Terry Greer-King

Book a demo now, Zero Trust and Least privilege is the way to go, and you can get it from Morgan & Morgan. NG Managed Service provider of the year 2024

7

What would the cost of a data breach mean to your organisation... 📉 In lost revenue due to downtime? ❌ In fines from the ICO and regulatory bodies? 💔 In reputational damage with customers and suppliers? The first two are the easiest to quantify, but damage to your reputation could not only impact short-term sales - it could derail growth in the future. Cyber security cannot be an afterthought. It needs to be integrated into your systems from the start. How much is your organisation willing to risk? #EmergeDigital #CyberSecurity #Risk

3

3 Comments

The MSSP market is badly broken. This has been unfolding for some time now, increasing cost pressures combined with the lack of any meaningful performance measures have created a worrying 'race to the bottom' situation. The key warning sign is a strong focus on reactive security. There are now a multitude of low-end EDR/XDR solutions that can be paired with a very low cost SOC. The level of real-world protection provided by these solutions tends to be massively oversold, in reality they often just create a single fragile layer of defence. At Secmatics we put a strong focus on proactive threat-driven risk reduction, I see far too many organisations that believe they are safe because they have '24x7 security monitoring', and yet have easily discoverable actively exploited vulnerabilities in their infrastructure. Good security starts at home. You need a cohesive threat-informed technical strategy along with the right combination of proactive and reactive defences. If your security parter is not actively working with you to identify and proactively mitigate threats and vulnerabilities then it is probably time to look elsewhere. Caveat Emptor.

1

We're gearing up for our first lot of beta testing with the latest escape room scenario from Esc - The Cyber Escape Room Co.... This one focuses on Insider Risk but there are some great other components we've added to entertain, engage and educate... 📝 Origami Puzzle - a physical representation of how data encryption works. Fold it wrong, and you'll get the wrong code for the book safe... 📕 Book Cipher - a historical way of encoding messages, dating as far back as The American Revolution... 📑 Ransom Note - written in morse code, so your team can get to grips with decoding information... Which puzzles are you most excited about trying out?!

17

2 Comments

The full story on #RegreSSHion vulnerability is out with all the details. Give it a read below - it's well worth it to understand the implication!.

11

NIS2 is very nearly real, live and required! This weeks recommended reading is The National Cyber Security Bill 2024 that was published by the Department of the Environment, Climate and Communications last week. - The Bill outlines new cybersecurity requirements that your company may need to adhere to, ensuring you stay compliant with national regulations. - Understanding the Bill helps you identify potential risks and vulnerabilities in your network that the NCSC might proactively scan for, allowing you to strengthen your defences. It's not an insignificant read and gives wide ranging powers to the National Cyber Security Centre, Ireland (NCSC-IE) Some things of note are: - The NCSC now has the ability to scan internal networks, with your consent, to improve cybersecurity - The NCSC is getting real teeth under the 2024 Bill—think proactive scanning, DNS blocking, and even temporary sensor deployment on critical networks. - The NCSC is officially Ireland’s cybersecurity watchdog under the 2024 Bill, with powers to act on everything from botnets to malware https://lnkd.in/ewKVCT57 Armis, Barry O'Brien

13

If you fail to plan, you plan to fail. Worth attending this to hear about crisis comms, crisis playbooks and the benefits of exercising your board during a cyber crisis 👇.

8

A couple of days to go! Join us or start following for us for more insight from our end-to-end cyber security practitioners. Early visibility, our July webinar will bring insights on how to articulate to the board the need for investment in cyber. We'll have a subject matter expert that's faced that challenge, having walked into two organisations post breach. Legacy technology debt is often the reason for a breach, and not having a strategy for appropriately investing in cyber security is more often the reason organisations fail to deliver lasting change.

3

💯 why CloudTech24 partner with CrowdStrike for our proactive threat detection services. Integrating top-tier technology with our elite team of 24/7 analysts sets the standard for our market-leading MDR services. How confident are you with your organisation's ability to detect and respond to advanced threats with rapid incident response and containment?

