Jyoti Wadhwa

Enhanced Visibility & Hardening Guidance for Communications Infrastructure CISA has released actionable guidance to help organizations bolster the security and resilience of critical communications infrastructure. * Enhanced Network Visibility: Tools and strategies to monitor and detect potential vulnerabilities. * Hardening Measures: Practical steps to fortify systems against evolving threats. * Proactive Defense: Best practices for mitigating risks to critical infrastructure. Secure your communications systems today and stay ahead of potential threats. Explore the full guidance here: https://lnkd.in/gADKtUPf #Cybersecurity #InfrastructureSecurity #CISA #Resilience

24

Strengthen your healthcare organization's security with microsegmentation!  Dive into our latest blog to explore the recent cyberattack on Change Healthcare and how ColorTokens Xshield, can protect against such threats: https://bit.ly/4cIoAOx #ransomware #BeBreachReady #CyberSecurity #Microsegmentation

13

1 Comment

Recent article I authored on using a data analytics approach for dealing with living off the land attacks - https://lnkd.in/dN7WCAxX #security #healthcare #livingofftheland #dataanalytics

29

Security teams need answers to tough cloud data security questions and to close exposures faster. That’s why we’re introducing data security posture management (DSPM) and AI security posture management (AI-SPM) capabilities for Tenable Cloud Security. Key benefits: ✔️ Gain complete visibility of your cloud data ✔️ Proactively identify cloud data exposure ✔️ Reduce the likelihood of a data breach 🔗 Learn more: http://ow.ly/q424105O2IL

8

Transformation is tricky. I led several successful transformation efforts throughout my career, and they always were filled with elements of hope for completion, drive to achieve results, a little luck, and wrangling impossible timelines while minimizing downtime. In the May/June issue of HBR, Michael Mankins and Patrick Litre highlight "Six Critical Practices" for getting transformation right in their article, Transformations that Work (https://lnkd.in/gKGNAdVc). Go check out that article (making an account gets you a few free articles per month). I had a couple of key takeaways that I thought were interesting: The first two practices in the list often feel like a combo-deal for me. Those are treating transformation as a continuous process and building it into the company's operating rhythm. My work in the DevOps space helped to set me on the right track with this one as I practice kaizen, or continuous improvement. Large scale transformations become a key component of business-as-usual activities, so Mankins and Litre argue we should treat it that way. The reality is that companies of size always have projects going on of some scale and often times those overlap. Focusing more on constant improvement is a better way to ensure success than the "unfreeze-change-refreeze" model. Another one that spoke to me was driving change from the middle-out. Think about large scale transformations you have worked on recently that were championed by a direct report of the CEO, but the actual work was done five to fifteen layers below that executive. Mankins and Litre argue that driving change from the middle of the organization is the perfect nexus of day to day operational knowledge (or at least orders of magnitude closer than a senior executive) combined with a good handle on the overarching company mission, goals, and initiatives to really be able to see and propose major needle-moving change. Finally, accessing substantial external capital from the start. Big changes need funding, and cash may need to be raised from the outside. But more importantly, I would argue that you need to be honest in your cash and resource requirements when you pitch the transformational project. I watched so many projects at the bank go in to committee with a funding number of $X million when it really needed a $X+$Y million total number. It was done to avoid sticker shock, get around processes that kicked into gear when dollars got to a certain threshold, and ultimately served to mislead executives on the true cost and scale of what was being done. You are doing your best when you come in AT your projected funding and resource levels, not below and definitely not above. What big transformational lessons have you learned in your career? Drop it in the comments below!

4

🔒 With ransomware forever on the rise, you need to protect data - not just your perimeter. Download your complimentary copy of this eBook👇 to learn how @NetApp's #AI-powered cyber-resiliency solutions help you detect, respond to and recover from threats in minutes, no matter where they originate. Tell us if you'd like to learn how Verge Innovation can help keep your business running uninterrupted with a custom cyber-resiliency strategy.

1

Okta signed the Cybersecurity and Infrastructure Security Agency’s Secure by Design pledge at #RSAC to take meaningful steps in adopting #secure by design principles in the coming year. I am excited that we are accompanying our peers in the industry to take the steps needed to prioritize application security. Identity-based #attacks have become a top method for cybercriminals, and according to the Open Worldwide Application Security Project, broken access control is the number one most common web application security risk. It’s putting companies building their applications at risk. This is a priority for Okta. There’s never been a more critical time for us to come together and implement secure design principles to keep the #identity #secure. Learn more about this pledge https://bit.ly/3UQNLbz. Tomorrow is also Okta Showcase! I am excited to join Todd McKinnon, Sagnik Nandy , and others to share the latest product innovations & commitments Okta is making to secure identity. You can tune in here: https://bit.ly/4cLldaI

189

2 Comments

We used to talk about cybersecurity as just securing technology. The reality, though, is that it's about securing organizational and business outcomes. It’s about aligning security with your core mission and values. Traditional methods miss the mark. They focus on threat mitigation but miss the bigger picture. Purpose-driven cybersecurity changes this. It integrates security into your organization’s DNA. It’s about embedding security into your mission. Create resilience. Build trust. Stand out in the market. Embrace a holistic approach. Align security with your mission.

