Bindu Sundaresan

Recent third-party incidents have had a major impact on enterprises of all sizes and from all sectors. This is an important event to attend to learn how to mitigate this risk.

6

Stay ahead of cybersecurity threats with these expert tips. Protect your programs and data with these essential strategies. #cybersecurity #securitytips

1

NJ12 Kane In Your Corner recently shared an insightful article on what to do if you've been a victim of identity theft. Cybersecurity expert Scott Schober provides valuable tips on how to protect yourself from scammers and cybercrime. Check out the article here: https://lnkd.in/e5hhvxNf #ID #Scammer #cybersecurity #cybercrime

7

That's a lotta $$$ In 2023, New York residents lost $749.9 million to cybercriminals - making it the fourth most targeted state. Last year, about 21,000 residents were victimized by cybercrime and, on average, lost about $35,000 per person. Here's the 5 states that lost the most money to cybercriminals in 2023: California - $2.159 billion Texas - $1.021 billion Florida - $874.72 million New York - $749.9 million New Jersey - $441.1 million Read More: New York Among Top 10 States Most Affected By Cybercrime | https://lnkd.in/gfEhgkYT

6

2 Comments

It's September 25, 2024. Do you know where your organizations vulnerabilities are? Don't wait for a cyberattack to happen! Vulnerability assessments and remediation allow you to take a proactive approach to security, finding and patching vulnerabilities before they become problems. Contact HaltSec Security Services. We can help!!!

1

At CMMC Day I presented on preparing for a CMMC Assessment and the importance of guiding the assessment team. One of the most valuable things an OSC can do is prepare and deliver a thorough In-Brief at the beginning of the assessment. The In-Brief provides context to the assessment team so they better understand your business, your environment, the type of CUI you handle, how CUI flows through your organization, who they will interact with during the assessment, and how you manage change.  It helps the assessment team better understand your documentation, what they will be hearing during interviews, and what they will be seeing during examinations.  With apologies to Pete Townshend, the assessment team really needs to know who are you!  #CMMC #CMMCDay2024

20

1 Comment

Maximize your event ROI at the Charlotte Cybersecurity Summit! Having recently attended the San Antonio Cybersecurity Summit, I can tell you that this is worth the investment!

4

Outpacing Cloud Attackers with GenAI: Advanced AI Strategies for Rapid Threat Detection and Response Earn CPE credits while enhancing your knowledge on leveraging AI for cloud defense. Personally the more I hear multiple perspectives of how AI can be used in whole or in part as a defensive measure, the more I learn of the vast possibilities. I’m joining this webinar as I sense it will be quite valuable in enhancing my personal knowledge.  Register here: https://lnkd.in/g4AF36jQ #CyberSecurity #AI #CloudSecurity #ThreatDetection #Sysdig #Webinar #TechInnovation #InfoSec #CPECredits

10

3 Comments

Come see the unveiling of the updated Cybersecurity Mesh Architecture version 3.0 today at 2pm in Maryland D! Gartner Security and Risk Management Summit 2024 #GartnerSEC #Gartner #CSMA

47

2 Comments

CrowdStrike IT Outage: Impact on New Hampshire Businesses   Recent CrowdStrike-related outages have significantly impacted both global and our local New Hampshire businesses, including airports, banks, hospitals, 911 services, and other government agencies across the state.  After connecting with many of my colleagues across the state and monitoring business websites, it’s clear that many services have been disrupted, though most businesses are recovering swiftly. Unfortunately, this situation has opened doors for malicious actors, who are now targeting victims with phishing emails and fraudulent websites claiming to offer quick fixes.   It's important to note that CrowdStrike has clarified that this incident is not linked to any system breach.   Here are some key questions to address in your post-mortem:   1. Are you maintaining open discussions with your security, tech teams, and risk management, involving all levels of management? 2. Is auto-pushing updates to your EDR platform still effective? Would requiring EDR updates to be performed by IT system owners be a better approach, or could it introduce risks of missing updates? 3. With the increasing reliance on cloud services, is your third-party risk management robust? Do you have accurate contacts and risk ratings for your vendors to make informed decisions? 4. Even if you don’t use CrowdStrike, have you assessed which critical vendors were impacted? 5. Is your business prepared to accept the risk of similar incidents occurring with any software product you use? 6. Does having full-time remote employees amplify the impact of such events? 7. How do you safeguard remote employees from malicious actors exploiting these situations? 8. Are there any regulatory reporting requirements you need to fulfill? 9. Have an open discussion covering why we still need EDR and how much risk there is in moving to another EDR or not having one at all. Finally, and somewhat self-serving, don't forget to thank your IT, security, and vendor management teams once we all get through this. :) If you have other topics that businesses should be discussing after this event, please add them to the comments.   #CyberSecurity #ITOutage #RiskManagement #CloudServices #ThirdPartyRisk #BusinessContinuity #RemoteWork #NewHampshire

