Corinne Bertolino

Know your cloud risk, expose your biggest cloud gaps and close your priority cloud exposures fast. This is Tenable. Your cloud exposure ends here.

18

This is getting lots of attention and i know many companies are patching and blocking malicious IPs to protect themselves. #cybersecurity #cisco #vpn #patchmangment

16

2 Comments

This is a critical need for us all and one I fear we are once again speaking to without working toward a solution. But let me explain why this matters to me….. I am a college dropout teenage dad. I worked those odd jobs, ending up working in a printing plant for several years. I got lucky and an interest in gaming led to a skill in PC hardware salvage. That skill in PC salvage led to my own business and working IT support in a steel mill in the 90s. Eventually that skill led to much more. My story is any one of tens of millions of people with millions of background variations. My path was a very real path to technology in the 90s when the PC was newer to the corporate world. The method still exists, though the path has shifted to add cyber and artificial intelligence alongside technology. There are hundreds, really millions of people who are where I was, and they are unaware of their potential and where they can go if given the opportunity. Many of these people are limited because from their seat they do not see a path that leads them to success. The gap is further ahead than the suggested putting people together with jobs. https://lnkd.in/ejvFwyvE  The gap is in getting people to realize they have a natural skill and in that there is an educational path forward for those people. This is even more day-today to me as my adult soon to be son-in-law required financial support this past semester. He would love to have an affordable education path into any of these proposed initiatives. Adult education for people regardless of their state of diversity are much less available than we like to pretend. We need to focus on a program that begins with recruitment, training, education, and support that leads to the place education does, “recruiting, hiring, and engagement”. It isn’t that the talent isn’t out there. It is that the path appears impossible and unaffordable for the millions without support. I am more than excited about this excellent and absolutely needed initiative. We still need more. We need the offer of financial support to create that new talent. We need support from start to finish. 

10

💡 Do I need to report PKI maturity level? Reporting your PKI maturity level isn’t just a checkbox! 🛠️ While not mandated by the PKI Consortium, documenting your PKI maturity level can: 📈 Highlight your current PKI status to stakeholders 🚀 Pinpoint key areas for improvement 📊 Track progress over time effectively Depending on your organization's needs, regulatory requirements, or improvement goals, reporting might be essential. Learn more about PKI Maturity Model: https://pkic.org/pkimm/ #pki #pkimm #pkic #maturity #improvement #assessment #benchmark #guidance PKI Consortium Paul van Brouwershaven Leigh Bailey

9

1 Comment

6 ICS advisories for your review.

5

🪧 SIEM ≠ MDR Welcome to part one of our three-part blog series where we share the difference between a SIEM system and MDR and how MDR can transform and augment your SIEM tool investment.

1

There are lots of great reasons to adopt Windows 11 Pro devices. You can learn about them in Forrester's report, "The Total Economic Impact of Windows 11 Pro Devices." Download the executive summary here. 👇

3

Achieving Zero Trust in OpenText eDocs: How Guardian Internal Information Security and WincWall Lead the Way in Insider Threat Detection and Automated Access Control.

4

🤔Just some thoughts and things to ponder this this weekend. ❓If you are in InfoSec: Do you have a good relationship with the business? ❓If you are in the business: Do you have a good relationship with InfoSec and Risk? ⁉️If not, why not? This was a fun article to write, I hope you enjoy it.

7

As a CISO, I truly believe mentorship is crucial in developing skilled cybersecurity teams and fostering long-term success within companies. Throughout my career, I've seen firsthand how guidance from experienced leaders can shape and elevate careers. Mentorship is a two-way street, benefiting both mentors and mentees by encouraging continuous learning and growth. By investing in mentorship, we create stronger, more cohesive security programs and a resilient workforce. #Cybersecurity #Mentorship #CISOsConnect

40

This is part two of a three-part blog series on how MDR can transform your SIEM investment. Understand the Cyber Kill Chain, the attack lifecycle, and how MDR and SIEM play into each:

1

⚠️ Don't fall victim to action bias in #cybersecurity! Learn how attackers exploit urgency and fear to manipulate victims into making hasty decisions. Josiah Dykstra shares how to recognize and mitigate this bias in the latest Resilience Rundown podcast: https://ow.ly/qWY730sClct

3

There is an important differentiation between CMMC Certification vs. CMMC Compliance. For those organizations who are part of the defense supply chain or want to become part of that community, it is important to know what the regulations require. Check out the overview: What’s the Difference and Which One Do You Need? Learn more: https://lnkd.in/gyBtYQKm Sponsored Post #CMMC #cybersecurity #compliance #blog #Kiteworks

7

1 Comment

I measure the value of conference by two measures - learning and networking. Days 0 and 1 of Microsoft Ignite were a success by both measures. Satya Nadella kicked off the Day 1 keynote with announcements for several technologies - whether desktop, infrastructure, cloud, artificial intelligence, or big data. Highlighting security all along the way. The most beneficial sessions from the remainder of Day 1 focused on the expanding capabilities of Microsoft Purview (both for Copilot & ChatGPT) and improvements in Defender for attack path mapping to aid in Continuous Exposure Management. From a networking perspective on both days, I had the opportunity to catch up with Paul Goldney and the team from Wizard Cyber. We've identified capabilities to explore such as Microsoft Cloud PC and fully leveraging Purview to protect Copilot. Overall, a success so far. If you're at Ignite, tag me on LinkedIn. I'd like to say hi in between learning sessions.

25

1 Comment

How does your organization manage technical debt in development and infrastructure, and what strategies have you found most effective in balancing innovation with maintaining a secure and scalable infrastructure? https://lnkd.in/gTdu2HZ7

8

Expel is headed to #GartnerSEC! 🔒 You'll want to swing by booth #506 to see how Expel's industry-leading MDR services leverage AI and human expertise to deliver 20-minute MTTR 🚀 #expel #MDR #industryleaders #beastmode

3

𝐃𝐨𝐧’𝐭 𝐥𝐞𝐚𝐯𝐞 𝐜𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐨𝐮𝐭 𝐨𝐟 𝐲𝐨𝐮𝐫 2025 𝐛𝐮𝐝𝐠𝐞𝐭. 👉 As cyber threats continue to evolve, non-technical leaders must play an active role in aligning their cybersecurity budget with business goals. 👉 Strategic budgeting isn't just about compliance; it's about risk management and resilience. Our guide by Robert McElroy breaks down how leaders can perform risk assessments, prioritize key investments, and ensure their organizations remain secure in 2025. 🔖 Read the full blog post here: https://lnkd.in/gpBGjQA4  🛡 I'm a blue team leader and proudly work for SecurIT360, an MSSP focused on cyber protection at every level. Follow, connect and make it tough for bad guys to succeed.

3