Kashif Iqbal (CMgr)

Yesterday we announced the renewal of our 𝗖𝘆𝗯𝗲𝗿 𝗘𝘀𝘀𝗲𝗻𝘁𝗶𝗮𝗹𝘀 Certificate of Assurance. Cyber Essentials, A UK Government-backed scheme to help organizations improve cybersecurity defenses against common internet-based attacks. Here are 5 controls you can implement today: - Use a firewall: Create a buffer zone between your IT network and external networks. - Use secure settings: Configure devices and software with secure settings to reduce vulnerabilities. - Control access: Limit data and service access to essential personnel only. - Protect against malware: Use antivirus software and regular updates to prevent harmful software. - Keep devices and software updated: Regular updates patch vulnerabilities and protect against new threats. Our renewed certification highlights our commitment to top-notch cybersecurity. Learn more about how we can help protect your business by booking a demo at the link below ⏬ https://lnkd.in/g_5wtScu #CyberEssentials #CyberSecurity #Certification #DigitalSafety #PrivilegedAccessManagement #ZeroTrust #RemoteAccess #AdminByRequest

13

2024 Report on Stress & Burnout in Cybersecurity - please share. At BlackHat Europe in December, Daniel Shore, PhD and Zac Broomfield surveyed cyber security professionals on the subject of stress and burnout in the cyber security profession. QA Ltd are very proud to support this research, we encourage you to share this report, so as a community we can work together to reduce stress and burnout in our industry. No one person, team, organisation, or government can do this alone!

49

4 Comments

IASME, the National Cyber Security Centre’s (NCSC) cyber essentials delivery partner, has created useful guidance documents for schools which also apply to colleges. Read more 👉 https://lttr.ai/AYuGB #cyberessentials #education #Cybersecurity #cybersecurity

3

Another book review for your reading pleasure. This one for all the aspiring CCSP cert holders out there. Packt's CCSP Certified Cloud Security Professional: Exam Guide by Omar A. Turner and Navya Lakshmana has everything one needs to prepare and master this ISC2 exam. Make no mistake, this is a difficult exam, but with the book's flashcards, mock exams, and exam tips, paired with the guidance within, you'll be sure to pass. Let's break down some of my favorite sections: Chapter 3 dives into the top threats for cloud infrastructure and data. Common threats such as data breaches, misconfigurations, insecure APIs, insider threats, and account hijacking are highlighted in the chapter. Addressing these threats requires robust access controls, encryption, continuous monitoring, and incident response mechanisms. In chapter 4, we get into the shared responsibility model and some key risks. For IaaS, PaaS, and SaaS models, the importance of understanding the shared responsibility model is critical for the exam and in real world practice. Mitigation strategies for the threats outline in chapter 3 include implementing strong access controls, encryption, secure development practices, and adherence to industry regulations are explored here as well. Next in chapter 6 we go over cloud data security concepts. I know first hand how important data security is in the real world. This chapter prepares you by exploring different storage types: object, file, and block storage and how they are analyzed for their unique security threats, including malware, denial-of-service attacks, and unauthorized access. Effective data management in the cloud is critical for compliance and security. This chapter goes over best practices for data retention, archival, and deletion, with a focus on protecting sensitive data throughout its lifecycle. Compliance with regulations like GDPR, HIPAA, and SOX are touched on. One of my favorite chapters was chapter 9 on Risk Management. The importance of structured risk management frameworks such as NIST RMF, ISO 31000, and the CSA Cloud Controls Matrix are emphasized here. Tools like CSPM, SIEM, and EDR are explored as options for monitoring and protecting cloud environments. The evaluation of cloud service providers through SLAs, third-party assessments, and compliance certifications is also touched on. No matter if you're preparing for the CCSP Certified Cloud Security Professional exam or just wanting to expand your knowledge of secure cloud development and hosting, this book is sure to delivery the results you are looking for. Thanks Packt and Ankur Mulasi for the opportunity.

