Hart S. Brown

APISEC|CON SESSION: API Security Risk: How to Effectively Measure and Manage Cyber Risk Management is a major concern for organizations of all industries and sizes, yet it remains one of the most elusive and sought-after outcomes. In this session, Texas Mutual Insurance Company's John Sapp will discuss how to articulate API Security Risk in a language universally understood across three levels of stakeholders (Operational/Technical, IT & Business Management, and C-level / Board). Register: https://lnkd.in/g3imxUfn

15

Join DefenseStorm Director of Cyber Risk Management, Jessica Caballero, CERP, CRCM, for an in-depth look at the updates made to NIST's CSF framework with the introduction of CSF 2.0. In this informative webinar, you'll find out everything you need to know about the enhancements to the gold standard in #cybersecurity frameworks and how CSF 2.0 will impact your institution. Register today! https://lnkd.in/gCszt7JW

21

As the FFIEC Cybersecurity Assessment Tool (CAT) approaches its sunset, financial institutions must navigate the transition to alternative cybersecurity frameworks. This webinar will provide you with updates and guidance needed to ensure a smooth transition and maintain robust cybersecurity practices. Register ➡️ https://loom.ly/AR9KVOk

6

Things are changing fast in the legislation world! We couldn't be happier to host this upcoming podcast regarding the new Texas Data Privacy and Security Act! Join us July 9th at 3PM CST for all of the latest information to keep your business in compliance! Registration is free, just use the link below! https://lnkd.in/gGriteDb #DataPrivacy #Cybersecurity #Compliance #Texas #Business #DataProtection #Webinar #ProfessionalDevelopment #VeteranOwned

1

Register for our webinar to review common cyber threats facing state and local governments and get insights and strategies for responding to a cyberattack. https://hubs.li/Q02w3pMX0

4

Check out the Cybersecurity Guide Checklist!! #techtip #cybersecurity #manageditservices

6

Each year, hundreds of millions of individuals lose their personally identifiable information due to cyberattacks on organizations large and small, both public and private. This article discusses how the cybersecurity experts at the Texas A&M Engineering Extension Service (TEEX) can help you and your organization safeguard personal information from cyberattacks by providing training opportunities and conducting assessments of your cybersecurity compliance and risks. https://lnkd.in/g3QwMWuu

14

Third-Party Risk Management is no longer just a trending topic—it's a critical issue that organizations can’t afford to ignore. The Ostrich Cyber-Risk team is looking forward to Andrew Shea from CRFQ participating in a panel on this very topic on Tuesday, Oct 1st afternoon at #FAIRCON24 with Anurag Batra, Denny Wan, and Pankaj Goyal. Register here: https://lnkd.in/eRDSfuwv FAIR Institute #CRQ #ThirdPartyRisk #CyberRiskManagement

4

1 Comment

CISA advisors urge changes to JCDC's goals, operations, membership criteria. Why it matters: 1. An advisory panel has recommended significant improvements to the Joint Cyber Defense Collaborative (JCDC), addressing concerns from members over management issues, slow response times, and a lack of technical staff. The panel stresses a need to refocus the initiative on operational collaboration and incident response, rather than policy. 2. The JCDC, with over 300 members—including industry giants like Google and Amazon—provides a platform for private companies to share cybersecurity threat intelligence with government agencies. Clearer membership criteria and more developed coordinating structures were among the unanimously backed recommendations. 3. The proposed changes emphasize proactive preparation for future threats. Within 60 days, specifics on membership expectations will be provided by the Cybersecurity and Infrastructure Security Agency (CISA)—marketing a step towards enhanced public-private collaboration in cybersecurity defense efforts. Learn more by visiting The Record from Recorded Future News: https://lnkd.in/exWg5Jmz

5

Every mature TPRM program relies on risk assessment questionnaires to collect information on vendor controls and spotlight potential exposures. 📋 When building your TPRM program, one of the most significant decisions you'll make is determining which questionnaire(s) to use and when to use them. Third-party risk assessors and risk managers share the common goal of reducing risk – and that starts with information gathering. https://buff.ly/3WfDEwC Risk assessment questionnaires are a great way to get an inside-out, trust-based view of a vendor's security, privacy, and compliance controls. They address a plethora of TPRM concerns, such as: 🤨 Is risk control acceptable? 🪛 Does a risk need remediation? 🎚️ For an identified risk, is a compensating control in place? ⚡ In areas where there isn't a risk identified, what is the effectiveness of the control? While questionnaires are just a part of the third-party risk management equation, they're the best mechanism for getting a detailed, internal perspective of vendor risk. #TPRM #VendorRisk #RiskManagement

4

1 Comment

Attention #MnCities! New cybersecurity incident reporting requirements are coming into effect on December 1, 2024. Read our Focus on New Laws to learn what you need to know, including the types of incidents that must be reported and reporting deadlines: https://ow.ly/HTgO50Tjoh1

6

An organization must take the time to address risk as a business issue and not treat it as something that can be ignored. Here are six benefits of using quantitative risk analysis in your organization. https://bit.ly/45wE3hz #riskanalysis #riskmanagement #cybersecurity

2

1 Comment

Mark your calendars for July 25th! Join the 2024 Wolfpack Information Risk Webinar Series to navigate the new Joint Standard on Cybersecurity and Cyber Resilience Requirements. Learn best practices for establishing context, conducting gap analyses, and implementing effective compliance strategies. Hear from Craig Rosewarne and Jason Oehley on educating stakeholders and leveraging Arctic Wolf’s Security Operations services. Ensure your organisation is prepared—register now: https://ow.ly/zoTm50R2Uqa #Cybersecurity #CyberResilience #Compliance #FSCA #SARB #FinancialInstitutions #Auditing #GapAnalysis #RiskManagement #Remediation #StakeholderEducation #BusinessBenefits #SecurityOperations #ThreatDetection #PenetrationTesting #RegulatoryCompliance #FinancialRegulations #CyberThreats #FinancialSector #Wolfpack #ArcticWolf Jason Oehley Craig Rosewarne

24

Did you know our Forensic Services team is available 24/7, 365 days a year, for our clients? Check out our latest blog post by DCAC Forensic Interviewer Laura Cordoba to learn more about what it means to be on-call for the children of Dallas County. To read the blog post, visit https://lnkd.in/gKZX-d57 #dallascac #dcac #cactx #forensicinterview #forensicinterviewer #blogpost #newblog

9

This recent article highlights the importance of testing for good compliance. Nicole Beasley, GRC Practice Lead responded "Partnering with the DOJ? Ensure your cybersecurity compliance is ironclad. Let us help you test and strengthen your defenses under the False Claims Act". https://lnkd.in/eCc2wE9f #compliance

9