Ben de la Salle

IASME, the National Cyber Security Centre’s (NCSC) cyber essentials delivery partner, has created useful guidance documents for schools which also apply to colleges. Read more 👉 https://lttr.ai/AYuGB #cyberessentials #education #Cybersecurity #cybersecurity

3

Black Arrow Cyber Threat Intelligence Briefing 09 August 2024: -UK Business Struggling to Prioritise Cyber Security Needs -The C-Suite Conundrum: Are Senior Executives the Achilles’ Heel of Cyber Security? -Ransomware in 2024: More Attacks, More Leaks, and Increased Sophistication -Malware-as-a-Service and Ransomware-as-a-Service Lower Barriers for Cyber Criminals -How the Theft of 40M UK Voter Register Records was Entirely Preventable -18-Year-Old Security Flaw in Firefox and Chrome Exploited in Attacks -99% of Global 2000 Companies Directly Connected to a Supply Chain Breach -Email Attacks Skyrocket 293% -Police Recover Over $40m Headed to BEC Scammers -Russia's Priorities in Prisoner Swap Suggest Cyber Focus -Point of Entry: Why Hackers Target Stolen Credentials for Initial Access -FBI: BlackSuit Ransomware Behind Over $500 Million in Ransom Demands -Survey: 78% of Ransomware Victims Paid and 74% Suffered Multiple Strikes -Finance Should Pay Much More Attention to Undersea Cables Risk #blackarrowcyber #cyber #threatintelligence #threatreport #opensourceintelligence #riskmanagement #grc https://lnkd.in/eRPYZwZ5

4

Are you looking to improve your leadership skills? I had the pleasure of meeting Andy Ellis at RSA last week and have been digging into his book ever since. Being one of the most well-known and experienced cybersecurity leaders, he shares dozens of lessons and observations that anyone, at any stage of their career, can use to create a work culture of continuous improvement and strong leadership Andy Ellis is a graduate of MIT and former US Air Force officer. In his 20-year tenure, he designed, built, and brought to market many of Akamai’s security products, leading the Fortune 1,000 company from its start as a content delivery network into an industry powerhouse with a billion-dollar dedicated cybersecurity business.  Andy is now the founder of leadership development firm Duha, where he teaches his leadership philosophy not only to other executives, but strives to make leadership training more accessible to people at all career levels. My takeaways so far: ✅Focus on the present, worrying about failure can make it happen! ✅Consistency matters ✅Performance development is for EVERYONE in your team. Grab a copy if you’re looking to improve your leadership skills, I’m glad I did. #leadership #cybersecurity

30

Interesting to see this peddled again “a lack of basic cyber hygiene”. Reviewing the latest #CyberBreach survey from HMG is sobering reading. 75% of UK business report #Cyber as being a key area for the board, yet this (again) results in total lack of #Governance: - 33% of businesses have a formal security policy - 31% have conducted a risk assessment - 30% have a board member with cyber responsibility (this has returned to the levels of 2016-18) - 27% have asset management activities - 13% are aware of the NCSC 10 Steps Guidance, but only 3% have actioned all 10 steps - 11% have conducted a pen test - 11% have reviewed their supply chains - 12% are aware of CyberEssentials (up from 8% in 2016) - 3% review NCSC/ICO guidance on Cyber (up from 2% since 2016) This is damning, we have excellent guidance on the NCSC website for Cyber and on the ICO website for Data Protection. 41% of the business are consulting externally, so why are those consultants not advising their clients correctly? I have a real issue when we fete the current #CyberSecurity strategy yet in every demonstrable metric it’s failing to engage and inform. I hope that the new government looks to reset the foundations before pushing on with anything else. Within our clients, we place baseline guidance for Cyber and Data Protection at the centre of the engagement. This ensures that governance is reset and a solid foundation can be provided for improvement.

2

2 Comments

It is not just a fantastic update, but focusing on a point about why we use something is a significant step forward. ** Anyone trying to break into the industry, and even those looking for that next role, should take note. ** "A candidate who runs a valid tool and can explain why it was run, the risks involved and the expected outcome may be awarded more marks than a candidate who ran a tool but doesn't know why, what the risks were, what the expected outcome was, they just found it on a cheat sheet and it seemed to work."

8

Another supply chain cyber attack. This time on the NHS potentially with live threatening consequences and blood transfusions and tests are impacted. It is yet another reminder that due diligence on suppliers must include their cyber security and data protection. Many companies are either open to audit or will provide their accreditations or auditor supplied reports, such as: - Cyber Essentials - ISO 27001/2 - NIST (US National Institute of Standards and Technology) cyber security framework - ISAE3402 SOC I or II reports I may do a later post into the nuances of these various reports and accreditations. What is interesting in the NHS case is that Synnovis are a joint venture between Synlab UK & Ireland and Guys, St Thomas’s and Kings NHS trusts. I ask the question were they subject to third party risk management as a supplier not connected to the NHS would be? If this has given you a cause for concern about your supply chain contact us. #cyberattack #dataprotection #infosec

13

1 Comment

On Day 1 of #CyberUK24 please stop by the stand and say hello to the CYSIAM team. #CYSIAM #CyberSecurity #CyberCapacityBuilding #ManagedDetectionandResponse #CyberThreatIntelligence #IncidentResponse #DigitalForensics

