Babak Pasdar

Understanding your SPRS score is critical for NIST 800-171 compliance, but managing it can be complex. Victor Cich, Compliance Consultant at RADICL demonstrates how our platform’s live score calculator gives you real-time updates as you assess each requirement, making compliance tracking easier for your team. Check out this clip to see how our platform simplifies compliance management. How do you ensure your team stays on top of compliance? #SPRS #ComplianceTracking #NIST800171 #CyberSecurity #RADICL #DefenseIndustry

4

Looking for a way to stay cool? Grab a popsicle and catch up on the latest issue of the AuthZ newsletter. If you’re an #identity or #authorization enthusiast, this weekly digest is a must read. Subscribe and share!

2

Registration list will be closing soon (approaching capacity) for the OWASP New York Chapter Meetup and hands-on workshop. We have a fabulous venue, thanks to Dell, and we have to respect their capacity rules. Workshop Topic: Vulnerability Reachability Analysis Using OSS Tools. Workshop Abstract: New vulnerabilities are disclosed every day in dependencies that you or your team may be using. But how do you know if you are actually using the vulnerable code? This talk will show you how to use two different types of tools to analyze reachability – deciding if the vulnerability needs to be prioritized based on your own code usage. Register here: https://lnkd.in/gdDBkm79

11

Curious about the latest in cybersecurity? Join us at #BHUSA2024 where Yarin Ozery will demo a real-time DNS exfiltration detection and Ori David will explore VPN post-exploitation techniques. Check session times and locations here. https://bit.ly/4cY3R9X

5

One of the most common cloud questions I get from clients is the debate over Public vs. Private (vs. Data Center). Let's discuss: When it comes to cloud computing, the debate isn’t about which is superior—private or public— but rather which aligns best with your specific needs. At Lumen Technologies, we collaborate with public cloud giants like Amazon Web Services (AWS), Microsoft Azure, and Google Cloud. But we also partner with Data Center giants like Digital Realty, and Equinix. And yes, we have our own private cloud offering (hip, hip, hooray for ultra-low latency!). So given the fact, that I can partner with anyone, I would like to think I have a balanced opinion. - Scalability vs. Cost: The public cloud offers immense scalability, enabling you to right-size computing resources to meet demand. However, this "on-demand" flexibility may come at a price. In contrast, the private cloud is tailored for predictable workloads, offering a more cost-effective solution for known computing needs. - Usability vs. Independence: The public cloud simplifies operations by managing all maintenance tasks. Additionally, it's serverless and managed service offerings, make it very attractive to startups, or companies looking to build a new product. However, this convenience may eventually lead to vendor lock-in as private cloud (and data centers) don't have compatible offerings. Yes, private cloud demands an in-house team for upkeep but grants more flexibility and independence in the long run. - Security: Both models boast strong security protocols. The public cloud utilizes a layered security strategy, including encryption and network intrusion detection. Meanwhile, the private cloud provides advanced security features like physical isolation and SIEM. Notably, the public cloud’s dedicated host options now closely resemble the security benefits of a private cloud. At this point, I would call it a wash. In the end, your decision depends on your product and how your workloads align with these factors. I suggest beginning in the public cloud to harness its agility and flexibility. However, consider a long-term strategy for private cloud or repatriation as your product matures. Managing cloud costs can be challenging, but Lumen offers solutions and a professional services team to assist you on your journey. P.S. Yes, a hybrid model is best -- but that answer is BORING.  P.S.S. Yes, Data Center companies are coming out with public cloud like offerings (GPU as a Service), and I would recommend those as well (especially for AI compute).

12

3 Comments

Curious about how easily RL's solutions can be integrated into your enterprise's existing platforms? We've got you covered - from #ThreatIntel to #SoftwareSupplyChainSecurity.

5

We often speak with our customers about becoming PQC ready being a process vs an immediate switch. With PQC now taking the initial steps towards mainstream adoption it is now more important than ever to begin to understand the magnitude of preparation that is required to migrate to quantum-resistant cryptography. This AppViewX blog dives into the Cryptographic Bill of Materials (CBOM) and why it is becoming necessary to fully understand the cryptographic algorithms and libraries used in the software products throughout your organization. Read more here: https://lnkd.in/gSsQpsw6 #PQC #postquantum #CBOM #SBOM #PKI #CLM #MIM

29

Discover how ransomware targets SMBs and how to safeguard your business in 4 actionable steps. Get this infographic from eSentire. DM for help getting started.

1

💡 How does my PKI’s status compare to that of others? Understanding where your Public Key Infrastructure (PKI) stands compared to others can be a game-changer. It’s not just about identifying benchmarks and best practices but also uncovering areas ripe for improvement. 🌟 While it’s crucial to tailor your PKI evaluation to fit your organization’s unique needs and constraints, benchmarking against industry reports, case studies, and peer-reviewed publications can offer invaluable insights into your PKI’s performance. 📊✨ Though the PKI Consortium doesn’t publish individual maturity assessment results, we provide a vibrant community where you can exchange experiences and learn from others. Join our working groups and tap into a wealth of shared knowledge! 🤝🌐 Learn more about PKI Maturity Model: https://pkic.org/pkimm/ #pki #pkimm #pkic #maturity #improvement #assessment #benchmark #guidance PKI Consortium

13

Out at BlackHat? Or just want to pose some "Tough But Fair" questions for your potential Zero Trust vendor? Check out my 2-minute video for the three questions you should challenge prospective vendors with.

32

2 Comments

Tracking your SPRS score doesn't have to be a guessing game. Victor Cich, Compliance Consultant at RADICL, explains how our platform’s live SPRS score calculator simplifies NIST 800-171 compliance. With real-time updates, you can easily monitor progress, identify roadblocks, and ensure your team stays on track. In this clip, Victor walks through how our tool makes compliance management effortless for both teams and executives. How are you tracking your compliance progress? #SPRS #NIST800171 #CyberSecurity #Compliance #RealTimeTracking #RADICL

6

Here’s how it works: 3️⃣ Maintain at least three copies of your data: one primary copy and two backups.  2️⃣ Store the backups on two different types of media (like external drives and cloud storage)  1️⃣ Keep one copy offsite to protect against physical damage. Take the first step in securing your business today! Follow this link to Book a FREE cybersecurity consultation with us: https://www.oramca.com/ #OramCybersecurityAdvisors #CyberAttack #SlowComputer #CyberSecurity #ComputerBreach #DataBreach

2

A recent report by the Wall Street Journal reveals that the Chinese state-sponsored APT group known as Salt Typhoon has breached major US broadband provider networks through systems used for court-authorized wiretapping. The affected providers include industry giants like AT&T and Verizon Communications, as well as enterprise-specific service providers such as Lumen Technologies. Not only did Salt Typhoon gain access to wiretapping connections, but they also intercepted general Internet traffic across these networks and targeted entities outside the US. Sources suggest that the cyberattackers potentially had access for an extended period. https://lnkd.in/e7tNvdCn

2