David Bork, MBA, CISSP

💡 Do I need to report PKI maturity level? Reporting your PKI maturity level isn’t just a checkbox! 🛠️ While not mandated by the PKI Consortium, documenting your PKI maturity level can: 📈 Highlight your current PKI status to stakeholders 🚀 Pinpoint key areas for improvement 📊 Track progress over time effectively Depending on your organization's needs, regulatory requirements, or improvement goals, reporting might be essential. Learn more about PKI Maturity Model: https://pkic.org/pkimm/ #pki #pkimm #pkic #maturity #improvement #assessment #benchmark #guidance PKI Consortium Paul van Brouwershaven Leigh Bailey

9

1 Comment

VM remains a cornerstone of preventive cybersecurity, but organizations still struggle with vulnerability overload and sophisticated threats. Tenable’s new Exposure Signals gives security teams comprehensive context, so they can shift from VM to exposure management and effectively prioritize high-risk exposures across their complex attack surface. http://ow.ly/oGFk105PbnX

3

Learn the ins and outs of internet exposure in the context of vulnerability management: https://lnkd.in/eta2umrs.

9

This is very interesting... seems to be a riff on an analysis technique that we described in an article titled "Beyond Timelines - Anchors in Relative Time" ten years ago in Digital Forensics Magazine. The technique has been applied to extremely high-profile and high-stakes cases since then.

11

2 Comments

Know your adversary’s next move with the Technique Inference Engine, a machine learning-powered tool that infers unseen adversary techniques, providing security teams actionable intelligence. #ThreatIntelligence #ThreatHunting #DFIR

8

Continuing the team's video series: compliance control mapping. This approach helps you identify and remediate identities that do not meet the compliance frameworks your organization adheres to. Here’s an example for PCI.

24

1 Comment

Here is the next episode of The Intelligence Cycle. https://lnkd.in/gXE5948N

3

Attackers no longer hack their way in; instead, they log in. Assess your attack readiness plus learn how the free, open source tool Halberd can simplify security testing to detect and stop identity and cloud attacks.

1

CMMC Level 2 Assessment Objective: Flaw Remediation for Controlled Unclassified Information (CUI) Data PRACTICE: Organizations must identify, report, and correct system flaws in a timely manner. ASSESSMENT: All software and firmware have potential flaws. Organizations must identify systems that are affected by announced software and firmware flaws, including potential vulnerabilities resulting from those flaws, and report this information to designated personnel with information security responsibilities. Security-relevant updates include patches, service packs, hot fixes, and antivirus signatures. Be prepared! Your assessor could ask to 🔍 EXAMINE system and information integrity policy. 🗣 INTERVIEW system or network administrators. 📝 TEST organizational processes for identifying, reporting, and correcting system flaws. (CMMC Assessment Guide: Level 2 Version 2.11, page 241) #CMMC #DoD #cybersecurity #NIST #InformationSecurity

57

The PCI DSS v4.0.1 update provides much-needed clarifications that can help us all strengthen our cybersecurity measures. With clearer guidelines on MFA and payment scripts, we can better protect sensitive data. How is your organization adapting to these changes? Reach out to Arbure for a deep dive into these updates. #PCIDSS #Cybersecurity #Compliance #PCIUpdate

4

ControlCase’s Technology Usage Template provides guidelines for the proper use of your organization’s computing resources, including the use of electronic messaging. Download your templates today to assist in meeting the requirements of several IT Security Standards, including PCI DSS, SOC 2, NIST 800-53, HITRUST, HIPAA, GDPR and ISO 27001.   https://lnkd.in/gDRBmv4H #ControlCase #Technology #Computing #emailsecurity #cloudcomputing 

29

Cillian M discusses the challenges MSSPs face and how Tenable can help them thrive in today's market. From self-provisioning through to the Tenable One Exposure Management Platform 👀 watch now! ➡️ Learn more: https://lnkd.in/eiMtnJZH #Cybersecurity

9

Join the #DocumentAutomation Training Camp live coaching this week for a deep dive into learning instances & extraction methods. #DATC https://bit.ly/3NAAMXd

7

Discover how a strategic, data-driven approach to identity and access management can enhance security in Sara F.'s article from our partner, Optiv. Learn about the importance of Zero Trust principles, minimizing privileged account access, and using metrics for leadership buy-in. Learn more: https://lnkd.in/exfR4WW4    #readibots #IGA #IAM #Secops #Servicedesk #Identity #IdentityAutomation #Security #itoperations #emergingtech  #AgileIdentity  

21

7 Comments