13

Packed with insights, E9 of CISOnomics has 'Sales-Friendly' CISO Brent Deterding interviewed by cyber sales, operations and marketing leader Jason Green. Links in comments. Includes: 🏆 How do CISOs measure success? 🎭 Considering different CISO personas 💸 What are the major ways businesses lose money in attacks? ⚡ Exec board, what's a really bad day look like? 👻 Does cyber have a FUD problem? 👼 Challenger sales means NOT calling their baby awkward! 🤥 Treat me like a human being, don't lie to me, don't waste my time 🤝 Activities that truly build relationships aren't logged in Salesforce 🗑️ Copy & Paste = straight to junk mail 💔 Traditional prospecting methods do more harm than good 📈 KPIs need to die, it should be about relationships & brand building Halcyon Afni, Inc. Secureworks Cylance Inc.

14

6 Comments

Missed our recent webinar on the findings from Adarma Security’s latest Threat Landscape Report? It’s now available to watch on demand, so you can still catch all the valuable insights from our experts, Cian Heasley and Gerry B.. 👉 https://ow.ly/z72w50TkaJ3 The webinar covers:  🔻 Emerging threats like QR code phishing, SIM swapping, deepfakes, and malvertising.  🔻 Industry specific threats to finance, retail, healthcare, and aviation sectors.  🔻 Key regulatory updates, including the EU Digital Operations Resilience Act and the UN Cybercrime Treaty.     #cybersecurity #infosec #cyberthreats #weareadarma

7

It's been over a year now since NHS trusts across England were mandated by NHS Digital, to onboard all eligible and supported endpoints to MDE on the NHSmail Shared Tenant. Even today, many of the trusts we have spoken with, have not yet migrated to the service. Of those that have, most say they struggle to find the recourses and the time needed to extract and correlate any contextual, meaningful or actionable data. What if there was a tool that can be deployed in 30 minutes and then, within 24 hours, out-of-the-box, could quickly and accurately highlight: - exactly how many vulnerabilities there are across the estate - which endpoints are effected - unique vulnerabilities, prioritised by criticality - point and click data analysis - reporting for auditors, aligned with standards such as DSPT and CAF?   If this sounds familiar, perhaps we should have a chat about DSPT View…… https://lnkd.in/ePH6Cx82

4

Early warning is one of the most cost-efficient and proven methods for reducing cyber risk. The best part is that there’s an abundance of data available to get started, especially from private sources like The Shadowserver Foundation, The Spamhaus Project, and others. With some automation tooling in place, you can swiftly protect your constituents in no time. Arctic Security Ltd #earlywarning #cyberhygiene #cyberriskreduction

10

1 Comment

Ever wondered about the weakest link in your business' ransomware defences? According to ransomware expert Anthony Spiteri from Veeam Software, your biggest risk could be coming from within ... Our latest ransomware podcast with Veeam, dives deep into this crucial discussion, emphasising the vulnerability of human error in cybersecurity. Listen in as Anthony shares his insights and the role employee education plays in mitigating risks. Don't miss out on this insightful discussion! Tune in now to fortify your business' ransomware defences and protect your valuable data assets. https://hubs.ly/Q02tg8P50 #RansomwareProtection #CyberSecurity #VeeamPodcast

