Donna R.

Our #massdatagov recently commented on the on the Cybersecurity and Infrastructure Security Agency #CIRCIA #cybersecurity reporting requirements NPRM including suggestions around reporting requirements for incidents affecting more than one organization. Read our comment here: https://ow.ly/JRRW50SiqLG #security #mhdcregulatory

1

Follow the DVMS Institute for exciting announcements on "HOW" organizations of any Size, Scale, or Complexity can Operationalize a NIST Cybersecurity Framework Digital Value Management System™ capable of delivering the Trusted, Resilient, and Auditable digital outcomes government auditors expect

16

🚨 The Cybersecurity and Infrastructure Security Agency (CISA) issued a proposed rule in March 2024 regarding reporting requirements under the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA). In public comments, the American Hospital Association (AHA) and the Medical Group Management Association (MGMA) expressed concerns about how the rule will affect healthcare entities that are already subject to other cybersecurity incident reporting requirements. CIRCIA, which was enacted in March 2022, requires CISA to develop and implement regulations that require covered entities to report cyber incidents and ransomware payments to CISA. Although the law has been in effect since 2022, the reporting requirements will not go into effect until CISA completes its formal rulemaking process. The final rule is expected to be published in 2025. #IndustryNews #CIRCIA #Regulations #BusinessNews #Compliance #TechIndustry #PolicyChanges #DataReporting #IndustryConcerns #BusinessUpdates #RegulatoryNews #TechPolicy #IndustryImpact

2

It's September 25, 2024. Do you know where your organizations vulnerabilities are? Don't wait for a cyberattack to happen! Vulnerability assessments and remediation allow you to take a proactive approach to security, finding and patching vulnerabilities before they become problems. Contact HaltSec Security Services. We can help!!!

1

Cybersecurity vulnerabilities are a critical consideration for federally regulated financial institutions, requiring careful risk assessment and robust oversight frameworks. We survey the cyber risk guidelines set out in Guideline B-13, highlighting its intersections with other OSFI risk-management guidelines: https://bit.ly/4eTxEBc Molly Reynolds | Rosalie Jetté | Angela Jiao | Adam Armstrong #cybersecurity #datagovernance #privacy #technology #artificialintelligence #CyberMonth2024

9

Wrapping up Q3, the Vulcan Cyber | Own exposure risk quarterly vulnerabilities report is released. Get a FREE copy here >> https://lnkd.in/eSXFUjNz   Read about the most notable vulnerabilities of the quarter, trending topics, and more.

28

2 Comments

Health Sector Publishes Executive Checklist For Cyber Incident Response Washington, DC – October 30, 2024 - Recognizing October as the 21st National Cyber Security Awareness Month, the Healthcare and Public Health Sector Coordinating Council (HSCC) Joint Cybersecurity Working Group today published a checklist to assist senior executives of healthcare entities to support and guide effective incident response and operational continuity following a cyber incident.  The publication is available free for download here - https://bit.ly/4fmj3yE. The epidemic of cyber threats and incidents on the health sector highlights the need for healthcare executives not only to recognize the potential business consequences of cyberattacks but to understand and manage the executive role in directing and supporting incident response and continuity of operations. Consequences across a victim organization invariably involve executives responsible for legal, regulatory, operational, reputational, financial and clinical risk, and ultimately, patient safety. This checklist aims to raise awareness about critical considerations for informed and swift executive decision-making during and after a cybersecurity incident. These considerations are categorized into Incident Response, Business Continuity, and Communication sections. By familiarizing themselves with these strategic concerns in advance, healthcare executives can enhance their preparedness to ask the right questions and make effective decisions during a crisis. About the HSCC Joint Cybersecurity Working Group The Healthcare and Public Health Sector Coordinating Council (HSCC) Joint Cybersecurity Working Group (JCWG) is a government-recognized critical infrastructure industry council of more than 470 healthcare providers, pharmaceutical and medical technology companies, payers, health IT entities and government agencies partnering to identify and mitigate cyber threats to health data and research, systems, manufacturing and patient care. The JCWG membership collaboratively develops and publishes free healthcare cybersecurity leading practices and policy recommendations and produces outreach and communications programs emphasizing the imperative that cyber safety is patient safety. For inquiries, please visit: https://lnkd.in/eRMUFKej. #cybersecurity #healthcarecybersecurity #patientsafety #incidentresponse #emergencymanagement

85

1 Comment

Updates Proposed to ‘Green Book’ Guidance on Internal Agency Controls - FEDweek: Updates Proposed to ‘Green Book’ Guidance on Internal Agency Controls  FEDweek #CyberSecurity #InfoSec #SecurityInsights

1

We're revealing new #compliance and #cybersecurity research results from our latest Omdia Securealities report for CISOs at our #FedRAMP event. Register for #RAMPCon2024: https://ow.ly/C9mF50SfqpK

13

Cybersecurity and Infrastructure Security Agency expands Secure Tomorrow Series Toolkit with three emerging risk topics. Learn more: https://lnkd.in/e3ABcyig #Cybersecurity #NationalCriticalFunctions

2

NIST finalizes quick start guide on supply chain risk management for cybersecurity framework update http://ow.ly/SuN2105MCpx

1

NJ12 Kane In Your Corner recently shared an insightful article on what to do if you've been a victim of identity theft. Cybersecurity expert Scott Schober provides valuable tips on how to protect yourself from scammers and cybercrime. Check out the article here: https://lnkd.in/e5hhvxNf #ID #Scammer #cybersecurity #cybercrime

7

AC-02 is in the top 5 most important controls I'd recommend developing familiarity with 🚨 Let's continue our Neverending Story through NIST 800-53 with: AC-02 Access Control Account Management Simply stated: AC-02 governs: - Accounts and people (users, managers, roles, groups, etc.) - Access authorizations and privileges - Account management processes - Account monitoring and review - Account PII privacy ➡️ There are 12 control elements (A-L) within AC-02 🙂‍↕️ which each need to be fulfilled or inherited for overall AC-02 compliance How to simplify control implementation: - Consider how account management is conducted throughout the enterprise, application team, cloud service provider, data center, etc. - Map to Identity and Access Management tools and services - Leverage inheritance for external team services - Revisit onboarding and off-boarding processes How to automate control implementation & assessment: - Integrate configuration checks for access control mechanisms - Leverage Identity and Access Management capabilities - Configure logging and alerts for audits and monitoring - Automate account review checks ⬇️ Let me know what I missed ⬇️ #GRCEngineering #NIST #NIST80053 #Cybersecurity #ZeroTrust #GRC #AccessControl #PoliciesandProcedures #AI #AccountManagement

19

5 Comments

Maximize your event ROI at the Charlotte Cybersecurity Summit! Having recently attended the San Antonio Cybersecurity Summit, I can tell you that this is worth the investment!

4