4

1 Comment

Meet Jessica Hoffman, CISSP , the new voice of CISO Stories! With her extensive background in cybersecurity, she’s ready to dive into critical topics and engaging discussions. Jessica has dedicated her career to safeguarding sensitive information like Personally Identifiable Information (PII), Protected Healthcare Information (PHI), and Federal Tax Information (FTI). Learn more about her journey in our blog: https://bit.ly/4elQ6m6 #cybersecurity #CISOStories #podcast #PII #PHI #FTI

2

2 Comments

Data Breach Alert: Fidelity Investments Reports Exposure of 77,000 Clients' Personal Information In today’s digital age, cybersecurity breaches are becoming a pressing concern across industries. Unfortunately, Fidelity has joined the growing list of financial institutions affected by such incidents. In a recent filing, the company revealed that the personal information of approximately 77,000 clients was exposed in a data breach that occurred between August 17 and August 19. While no direct access to client accounts was compromised, hackers leveraged two newly established customer accounts to gain access to personal details of a subset of clients. Fidelity responded swiftly to the breach, terminating unauthorized access on August 19 and launching an investigation with the help of external cybersecurity experts. To reassure affected customers, Fidelity has offered two years of credit monitoring and identity restoration services through Transunion. They also emphasized their commitment to safeguarding client information, stating, “Fidelity takes its responsibility to serve customers and safeguard information seriously.” For those affected, Fidelity encourages continuous monitoring of financial statements and credit reports. Taking proactive steps, such as enrolling in identity protection services, is critical to mitigating the risks associated with data breaches. #DataSecurity #Cybersecurity #FinancialServices #Fidelity #DataBreach #ProtectYourData #CustomerSafety #IdentityTheftPrevention #AdvisorDefense https://lnkd.in/eyZVTxDM

8

AC-02 is in the top 5 most important controls I'd recommend developing familiarity with 🚨 Let's continue our Neverending Story through NIST 800-53 with: AC-02 Access Control Account Management Simply stated: AC-02 governs: - Accounts and people (users, managers, roles, groups, etc.) - Access authorizations and privileges - Account management processes - Account monitoring and review - Account PII privacy ➡️ There are 12 control elements (A-L) within AC-02 🙂‍↕️ which each need to be fulfilled or inherited for overall AC-02 compliance How to simplify control implementation: - Consider how account management is conducted throughout the enterprise, application team, cloud service provider, data center, etc. - Map to Identity and Access Management tools and services - Leverage inheritance for external team services - Revisit onboarding and off-boarding processes How to automate control implementation & assessment: - Integrate configuration checks for access control mechanisms - Leverage Identity and Access Management capabilities - Configure logging and alerts for audits and monitoring - Automate account review checks ⬇️ Let me know what I missed ⬇️ #GRCEngineering #NIST #NIST80053 #Cybersecurity #ZeroTrust #GRC #AccessControl #PoliciesandProcedures #AI #AccountManagement

19

5 Comments

Sometimes organizations fall into it is good enough or the likelihood of an issue happening is low until it happens and there is no plan. Cybersecurity needs dedicated focus and a plan. When the music stops, are you ready to respond? #cybersecurity #ciso #cto #incidentresponse #defense #plan #riskmanagement #detectprotectrespond

34

Healthcare’s cybersecurity challenges have shined a light on how the industry has failed to protect patient data by not dedicating enough resources to address the problem.  Health systems and insurers are dealing with the aftermath of the industry’s latest large-scale ransomware attacks on St. Louis-based Ascension, UnitedHealth Group's Change Healthcare and Chicago-based Lurie Children's Hospital, among others. Conversations are happening over whether organizations should be bringing in outside consultants or hiring more employees, executives say.  #healthcare #cybersecurity #cyberattacks #hospitals ‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

6

3 Comments

Special thanks to the Long Island NY ISC2 Chapter for hosting me to speak at their Chapter Event. Another great opportunity to talk about Cyber Risk Quantification. Ask me about the Open Education Resources that are now available for download from CyberRiskModels.com. #ISC2, #cybersecurity, #CRQ, #CIO, #CISO, #Training, #riskquantification

5

🌟 Honored to be Featured in VMblog's 2024 National Cybersecurity Month Round-Up! 🌟 A big thank you to VMblog for letting me part of their latest 2024 National Cybersecurity Month round-up. The article shares insights from lots of impressive security thought leaders on the latest cybersecurity trends and threats, including how to effectively manage organizational risk tolerance. Check out the article to gain valuable insights from experts in the field. Let's continue to stay informed and proactive in our cybersecurity efforts! #Cybersecurity #NationalCybersecurityMonth #SecurityTrends #RiskManagement #ThoughtLeadership

21

Folks, Our confirmed attendance is at a record level. Clearly the message and mission has hit an major inflection point! Don't miss out on the secrets of CMMC compliance. The is will be both entertaining and serious, with a lot of can you believe this was happening in a organization stories. And how to solve the toughest part of your CMMC certification processes. https://lnkd.in/gcw49xQe #CMMC #CybersecurityCompliance #DoD #DefenseContracting #XDR #CyberSecurity #ThreatDetection #IncidentResponse #DataProtection #ComplianceDeadline #GovCon #DefenseIndustry #CMMCCertification #CyberReadiness #SecurityStandards #FederalContracting #RiskManagement #CyberDefense #DataVisibility

3