Gavin Anthony Grounds

New blog post: Improving Cybersecurity Taxonomies Describing Impact and Cyber Harms Against Organizations I’ve introduced a new MISP taxonomy and shared insights into the critical role of impact description in effective information sharing. https://lnkd.in/eUJb-svP #CyberSecurity #MISP #taxonomies #taxonomy MISP Project (@[email protected] ) CIRCL (Computer Incident Response Center Luxembourg)

36

1 Comment

NIST Releases the C-SCRM Due Diligence Assessment Quick-Start Guide for Public Comment https://lnkd.in/dYxE3Uu6

12

Incident reporting is really important at all levels. End user self reporting is crucial and often overlooked. https://lnkd.in/dgVj5hZa

5

Continuing the team's video series: compliance control mapping. This approach helps you identify and remediate identities that do not meet the compliance frameworks your organization adheres to. Here’s an example for PCI.

24

1 Comment

Vinson Protect adds NIST Cybersecurity Framework v2.0! You all asked for it - now it's live! You can now add the National Institute of Standards and Technology (NIST) Cybersecurity Framework v2.0 to your Vinson Protect organization! Building upon the K12 SIX Essential Cybersecurity Protections, Center for Internet Security Critical Security Controls, and ClassLink's Cybersecurity Rubric, the CSF adds another lens through which to evaluate your schools' cybersecurity preparations. https://lnkd.in/gJryspY6 Are you curious about Vinson Protect? Why not join the 100+ schools that are using the application? The application allows schools to create audits, security reports, and security plans, track incidents, and manage/delegate tasks to team members. And it's completely free for schools to use! Check it out and sign up for your account --> https://vinsonprotect.com #vinsonprotect #nistcsfv2 #edtech #cybersecurity

7

Thank you for posting this Brian D. McCarthy. The EU NIS 2 implementation regulation is an important read for any company covered by the regulation. especially it has to be noted that it is REGULATION, it is not guidance. The articles that define critical incidents are important to consider. They set out the basic criteria for cyber incident for Technology and infrastructure vendors. They are very stringent. The appendix is especially important it provides a comprehensive suit of requirements by which NIS 2 is to be governed, implemented and managed. One is concerned how any company, especially SMEs, will comply to these rules and how insurers will interpret compliance. NIS 2 is regulation, the enclosed implementation document is regulation, how will compliance to the regulation be interpreted by regulators and insurers alike. https://lnkd.in/ei7SqfT4 Thaddeus Dziekanowski Faisal Khan Veritas GRC European Parliament #cyberscurity #cyberriskmanagement #nis2

2

I'm again excited about what 2023 DCRO Institute Exemplar Alex Sidorenko has put together for the 2024 Risk Awareness Week. In case you have never participated, Alex brings together some of the best minds in risk management and risk governance for a week of knowledge-sharing. In previous years, more than three thousand people from all over the world attended. This year, I'll be presenting on October 7th at noon ET. You can read more about my session and register here: https://lnkd.in/eANhFbsq There is a whole series on AI in risk governance that you can preview here: https://lnkd.in/eKKcW6Dc, where Susan Holliday, QRD®, Geoff Trickey, Elliot Phillips, Alex Sidorenko, and others share their thoughts. Prof. Dr. Ingrid Vasiliu-Feltes will highlight the profound impact of Digital Twins Technologies on risk management, emphasizing how their convergence with other emerging and frontier tech can revolutionize risk assessment, management, mitigation, and prevention. But these are just the beginning. Spend time looking through what you can discover, register, and check the archives if you miss an event. It's well worth your time! Register for everything using this link: https://lnkd.in/eBr8NQFN #RAW2024 #risk #leadership #governance

28

CRG helps clients dominate the IAM landscape with unparalleled expertise in winning and managing large-scale cybersecurity programs. Contact [email protected] or visit crgroupinc.com to position your firm at the forefront of IAM innovation. #CRG #Cybersecurity #IAM #ZeroTrust #FederalContracts #AI #ML #Cyber #CloudSecurity #NetworkSecurity #PatchManagement #ITArchitecture #TechStacks #Software #Hardware #Modernization

3

NIST Report on the 2024 Accordion Cipher Mode Workshop

3

Current state of MITRE ATT&CK: the essential tool to support the Intrusion Kill Chain Prevention Strategy.: Rick Howard discusses MITRE ATT&CK with Frank Duff, Amy Robertson, and Rick Doten #cyber #cybersecurity #cybersecurityjobs #innovation #management #informationsecurity #technology #cyberjobs

1

Great article on the convergence of Risk and Threat = the Cytellix vision/solutions for the past 8-years to leverage risk/compliance vectors in threat detection by providing continuous threat exposure management solutions. Thank you @Yasmine Abdillahi for writing this article. Cytellix®Comcast

11

Check out this podcast interview with me just after my TribalNet keynote in Vegas recently. I was asked a random question at the end about the first concert I attended that you might find interesting (and it's not just what's listed in the podcast description). #infosec #CISO #CIO #businessleaders #cybersecurity #podcast #keynotespeaker #backtobasics #rockconcerts #ISAC

5

Enhanced Visibility & Hardening Guidance for Communications Infrastructure CISA has released actionable guidance to help organizations bolster the security and resilience of critical communications infrastructure. * Enhanced Network Visibility: Tools and strategies to monitor and detect potential vulnerabilities. * Hardening Measures: Practical steps to fortify systems against evolving threats. * Proactive Defense: Best practices for mitigating risks to critical infrastructure. Secure your communications systems today and stay ahead of potential threats. Explore the full guidance here: https://lnkd.in/gADKtUPf #Cybersecurity #InfrastructureSecurity #CISA #Resilience

24

How are you dealing with 3rd party access to your organisation? My latest article on Forbes Technology Council is how to deal with this challenge.

2

1 Comment

CISA (Cybersecurity and Infrastructure Security Agency) has proposed new reporting requirements for significant cyber events across critical infrastructure sectors, including healthcare. These requirements aim to enhance cybersecurity measures but have raised concerns within the medical community. MGMA (Medical Group Management Association) has suggested that instead of adding duplicative reporting requirements, CISA should collaborate closely with HHS (Department of Health and Human Services) to streamline existing regulations under HIPAA. They also expressed concerns about the proposed size-based threshold, which could impose reporting obligations on smaller physician offices with revenues as low as $9 million annually. Do you agree that collaboration between CISA and HHS could streamline regulatory burdens? #HealthcareSecurity #CISA #CybersecurityReporting

5