15

1 Comment

If you’re at the Zywave Cyber Risk Insights conference today, look for me! I’ll be joining a panel at 1:45 to discuss whether we’ve reached a critical mass yet with data to adequately model and manage #cyberrisk. https://lnkd.in/dK2d3HHe

13

1 Comment

YouAttest for Identity Security and Compliance:   NIST Guidelines and frameworks are crucial to government contractors.   https://lnkd.in/erkpffEh Important to these NIST recommendations is attestation of identities controlling sensitive data (PHI, PII and CUI) - https://lnkd.in/g9zSZ_gd Know your identities, and privileges, w/ (now AI-powered)   YouAttest.com, contact us:    https://lnkd.in/g96pUae Wes Jones Jeff Chao Rick Mischka  #ITSecurity #governance #cybersecurity  #compliance #mspsecurity

16

1 Comment

YouAttest for Identity Security and Compliance:   NIST Guidelines and frameworks are crucial to government contractors.   https://lnkd.in/erkpffEh Important to these NIST recommendations is attestation of identities controlling sensitive data (PHI, PII and CUI) - https://lnkd.in/g9zSZ_gd Know your identities, and privileges, w/ (now AI-powered)   YouAttest.com, contact us:    https://lnkd.in/g96pUae  #ITSecurity #governance #cybersecurity  #compliance #mspsecurity

10

1 Comment

#TeamTrellix is committed to meeting the federal sector’s rising demand for integrated security platforms and just announced the Trellix GovCloud Security Platform is authorized at the FedRAMP® High Impact Level.   Federal agencies and organizations requiring FedRAMP-authorized solutions can now more readily leverage AI-powered tools to centrally manage their security operations with real-time monitoring, threat protection, and advanced XDR and EDR.  

6

This year's RSA Conference theme is The Art of the Possible, underscoring the importance of building bonds, embracing the power of community, and going beyond ones and zeroes to stay ahead of threats. That's why Devo is laser-focused on stopping cyber burnout and enabling CISOs to tackle their biggest hurdles at this year's show. Learn more by reading the blog post below. #RSAC #RSAC2024 #CyberBurnout #CybersecurityLeadership

11

Interesting read

1

Thrilled to have joined Strike Graph's podcast (SecureTalk) to discuss building a strong cyber risk management practice! I explored how to develop essential ECRM tools, secure organization buy-in, and transform cybersecurity from a defensive measure into a true competitive advantage. I also shared insights on creating a budget philosophy that aligns with strategic goals. For anyone interested in moving beyond defense and turning cyber risk management into a growth driver, this episode is for you! I’d love to hear your thoughts—how are you approaching cyber risk management as a strategic asset in your organization? Thank you, Justin Beals, for an enlightening conversation! #CyberRiskManagement #CompetitiveAdvantage #ECRM

4

CISA's Deputy Director Nitin Natarajan underscores the inevitability of cyberattacks on healthcare providers. He emphasizes the need for resilience and proactive defense measures to mitigate risks effectively. Moreover, as healthcare organizations face budget constraints, leveraging free federal resources becomes crucial in bolstering cybersecurity defenses. Natarajan advocates for a shift towards a "secure by design" approach to ensure robust protection against cyber threats in the long term. I'd add the significance of addressing the C-suite's potential inability to seize cyber opportunities, stressing the importance of leadership alignment and investment in cybersecurity measures. Cybersecurity initiatives work best backed by leadership support. #HealthcareCybersecurity #CSuiteLeadership #CyberRisks #HealthcareSecurity

5

Healthcare under attack. #Ransomware attacks are not just data-theft or financial crimes, they are threat-to-life crimes. And they are not just an IT issue, but a risk to every function of your enterprise.

4

Survey Reveals Alarming State of Cybersecurity Readiness in the Defense Industrial Base. "However, a recent report by CyberSheath reveals a deeply concerning reality: the majority of defense contractors are woefully unprepared for the Cybersecurity Maturity Model Certification (CMMC) requirements, leaving critical infrastructure and sensitive data vulnerable to cyber threats." 👉 Read more: https://gag.gl/o3KAdO #Cybersecurity #Compliance #CMMC #DIB #Kiteworks

7