Douglas Brush

Robinson+Cole's Sean Griffin writes: Recently, the National Institute of Standards and Technology (NIST) released its second public draft of Digital Identity Guidelines. The Draft Guidelines focus on online identity verification, but several provisions have implications for government contractors’ #cybersecurity programs, as well as contractors’ use of artificial intelligence and machine learning. #nist #governmentcontractors #artificialintelligence #machinelearning

7

⚡️Some domains likely used by #transparentTribe #APT36 counciling[.]com nbssedelhi[.]org ashifdigitalseva[.]xyz birthdeath[.]in gov-certificate[.]com viewss[.]click admin-mcas-df[.]ms admin-mcas[.]ms mcas-df[.]ms mcas[.]ms verifycertificate[.]info nimsme[.]org

1

1 Comment

A battle of experts: Unpleasant realities of digital forensics https://lnkd.in/gTHc5SS8 - Digital forensics is continually shaped by technological advancements and court challenges. - There is a need for standardized tools and methodologies in digital forensics to ensure consistency and reliability. - Enhanced training and certification programs for digital forensic experts can help ensure that practitioners are well-versed in the latest technologies and methodologies. - Establishing clear legal frameworks and guidelines for the admissibility and interpretation of digital forensic evidence can help mitigate the influence of legal and financial resources in swaying expert testimony.

13

2 Comments

Follow the DVMS Institute for exciting announcements on "HOW" organizations of any Size, Scale, or Complexity can Operationalize a NIST Cybersecurity Framework Digital Value Management System™ capable of delivering the Trusted, Resilient, and Auditable digital outcomes government auditors expect

16

The latest from OODA Loop Contributor Emilio Iasiello: In June 2024, the Office of the National Cyber Director (ONCD) released its report Summary of the 2023 Cybersecurity Regulatory Harmonization Request for Information, a government effort whose purpose is to find a path forward to creating a comprehensive framework to strengthen cybersecurity resilience across all sectors; simplify oversight and responsibilities of cyber regulators; and reduce administrative burden and cost on those organizations regulated.  The RFI adhered to Strategic Objective 1.1 of the 2023 National Cybersecurity Strategy, “Establish Cybersecurity Requirements to Support National Security and Public Safety.”  Eighty-six organizations responded to the RFI, representing the critical infrastructure sectors, as well as state and local government associations, academia, and non-profit and professional organizations.  The report found three major outcomes from those that responded to the survey:  1) lack of harmonization and reciprocity impacted cybersecurity outcomes while inflicting high compliance costs; 2) regulatory harmonization had challenges that extended to all sectors and organizations of all sizes and crossed jurisdictions; and 3) it was well within the U.S. government’s ability to address these existing challenges.   https://lnkd.in/eqU486u9

4

1 Comment

Should you hire your own digital forensic examiner or take the opposing side at their word? Schedule a free discovery call to learn how I can help you with your digital evidence next legal matter. https://lnkd.in/dUJiZV6 #digitalforensics #criminaldefense #litigationsupport #expertwitness #investigation

8

When it comes to digital forensic investigations, not all geolocation data is created equal. Learn some best practices for pinpointing locations, establishing timelines, and corroborating testimonies to convict or exonerate suspects -- and learn the limitations of these powerful forensic artifacts.

23

1 Comment

The path to expertise in any field demands a well-defined skillset, and digital forensics is no exception. Whether you're looking to hire or become a Digital Forensic Examiner, you'll need these skills. Here's just one example of a core skill that a great Digital Forensic Examiner possesses. 👉 DISPASSIONATE When you are not emotionally invested in a particular outcome, you are more likely to hunt for the facts and be willing to consider all sides of an issue. You can't let your emotions and biases fuel your search for the truth. If you're looking for a great Digital Forensic Examiner, shoot me a DM or email me, and let's chat about how I can help. #digitalforensics #dfir #criminaldefense #expertwitness #litigationsupport #jobskills

