Nicole Heaton, CDPSE, ITCP, I.S.P., CISM

This piece on insider risk and the vulnerabilities associated with a remote workforce is particularly thought-provoking. Managing organizational risk is a complex challenge, and it requires the expertise of many brilliant minds. It highlights the ongoing difficulties organizations face; insider risk is a critical issue that warrants serious consideration. Companies can take significant steps to mitigate these risks, such as fostering a culture of bidirectional loyalty. Some key questions to consider include: 1. Is insider risk incorporated into a central risk register and prioritized alongside other risks? 2. Does the organization clearly identify its crown jewels? 3. What data classification scheme has been applied to these crown jewels? 4. Is there adequate monitoring in place for the organization’s most critical assets? The value of addressing these questions remains constant, regardless of whether employees are working remotely or in the office.

3

Your company’s security is non-negotiable. 🔐 As a leader, it’s time to step up and ensure your cybersecurity measures are top-notch. Don't wait for a breach to happen—act now to protect your data and your team. 💡 #vCISO #CanadaCISO #RiskAwareCo #CyberCanada #CyberSecurity #ProtectYourBusiness #LeaderInSecurity

2

Check out Government of British Columbia's "Security Day: Guardians of the Cloud" live today! Sign up closes shortly: https://lnkd.in/gbJjs_b4 on Eventbrite You can catch Louise Turner and I from Quantum Algorithms Institute at 10amPST/1pmEST introducing #Canadian #cybersecurity to #quantum technologies and how they will influence #informationsecurity and #encryption in the coming years.

Want to succeed in cybersecurity - sharpen your soft skills Evgeniy Kharam, a friend of mine recently wrote a great book on this subject (read the CyberVoices article to find out where you can purchase it). While some may believe AI will lessen the need for soft skills, I believe the need for soft skills will grow even more. A study from MIT Sloan Management Review highlights that "as AI takes over repetitive and data-driven tasks, employees will need to enhance their interpersonal skills, including leadership, adaptability, and effective communication, to complement the work that AI cannot do." What are your thoughts? https://lnkd.in/eVnkUj8Y #ccn, #cybersecurity, #canada, #softskills

12

2 Comments

Please read our blog post on CyberPaths which was launched a few weeks ago to create a more cohesive pathway to cybersecurity careers in the Greater Toronto Area. Here job seekers or cybersecurity workers can find tools, organizations, training no matter what stage of their cyber career. Check out the article and the link to the new GTA CyberPath. https://lnkd.in/esjMz4JF #ccn, #canada, #cyberpath, #cybersecurity

9

In our monthly survey 220 members answered the following question: What do you want Canadian governments to address in cybersecurity. Here are the top 3 results. Read the CyberVoice article. https://lnkd.in/eMxwffMk Subscribe to CyberVoices to get the latest: https://lnkd.in/ekwHHtx8 #CCN, #cybervoices, #canada

3

1 Comment

"On initial investigation, the Company learned that a former executive officer of the Company deliberately de-activated and cancelled the renewal of the Company’s website, which significantly impacted the Company’s IT systems, including delivery and receipt of electronic email communications from customers, investors and other stakeholders of the Company." In light of this cybersecurity incident at Meta Materials Inc. (META®), it's crucial to reflect on the vital role of access control in protecting organizational assets. Access control is a cornerstone of cybersecurity, ensuring that only authorized individuals can access specific resources. This breach underscores the potential consequences when access controls are insufficient or improperly managed. https://lnkd.in/eP2zNPkU #Cybersecurity #AccessControl #DataProtection #InfoSec

3

Menlo Security Inc. has been securing enterprise browsers for over 10 years, and now, with resources like the CIS Benchmarks, staying on top of data privacy and security is finally within reach for businesses of all sizes. Check out their recent blog to learn more!

12

Menlo Security Inc. has been securing enterprise browsers for over 10 years, and now, with resources like the CIS Benchmarks, staying on top of data privacy and security is finally within reach for businesses of all sizes. Check out their recent blog to learn more!

10

“…we see a huge disconnect between academia and employers. Lots of academic programs and funding are being pulled together with little to no business support or buy in. Students are being churned out with little to no chance of landing #cybersecurity employment upon graduation.” Francois offers a clear eyed look at #cybersecurityeducation in #Canada in this piece. As he says, the problem isn’t talent, Canada is bursting with it. The problem is the massive gap between #education and industry in our country. That we sell cyber as a get employed quick and make bank move for compsci grads is part of this systemic failure. A stem degree is a great indicator of compliance and consistency. Two things that anyone in cyber wouldn’t list in the top 5 needed skills. Self directed, problem driven detective reflexes are much more valuable.

9

I need YOU! Are you in charge of your MSPs Incident Response? Do you Interface with your MDR or SOCaaS providers or external IR Teams? Do you live in the great white north of Le Canada? Are you attending the AMAZING Pax8 #Beyond2024? Come join a panel of global humans discussing our collective Threats and Impacts from the lens of those actually living it!

45

11 Comments

Great summary of our recent guidance paper from the esteemed Alex Sharpe. Thanks Alex!

17

1 Comment

#Canada leading the way by expanding government #cybersecurity #ransomware intelligence sharing with industry partners. This kind of #cyberdiplomacy isn't easy, as Pavlina outlines below. Great work by Public Safety Canada | Sécurité publique Canada and I imagine the cyber directorate at Global Affairs Canada | Affaires mondiales Canada too considering alll the international connections needed. Cyber is a one sided game - they only have to get it right once. Only cooperation will allow us to get it right every time. https://lnkd.in/gKXqjWEa

4