Barbara Thureau

Kazakhstan participation in the third meeting of the Cybersecurity Expert Group CYBERP/3 was held at the International Civil Aviation Organization office in Montreal The third meeting of the CYBERP/3 Group of Experts on Cybersecurity was held at the ICAO office in Montreal (Canada) from June 3 to 6, 2024. The meeting was attended by experts from more than 40 countries and other international organizations such as International Air Transport Association (IATA), African Civil Aviation Commission AFCAC, ACI, ASECNA, ECAC, CANSO, CACANS, the EU, EUROCONTROL, GEA, ICCAIA - International Coordinating Council of Aerospace Industries Associations, IFALPA and IAC. Kazakhstan was represented as an observer by Nurlan Kozhakhmetov, the Senior Aviation Inspector for Cybersecurity of the Aviation Security Department of JSC "Aviation Administration of Kazakhstan." During the meeting, problematic issues based on the results of CYBERP/2, new developments, and the exchange of best practices were discussed. The working groups of the committees also covered the need to develop a cybersecurity guide and glossary, analyze gaps in the SARPs system, and assess global cyber risks. This included crisis response measures and the establishment of a basic minimum approach to safety in civil aviation design. The problems and the need to strengthen cybersecurity measures in civil aviation, protect critical information infrastructure, improve global standards and practices, and report incidents were sharply raised. ICAO recognized that an important factor in ensuring the cybersecurity of civil aviation facilities is the training of cybersecurity inspectors, their professionalism, and the enhancement of global aviation security through training programs. It should be noted that participation in the meeting of the CYBERP/3 Group of Experts on Cybersecurity provides an opportunity to gain experience in solving problems related to cybersecurity, as well as to strengthen interaction and exchange of developments in the field of aviation cybersecurity among ICAO member countries, allowing these to be implemented in the regulatory legal acts of the Republic of Kazakhstan in the field of aviation cybersecurity.

49

1 commentaire

We live in a dynamic, sometimes volatile world. As leaders in a hyper-connected global society, we must remain aware of numerous issues, including #cyberfraud, digital criminal activity, organized and everyday crime, world economics, supply chain and energy security, misinformation and much more! Join #GuidehouseExpert Ajay Guru during this session at AGA’s #PDT24 to learn how to put up good cyber defenses against these forces. https://lnkd.in/eHb4kuKa

14

Last but not least in our Non-Human Error series, 𝗹𝗲𝘁’𝘀 𝗰𝗵𝗮𝗹𝗹𝗲𝗻𝗴𝗲 𝗼𝗻𝗲 𝗼𝗳 𝘁𝗵𝗲 𝗺𝗼𝘀𝘁 𝗰𝗼𝗺𝗺𝗼𝗻 𝗡𝗛𝗜 𝗽𝗿𝗮𝗰𝘁𝗶𝗰𝗲𝘀: 𝗥𝗼𝘁𝗮𝘁𝗶𝗻𝗴 𝘀𝗲𝗰𝗿𝗲𝘁𝘀 𝘁𝗼 𝗽𝗿𝗼𝘁𝗲𝗰𝘁 𝗡𝗼𝗻-𝗛𝘂𝗺𝗮𝗻 𝗜𝗱𝗲𝗻𝘁𝗶𝘁𝗶𝗲𝘀. 🔄 Is rotating your secrets frequently really the best way to safeguard NHIs?  While it’s a traditional security measure, 𝗶𝘁’𝘀 𝘁𝗶𝗺𝗲 𝘁𝗼 𝗿𝗲𝘁𝗵𝗶𝗻𝗸 𝗶𝘁𝘀 𝗲𝗳𝗳𝗲𝗰𝘁𝗶𝘃𝗲𝗻𝗲𝘀𝘀. Secret rotation can be complex, resource-intensive, and still might not fully protect against determined attackers. 𝗪𝗵𝗮𝘁 𝗶𝗳 𝘁𝗵𝗲𝗿𝗲 𝘄𝗮𝘀 𝗮 𝗺𝗼𝗿𝗲 𝗿𝗼𝗯𝘂𝘀𝘁 𝘄𝗮𝘆 𝘁𝗼 𝘀𝗲𝗰𝘂𝗿𝗲 𝗡𝗛𝗜𝘀? 🚫 Enter the 𝗭𝗲𝗿𝗼 𝗧𝗿𝘂𝘀𝘁 𝗮𝗽𝗽𝗿𝗼𝗮𝗰𝗵: Instead of just rotating secrets, Zero Trust focuses on continuously validating the legitimacy of every identity using those secrets. This ensures that even if a secret is compromised, it remains unusable by unauthorized entities. 🔐 𝗜𝘁’𝘀 𝘁𝗶𝗺𝗲 𝘁𝗼 𝗺𝗼𝘃𝗲 𝗯𝗲𝘆𝗼𝗻𝗱 𝗿𝗼𝘁𝗮𝘁𝗶𝗼𝗻 𝗮𝗻𝗱 𝗲𝗺𝗯𝗿𝗮𝗰𝗲 𝗮 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝘀𝘁𝗿𝗮𝘁𝗲𝗴𝘆 𝘄𝗵𝗲𝗿𝗲 𝘁𝗿𝘂𝘀𝘁 𝗶𝘀 𝗲𝗮𝗿𝗻𝗲𝗱, 𝗻𝗼𝘁 𝗮𝘀𝘀𝘂𝗺𝗲𝗱. #IdentitySecurity #IAM #ZeroTrust #NHI #Cybersecurity

