As I dig deeper into the framework*, it's clear that the organization misdiagnosed the problem as one of awareness, whereas, in reality, the problem is how expensive it is to build secure-by-design software. The problem with software security** today is the terrible signal-to-noise ratio on most initiatives, which makes it expensive to pay attention to the results without spending a lot of resources (time & money). The only way to change this equation is by finding a way to contextualize results to what's important (and not what's possible). Unfortunately, the Secure by Design framework** does nothing to reduce the cost. More on this in a few days. If you have questions on CISA Secure by Design that you want me to address (or dig deeper into), let me know. I will try and add them to my post. *I am unsure if CISA Secure by Design is a "framework." The more time I spend on it, the less I know what it exactly is. For ease of reading, I will call it a framework for now. **I think "software security" (the term CISA uses) is the more accurate of the three terms (AppSec/ProdSec/Software Security), but no one outside a few researchers uses this term, so I guess we will stick to AppSec for now. Also, "Boring Soft Sec" does not have a ring to it :) #appsec #securebydesign #cisa

46

6 Comments