77

1 Comment

The #GRCSummitUK2024 was an amazing chance to connect with experts from all kinds of industries and dive into fresh ideas around GRC. The presentations were inspiring and packed with insights on what’s happening now and what’s next in the field. One of the highlights for me was Elena Pykhova's workshop—it was hands-on, impactful, and full of practical takeaways that I can’t wait to bring back to ABB Bank. The topics which were touched: *Third-party risk management; *Mastering Risk and Control Self-Assessments; *The Digital Operational Resilience Act (DORA); *Enterprise GRC by Design; *Designing Integrated GRC and Resilience Programs; *Key Strategies to Build Cyber Resilience for Effective Cyber Risk Management. Thanks to Elena Pykhova , Michael Rasmussen and everyone who shared their knowledge;

104

4 Comments

#Crowdstrike has released its Root Cause Analysis - 12 pages of details which ultimately boils down to inadequate testing, in other words a systemic issue. Perhaps not surprising, but we can't depend on our service providers putting in place adequate quality assurance processes, we need to consider doing more testing prior to deployment - or consider alternative solutions. #testing #qualityassurance #cyber

22

1 Comment

Essential cybersecurity conferences for 2024-2025 Looking to stay ahead in the rapidly evolving world of cybersecurity? The cybersecurity events calendar is looking busy - from exploring cutting-edge topics like AI-driven threat detection to reviewing quantum computing’s impact on encryption. Kicking off with the Bristol Tech Festival Bristol & Bath Cyber Conference on October 9, 2024, with a schedule full of insight and workshops, and continuing with Black Hat Europe in London from December 9-12, 2024, renowned for its hands-on training and in-depth technical sessions. For those keen on exploring the intersection of AI and cybersecurity, Cybertech Europe in Rome (October 8-9, 2024) will dive into AI-driven security solutions across industries. If you’re more focused on quantum encryption and processor security, mark your calendar for CyberUK 2025 in Manchester (May 6-8, 2025), hosted by the National Cyber Security Centre. With so much on the horizon, find out which other essential conferences are shaping the future of cybersecurity by reading the full article in the comments 👇 

2

1 Comment

Given all the recent news on ST, here is practical secure mobile communication guidance for individuals by CISA. Please remember the mobile device and platform, including apps, must also be secured or E2E encryption can be overcome. Employees should still check with their respective CIO/IT offices on actual implementation and operational requirements. https://lnkd.in/edGXE2Uw

37

Helpful blog on #Cybersecurity here from Rick C.

3

1 Comment

1/3 of CISOs in the UK ignore NCSC cybersecurity guidance – report - Verdict: 1/3 of CISOs in the UK ignore NCSC cybersecurity guidance – report  Verdict #CyberSecurity #InfoSec #SecurityInsights

1

ICO urges organisations to strengthen cyber security amid rising attack risks The ICO reports a sharp increase in cyber attacks, urging sectors like finance, retail, and education to bolster cyber security.

1

"The guidance and support from my mentor were crucial to my success." Mentoring Programme Success: Hafiz Shaharudin's Journey See how our Mentoring Programme helped Hafiz Shaharudin achieve his cybersecurity career goals. Read his inspiring testimonial and learn how personalised guidance and expert mentorship can make a difference. Read the full testimonial here: bit.ly/3MEp0dK Written by Hafiz Shaharudin as part of the Lateral Connect Mentoring Programme. #CyberSecurity #Mentorship #CareerGrowth #LateralConnect #SuccessStory

1

The The Cyber Resilience Centre for Wales has identified the biggest #cyber security #vulnerabilities for the country’s schools - it says that 52% of primary and 71% of secondary schools in Wales have identifed a breach or attack over the past year. It is providings background information on the most common attacks and five tips on how schools can protect themselves. https://lnkd.in/ebWfnrpQ

2

🌟 Boost Your Organisation's Security for Free! 🌟 The UK's National Cyber Security Centre (NCSC) offers a free Early Warning System to help organisations stay ahead of cyber threats. Sign up to receive alerts about suspicious activity on your network by providing your public IP ranges, domains, and a contact email. Contain issues before they materialise. 🔗 Sign up for free here: https://lnkd.in/eiM6v9Ed 📍 Not in the UK? US-based organisations can access free tools from CISA here: https://www.cisa.gov/ 🔍 Want to see how we can help? See how our CREST SOC can provide you detection and response capabilities firsthand: https://lnkd.in/g7v5tHEx 🚨  Join our newsletter for more tips: https://lnkd.in/g_As3Y2a #CyberSecurity #NCSC #CISA #FreeResources #StaySafe

11