Fady Chalhoub

How does GRC impact organizations? GRC (Governance, Risk, and Compliance) significantly impacts organizations by structuring governance, managing risks, and ensuring regulatory compliance. This unified approach enhances business performance, fosters a culture of integrity, and mitigates financial and reputational risks. Web search results on Governance, Risk, and Compliance impact organizations. https://lnkd.in/dCKXRr7S

٣

Business leaders are spending more on professional and consulting services to prepare their businesses for cloud migration, AI, generative AI (GenAI), and IoT implementations at MENA region. “Security remains a key area for IT services spending, as well as the increasing purchase of products, services, and tools through ‘XaaS’ (Anything as a Service) consumption models – both contributing to the overall growth of this segment.” Click link to read more… https://lnkd.in/djN8cJTE

٩

١ تعليق واحد

NIST AI Risk Management Framework (AI RMF) Voluntary framework to improve trustworthiness in AI design, development, use and evaluation. Developed through open collaboration with various stakeholders. Focuses on: Identifying and managing AI risks and potential impacts. Building trustworthy AI systems. Key Sections: Framing Risk: Understanding and addressing risks, impacts, and harms. Challenges of AI risk management. Target audience for the framework. AI Risks and Trustworthiness: Characteristics of trustworthy AI. Guidance for achieving trustworthiness. AI RMF Core: Four functions for managing AI risks: Govern, Map, Measure, Manage. AI RMF Profiles: Implementation of the framework for specific use cases. Access to the AI RMF framework and playbook https://airc.nist.gov/Home

٦٤

I am humbled to announce that EFG Holding #InformationSecurity Group has been listed by OnConferences in the Top 50 Information Security Teams Award. #Information #Security is a continuous and collective "Team" effort; the #CISO is no more important a GRC specialist writing a policy or assessing a risk, an Offensive Security professional hunting for a bug, or an on-duty #SOC analyst whom vigilance ensures no #InfoSec offense went un-noticed and without a response: We are among the world top 50 #InfoSec teams because in #DefensiveSecurity, #OffensiveSecurity, #IdentitySecurity #ITSecurity, & #GRC everyone is important, everyone goes the extra mile, everyone is vigilant and ready ... You all out there know yourselves! You made everyone from my level to the Group CEO very proud ... We ... Salute you! Link to the winning teams: https://lnkd.in/dQ95zegp #OnConIconAwards #OnConferences #CyberSecurity #OnCon2024

١٠٨

٢٢ تعليق

In an era where technology permeates every aspect of our lives and our daily devices and tools are connected, the convergence of physical security and cybersecurity has emerged as a critical consideration across all industries and sectors. What is rapidly arising is the universal need for an integrated approach to physical and cybersecurity. #PhysicalSecurity #Cybersecurity

٩

Operation requirements address the issues of providing they customers/users with a mechanism of using the system. The security requirememtns speak to the issues of reducing risk to enterprise by addressing the confidentiality, Integrity, and availability of the system. #requirements #gapanalysis #informationsecurity #risk #confidentiality #integrity #availability

٢

It is an honor to be recognized in the Top 100 Cybersecurity Leaders in the Middle East. (Although I know many amazing and talented cybersecurity leaders in the region who are not on this list.) I like this, not because of the recognition. It is valuable to compile a list of some of the top minds in cybersecurity in the Gulf and ME. There is a huge amount of young talent and rising stars who can use this list to connect, build their network, and learn. As cybersecurity we’re a community and we need each other. Here’s to the next generation of cybersecurity leaders. May I be pushed out of this list next year because of all the rising new talent.

٧٠

٢٣ تعليق

Data Defense: Building Unbreakable Cyber Defenses 🐞 Cybersecurity is a strategic advantage in the digital era that enhances operational security and data accuracy 🛡️📊. #Businessoperations professionals are vital to constructing digital defenses that preempt threats and strengthen organizational robustness. Their proactive involvement ensures cybersecurity aligns with strategic objectives, fostering a safer, more effective business environment. Building Unbreakable Cyber Defenses empowers organizations to fortify their digital assets by deploying a comprehensive, multi-layered security #strategy. Through advanced encryption, regular security audits, and a strong organizational culture of #cybersecurity awareness, businesses can construct a robust digital fortress that effectively guards against external threats and internal vulnerabilities. Incorporating state-of-the-art firewalls, intrusion detection systems, and proactive threat hunting further ensures that organizations remain a step ahead of cybercriminals, safeguarding sensitive data against the most sophisticated attacks. Stay Ahead of Cyber Threats—Turning Risks into Opportunities. 🎉

٢

I recently completed SANS Institute SEC540 course on Cloud Security and DevSecOps Automation and passed the GCSA exam. The course provided valuable insights into integrating security and compliance within CI/CD pipelines, containerization, and orchestration platforms like Kubernetes. https://lnkd.in/daaDAMd4