32

We can help reduce the likelihood and impact of security incidents by providing proactive services. X-Force IR have got you covered with the necessary expertise and experience to handle large complex cybersecurity incidents #ibm #xforce #incidentresponse

9

Cheltenham cyber company is first official local cyber advisor under new government scheme 🌐🔐 A managed IT service and security provider (MSP) based in Cheltenham has become the first MSP in the local area to be accredited as both a Cyber Advisor and a Cyber Essentials Certification Body. This new accreditation will place ReformIT among an elite group of cyber advisers and cyber essentials certification bodies across the UK. The Cyber Advisor scheme was launched by the Government’s official National Cyber Security Centre (NCSC) and The IASME Consortium, aimed at helping businesses to protect themselves from increasing cyber threats. Initially developed for IT products and services suppliers to the central UK government, the Cyber Essentials and Cyber Essentials Plus certification demonstrates that an organisation has an essential level of cyber protection in place. NCSC approved Cyber Advisors provide small and medium-sized organisations across a range of industries with reliable and cost-effective cyber security analysis, advice and practical support, focusing on the key areas of the Cyber Essentials criteria. Continue reading... https://lnkd.in/ePsfWJme #technology #cyber #innovation #government #advising #cybersecurity #businessnews #businessintelligence

1

1 Comment

Working with clients recently the big fear has been cyber any yet so many seem to focus the response exclusively around IT security and resilience. Some useful tips below.....

2

A Teacher Tapp survey found that 34% of schools & colleges in the UK are at risk of cyber attacks and that no adequate cyber security training is provided for teachers which can be critically damaging. https://buff.ly/4eKdHwY #cyberresilience #cybersecurity

2

This week I've been mulling over planning timescales for information risk and security management - a pertinent topic as we plummet towards the new calendar year and, for many, the new financial year. How's it going with your 2025 budget? Do you have an eye towards 2026 and beyond? https://lnkd.in/gUFiKpyZ

8

4 Comments

It is said that a problem shared is a problem halved. If your struggling or you know someone that is, this webinar from techUK might be for you. See you there. #cybersecurity #stress #burnout

4

New legislation will help counter the cyber threat to our essential services. The announcement of the Cyber Security and Resilience Bill is a landmark moment in tackling the growing threat to the UK's critical systems. Read the full blog below #solutionspt #ncsc #cyber #security #ot #critical #systems

7

Is your business interested in achieving Cyber Essentials? Cyber Essentials Users have been surveyed as part of an Impact Evaluation of Cyber Essentials carried out by the UK Government (DSIT) https://lnkd.in/e5kjRu4Y. After going through and analysing the findings I have collected together some interesting statistics that highlight the benefits businesses have found with achieving Cyber Essentials. 🔐 😎 Greater Confidence: 91% of Cyber Essentials users say that the scheme has directly improved their confidence at being able to consistently implement steps to reduce cyber security risks. 📖 Improved knowledge - 88% of Cyber Essentials users believe that the scheme has directly improved their understanding of the steps they can take to reducing those risks. 💲 Commercial Benefits: 80% identify a commercial benefit that being certified can reduce the financial cost to their organisation of a common, unsophisticated cyber attack. IT Governance are one of the founding certification bodies with a team of experienced assessors. You can view our Cyber Essentials packages using the following link: https://lnkd.in/ep5ecPmg If you have any questions feel free to message me on LinkedIn 📩 #CyberEssentials #CyberEssentialsPlus #CyberSecurity #IASME

2

I have been convinced that HM Government will pass the onus of keeping data safe to the keepers of that information, i.e. businesses. Very soon it may become compulsory to be Cyber Essentials accredited in the hope that businesses will be more careful about data protection and avoid subsequent GDPR fines. C4 Secure offer a guided route to assured success of achieving accreditation. Book a chat by clicking the link below: https://lnkd.in/e_dGg64s #strongertogether #thisisnorthants #cyberessentials #gdpr Cyber Tec Security

2

🚨 Cybersecurity Remains a Priority in 2024 🚨 The National Cyber Security Centre (NCSC) has just released its 2024 Annual Review, highlighting the ongoing threat of cyberattacks across all UK sectors. The report stresses the critical role of Cyber Essentials in strengthening the UK’s cyber resilience. Here’s a standout fact: 💥 Organisations are 92% less likely to make a cyber insurance claim if they’ve implemented Cyber Essentials. This quote from NCSC’s CEO, Dr Richard Horne, underlines how the scheme’s security controls continue to deliver real-world protection, even a decade after its launch. At AiMTECH, we’re proud to be a Cyber Essentials accredited body, helping businesses implement these essential controls and protect themselves against evolving cyber threats. 📖 Read the full Annual Review here: https://smpl.is/9xh3l Don’t wait for an attack, let’s strengthen your defences together. Reach out to discuss how Cyber Essentials can protect your business. #CyberEssentials #CyberSecurity #NCSC #ITSupport #BusinessProtection

2

IASME, the National Cyber Security Centre’s (NCSC) cyber essentials delivery partner, has created useful guidance documents for schools which also apply to colleges. Read more 👉 https://lttr.ai/AZj5C #cyberessentials #education #Cybersecurity #cybersecurity

3