19

#security #riskmanagement "The concept and application of security remains predominately situational. That is, the specific locale, context and circumstances which combine result in either secure or unsecure outcomes. Moreover, security is further nuanced into prevention and that of protection. The distinction being is that prevention results in deterrence of security-related threats and compromises, whereas protection is more assertive, visible, and actively applied in order to protect one or more assets. Broken down into core elements or capture through descriptive statistics/algorithmic analysis, at least 6 factors must be evaluated and present to reasonably result in preventative security outcomes. They are, 1) Asset 2) Protector 3) Threat 4) Vulnerability 5) Protection 6) Prevention/Response. " Read More --->>> https://buff.ly/4d0DWOb #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement

1

#security #riskmanagement "The concept and application of security remains predominately situational. That is, the specific locale, context and circumstances which combine result in either secure or unsecure outcomes. Moreover, security is further nuanced into prevention and that of protection. The distinction being is that prevention results in deterrence of security-related threats and compromises, whereas protection is more assertive, visible, and actively applied in order to protect one or more assets. Broken down into core elements or capture through descriptive statistics/algorithmic analysis, at least 6 factors must be evaluated and present to reasonably result in preventative security outcomes. They are, 1) Asset 2) Protector 3) Threat 4) Vulnerability 5) Protection 6) Prevention/Response. " Read More --->>> https://buff.ly/4d0DWOb #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement

4

#security #riskmanagement "The concept and application of security remains predominately situational. That is, the specific locale, context and circumstances which combine result in either secure or unsecure outcomes. Moreover, security is further nuanced into prevention and that of protection. The distinction being is that prevention results in deterrence of security-related threats and compromises, whereas protection is more assertive, visible, and actively applied in order to protect one or more assets. Broken down into core elements or capture through descriptive statistics/algorithmic analysis, at least 6 factors must be evaluated and present to reasonably result in preventative security outcomes. They are, 1) Asset 2) Protector 3) Threat 4) Vulnerability 5) Protection 6) Prevention/Response. " Read More --->>> https://buff.ly/4d0DWOb #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement

4

During the period from 27 May to 2 June, Atlas Security recorded a total of 71 incidents. Here's an overview of the types of incidents reported: https://bit.ly/45a8N8J #AtlasSecurity #Security #PrivateSecurity #Safety #CCTV #NelsonMandelaBay

8

Join us for The Essential OSINT Webinar tomorrow at 4 PM GMT 🕓. This session will provide insights on effectively preparing and planning for OSINT, conducting research using the latest tools and sources, and understanding the ethical considerations in OSINT practices. https://lnkd.in/eGEb3yUA

1

A modern #GSOC can help keep your people safe and operations running during disasters and security threats. 🔒 Discover the benefits of a GSOC and why it’s essential for global organizations: https://bit.ly/3shY5hg

20

Huge Demand for Well-Trained Armed Security Protection https://lnkd.in/gn5WuS6c #WPG #ExecutiveProtection #ArmedSecurity #RiskVulnerabilityAssessment #EstateSecurity #PrivateInvestigations #GoldStandardService #privacyisluxury

5

This is what #Intelligence is all about ⬇ In our latest #podcast episode, hear from Mike Evans, Director of the Securitas Risk Intelligence Center. Here are a couple of things we asked him: 🔴 How has the concept of risk intelligence evolved over the past decade? 🔴 What is the human role within technology-driven intelligence operations? 🔴 How important is global collaboration in risk intelligence? And more! If you want to know the answers, make sure to hit the ▶ button on Spotify: https://lnkd.in/dCZEVxP3 or on Apple Podcasts: https://lnkd.in/dbDJk4Zf #seeadifferentworld #riskintelligence

222

5 commentaires

Our monthly #cybersecurity #newsletter has arrived! Discover the latest #news, #insights and #tips. Take a look now! https://lnkd.in/emYD-T_A #sikkerhet #norge #norway #noruega #ciberseguridad #securitytips #november #noviembre #digitalfraud #digitalsecurity #IT #cyberattack #malware

4

1 commentaire

NEW BLOG ALERT: 5 Ways Demonstration Hypervigilance begins with help from OSINT The number of protest movements has tripled in the past 15 years, how can OSINT help you prepare? Read more below ⤵ https://lnkd.in/gNdwmgng #LifeRaft #Navigator #NavigatorPoweredByLifeRaft #OSINT #InfoSec #InPursuitOfZeroMissedThreats

5

Join us for Trust Talk 14 : The Roles of Standards in Enhancing IT Governance and Compliance ! 📅 Date: Friday, November 8th, 2024 🕚 Time: 11 AM - 12 PM EAT Register Now and be part of this virtual event : https://lnkd.in/e_e2Jn7k For more information, reach out to: [email protected] #Webinar #TrustTalk #Kenya

18

1 commentaire

Join us for Trust Talk 14 : The Roles of Standards in Enhancing IT Governance and Compliance ! 📅 Date: Friday, November 8th, 2024 🕚 Time: 11 AM - 12 PM EAT Register Now and be part of this virtual event : https://lnkd.in/e_e2Jn7k For more information, reach out to: [email protected] #Webinar #TrustTalk #Kenya

51

5 commentaires