16

👔 White Collar Forensic LLC - Meet The Investigators 🕵🏽‍♀️ 🤔 Putting a label on a White Collar Forensic LLC practitioner with decades of experience isn't as easy as one might think. So many of them have deep expertise across multiple disciplines. Investigations, forensic accounting, threat intelligence, and compliance remediation. 🦉 One thing that sets our investigative practitioners apart from the crowd is their extensive experience performing investigations of potential compliance violations. 💪🏽 To be truly effective conducting compliance investigations requires a strong foundation in major compliance disciplines such as anti-bribery and corruption, anti-money laundering, sanctions and fraud risk AND a track record of investigating violations of those compliance regimes. ♊ Indeed, many of our team members can seamlessly transition from investigator to compliance officer and back again. Being able to present investigative findings in the context of the victim organization's compliance program requirements is something our client's value a great deal. 👩🏽‍🎓 This dual proficiency enables us to readily explain to leadership what happened, the compliance implications and whether and to what extent the investigation exposed shortcomings in the compliance framework or the internal controls underlying it. 🔮 These insights put our client's in the best possible position to make timely and informed decisions about the people involved in the improper conduct and take concrete actions to remediate any shortcomings in the compliance program or internal controls that may have contributed to the problem. 👓 If you'd like to have clarity the next time you need help with a compliance investigation, why not contact us at https://lnkd.in/exb_Prg8 #WhiteCollarForensic #ChooseClarity #WarHorses Scott Moritz Tanya S. Kim Frisinger Diane Walker Chris Favo John Kula, Certified Fraud Examiner Patrick T. Kramer Christina Siess, LPI Taylor (Mike) Belcher A.J. Bosco Ingrid Busson Stefan Cassella Dan Dorsky Kevin Doyle, CPA, CFE, CFF, CGMA Timothy Dunfey Esq., CFE, CAMS James G. Odell Guyton Emma Hamilton Barry Koch Patricia McKeown Kevin Mclaughlin Deb Tabacco Patty P. Tehrani

18

The recently published NIST IR 8477 Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines explains National Institute of Standards and Technology (NIST)’s approach for identifying and documenting the relationships between concepts in #cybersecurity and #privacy. By following this approach, the standards community can jointly establish a single concept system over time that links cybersecurity and privacy concepts from many sources into a cohesive, consistent set of relationship mappings. 🧷 Read the report at https://lnkd.in/guxtKDKg #NISTprivacy #privacystandards #privacyframework #privacyregulation

3

The recently published NIST IR 8477 Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines explains National Institute of Standards and Technology (NIST)’s approach for identifying and documenting the relationships between concepts in #cybersecurity and #privacy. By following this approach, the standards community can jointly establish a single concept system over time that links cybersecurity and privacy concepts from many sources into a cohesive, consistent set of relationship mappings. 🧷 Read the report at https://lnkd.in/guxtKDKg #NISTprivacy #privacystandards #privacyframework #privacyregulation

3

The digital evidence is acquired, what next? Discuss with your fellow digital investigators in a topic-specific forum, free on the Hub. Check it out today! https://csh.social/diginv #dfir #osint #investigation #digitalforensics #digitalinvestigation

1

The digital evidence is acquired, what next? Discuss with your fellow digital investigators in a topic-specific forum, free on the Hub. Check it out today! https://csh.social/diginv #dfir #osint #investigation #digitalforensics #digitalinvestigation

1

Thanks to the good people at Claroty, I found services that list OT/ICS attacks! Some great material here: Newsfeed style: https://icsstrive.com/ Database: https://lnkd.in/e8KM7fJw, https://lnkd.in/eJkM9UYJ But what's interesting? None of them are complete... There was an attack on a Texas water treatment plant in January by, potentially, SANDWORM. It's not on either list. Complete databases will help us with complete information that will need to better decision-making and a fuller intuition. So, if you know of attacks that are not on these lists, use the Report button to add them. #cybersecurity #otsecurity

8