14

Some excellent panels at CSO Online Security Summit - 28th November and super security lunch discussion hosted by Microsoft Marc Carney - thanks to Katie Giorgadze, moderators Lisa Forte, Holly Foxcroft and all involved ✅ CISO leadership is needed more than ever to accelerate innovation and sustained growth - whilst protecting people, customers, society, team members, assets .. #GrowthMindset #LeadershipMindset #CoachingMindset #SecurityMindset #EveryoneDeservesACoachMentor #7Cs #Leadership ✅ Must do more on Inclusion, Diversity, Diversity of thinking for success (only 17% of the community are women, ethnicity, neurodiversity, social background … ✅ CISO community needs to more gentle - supporting itself and each other ➡️ AI amplifies existing threats ➡️ Need a plan against/for Hallucinations, Deepfakes, Data Poisoning ➡️ Teach (kids) - Fact checking and critical thinking ➡️ Have a safeword at a family and business level - as some protection against Deepfakes ➡️ Winners do the basics really well … “Come on, MFA is not hard” ➡️ What's the problem you're trying to solve - business impact ➡️ Invest in the team and a security mindset ➡️ Business Resilience has an bigger impact and is easier for board to understand and approve ➡️ AI won't replace humans but will enhance and allow security to do more : use AI to discover your IT estate, automate the basics-so talent doesn't leave, governance, role based permissions and privileges, Access Information Management is even more, proactively understanding the implications of a near miss/what if scenarios and how to protect. Security at the Speed of Business ➡️ Lisa Forte (Moderator) - Cybersecurity Expert ➡️ Duncan Brown Group VP, IDC ➡️ Simon Schofield, Head of Security, Atradius ➡️ Diane Abela CISO Accurx ➡️ Justyna L CISSP CISM CISA CRISC CGEIT, Ardonagh Advisory Security concerns and AI ➡️ Lisa Forte (Moderator) - Cybersecurity Expert ➡️ Toni-Ann Grant, Principal Security Architect BT Group ➡️ Samantha Rule, Head of Info Sec, Ninety One ➡️ Marius Poskus. VP of Cyber Security, Glow Financial Services Empowering Cyber Culture: Winning Strategies and Talent Development in Today’s Threat Landscape ➡️ 🔐Neil Johnson, Head of Security, ICE Services ➡️ Scott W. Head of Information Security, Protas ➡️ Rob Plummer, Director IT & Security, Fletchers Group ➡️ Chinonso Orekie ... MSc, BEng, Head of IT and Digital Services, Commonwealth Parliamentary Association ➡️ Holly Foxcroft (Moderator) Head of Neurodiversity in Cyber Research Stott and May Consulting When the Boss Doesn’t Fit: Cybersecurity Workforce More Diverse than Its Managers ➡️ Quentyn Taylor CISO, Canon EMEA ➡️ Guillaume E. CISO Kroo ➡️ Steve Wilson IT Director Henry Boot PLC ➡️ Holly Foxcroft (Moderator) Head of Neurodiversity in Cyber Research Stott and May Consulting

47

2 Comments

In 2022, several contractor-focused firms, including SJD Accountancy, Parasol, and Nixon Williams, were hit by ransomware attacks. These attacks: - Severely disrupted operations. - Prevented thousands of contractors from getting paid. - Forced some customer-facing systems offline. The parent company, Optionis Group, confirmed a significant data breach. Over 400,000 files were leaked online. This incident underscores the critical need for: - Robust backup plans. - Disaster recovery plans. - Regular testing to ensure resilience against cyber threats. Imagine facing such an attack during tax season. Deadlines are tight. Without a timely recovery plan, the consequences can be devastating. Ensuring you have a comprehensive BCDR strategy is not just a good practice—it’s essential for your firm’s survival. #BusinessContinuity #DisasterRecovery #RiskManagement #CPA #AccountingFirms

4

Here at the Gartner #AIBSS summit today, one of the standouts so far has been Howard Dodd and Anthony Mullen keynote on enabling AI to safely but productively find rhythm within business. One use case that really stood out is something we’re seeing commonly across businesses we speak to - implementing real-time infrastructure cost containment to reuse, recycle or gain efficiencies. If you want to learn how to conquer that challenge, and use platform engineering to enhance agility, productivity & experience as well as becoming more cost effective, look into the impact Strong Network can have on your function going into 2025. #gartner #costcontainment #devops #platformengineering #cde

2