٦٣

١١ تعليق

𝐔𝐧𝐝𝐞𝐫𝐬𝐭𝐚𝐧𝐝𝐢𝐧𝐠 𝐓𝐡𝐢𝐫𝐝-𝐏𝐚𝐫𝐭𝐲 𝐑𝐢𝐬𝐤 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭 (𝐓𝐏𝐑𝐌) : Importance and objective of TPRM,5 Phase of TPRM, TPRM Framework, TPRM best practices, TPRM lifecycle, How do we conduct a TPRM program? In today's interconnected business environment, effectively managing the risks associated with third-party vendors is crucial for mitigating potential threats to an organization's IT infrastructure. Third-party risk management involves the diligent identification, assessment, and mitigation of potential risks stemming from the engagement of external suppliers, service providers, and business partners. By implementing a robust and comprehensive framework for third-party risk management, organizations can proactively defend themselves against a wide array of threats, including cybersecurity breaches, violations of data privacy regulations, operational disruptions, and non-compliance issues that may arise from the actions or oversights of third-party entities. This proactive approach not only helps safeguard the integrity, security, and resilience of the organization's IT ecosystem but also bolsters the overall operational continuity and trustworthiness of the business. An Article by Praveen Singh, An Infographics by Netpoleon India, Techtalk Seres-An initiative by Mohan Kumar T L #ciso #cybersecurity #TPRM #cro

٢٦٣

٢٢ تعليق

Secure by Design Pledge, a voluntary program for software manufacturers. The program outlines a set of goals that manufacturers can agree to work towards in order to improve the security of their products. I believe this program is a positive step towards improving the overall security posture of the software we use every day. By encouraging software makers to prioritize security from the design phase, we can collectively create a more secure digital environment. Software makers pledged to make measurable progress in applying secure by design principles to their organization and publicly document how they achieved it within one year. #cybersecurity #softwaredevelopment #pledge #securebydesign #microsoft #aws #github #qualys #fortinet #google

١٢

Very good discussions and sessions at Middle East Payment Security Summit. AI-driven security threats are on the rise and will continue to present new security challenges #pcidss #mepss #paymentsecurity

١٧

Recent research from IANS Research and Artico Search reveals that security budgets are being impacted by the global economy, based on a survey of 750 CISOs. Average budget growth increased from 6% in 2023 to 8% in 2024, though it's lower than in previous years (16% in 2021 and 17% in 2022). Two-thirds of CISOs report higher budgets, while 12% saw declines. IT spending on security rose from 8.6% in 2020 to 13.2% in 2024, driven by external events like breaches. Staff growth dropped to 12% in 2024. Budget trends vary by sector, with legal and financial services seeing growth, while healthcare and consumer goods saw declines. Most importantly, security budgets should align with a company's risk appetite. Investment should be sufficient to keep risks within acceptable levels; otherwise, the damage to the business could be devastating. Additional information on the topic is available at: https://lnkd.in/egR7X8MH #ciso #business #risk #budget #economy

٢

Risk Quantification In today’s complex threat landscape, effective cyber risk management is more critical than ever. The challenge lies not only in creating mitigation strategies but also in quantifying risk in business terms that resonate with leadership. Translating technical cyber risks into financial implications has become a crucial skill for securing the necessary resources for cybersecurity programs. The Evolution of Risk Quantification Over the past decade, cyber risk quantification has moved from basic heat maps and color-coded charts to more advanced, financially grounded models. One pivotal change has been the adoption of the Factor Analysis of Information Risk (FAIR) framework. FAIR enables organizations to quantify cyber risks in financial terms, providing a clear picture of potential monetary losses and bridging the gap between cybersecurity teams and business leaders. FAIR and Beyond FAIR breaks down risk into measurable components, such as loss event frequency and impact. It offers a defensible, repeatable approach to help guide decision-making. Meanwhile, emerging frameworks like Continuous Threat Exposure Management (CTEM) paired with Cyber Risk Quantification (CRQ) provide real-time, dynamic risk assessments. These models continuously update organizations’ risk postures and offer precise, actionable insights for the C-suite. Advances in Predictive Analytics Recent advances in predictive and advanced analytics allow for deeper scenario modeling and real-time decision-making. Predictive models simulate potential risk events, giving organizations a comprehensive view of possible outcomes and preparing them for worst-case scenarios. Challenges and Opportunities Despite progress, quantifying risk remains complex, especially with rapidly evolving threats. Data quality and predictive limitations continue to challenge organizations. However, new approaches like CTEM and CRQ are making risk quantification more accurate and relevant, helping teams stay ahead of emerging threats. As cyber threats evolve, so too must risk quantification techniques. Organizations must continue refining their strategies to ensure preparedness in the face of an ever-changing threat landscape. Full Article: https://lnkd.in/dfjtpAGE #CyberSecurity #RiskManagement #FAIR #CTEM #CRQ #PredictiveAnalytics #CISO #BusinessResilience #CyberThreats

٣٩

According to PwC’s Global Crisis and Resilience Survey 2023, 96% of 1812 business leaders experienced disruption in the last two years, with 76% noting a medium to high impact on operations. Surprisingly, only 70% felt confident in their organization's ability to respond. Join the conversation on building resilience through fundamental elements like business continuity planning. Let's explore strategies to navigate disruptions effectively. Find more insights from the survey here: https://lnkd.in/dKvcDQ2z register: https://lnkd.in/dw3Mb_XG

٤٣

Just finished the course “Introduction to Security Information and Event Management (SIEM)” by Fatimah Adelodun! Check it out: https://lnkd.in/dxidszdV #securityinformationandeventmanagement #cybersecurity.

١٨

١ تعليق واحد