B L.

Encrypted DNS Implementation Guidance - Published by CISA in May 2024. This document provides Federal Civilian Executive Branch (FCEB) agencies with actionable guidance for the implementation of encrypted DNS protocols and for enhancing the cybersecurity posture of their IT networks. It is intended to provide implementation guidance for federal agencies to meet federal requirements related to encryption of Domain Name System (DNS) traffic and enhance the cybersecurity posture of their IT networks, as set forth in Office of Management and Budget’s (OMB) Memorandum M-22-09.1

2

I think a lot about securing critical infrastructure and operational technology (OT) environments. A few months ago, I saw a post from Andy Hollingsworth about cybersec ops training from the Idaho National Lab/CISA. I found a collection of training they have online for the Cyber-CHAMP framework. It is taught from an OT operator perspective and highlights the challenges that come with the IT/OT convergence. Cyber-CHAMP is a structured framework to help organizations assess their cybersecurity posture, align security initiatives with business goals, and develop a roadmap for building a cyber-ready workforce. What makes Cyber-CHAMP so powerful is that it looks at #cybersecurity from both the organizational and individual level. It's not just about implementing the latest technologies - it's about ensuring your people have the right skills, roles, and responsibilities to be an effective line of defense. Cyber security for OT environments used to be accomplished by creating separate networks. But that strategy doesn't hold up as more and more devices demand connectivity - including things like coffee pots which the instructors share in a memorable example during the class. Cyber-CHAMP provides a way to assess gaps and develop a tailored plan for upskilling the workforce. I am encouraging everyone on my team to take these classes. The instructors are practical and experienced. The content is up to date, relevant, and vendor agnostic. And, it is free. What's not to like? #aws AWS for Energy & Utilities #timeseries #businessanalytics

10

The HHS' Office for Civil Rights (OCR) must take significant steps to enhance its HIPAA audit program to ensure stronger protection of electronic protected health information (ePHI), according to a recent report from the Office of Inspector General (OIG). Amid increasing cyberattacks on healthcare organizations, the report highlights the need for more robust oversight and enforcement to safeguard sensitive health data. The audit assessed OCR’s compliance with the Health Information Technology for Economic and Clinical Health (HITECH) Act, which mandates periodic audits under the Health Insurance Portability and Accountability Act (HIPAA). While OCR has fulfilled its audit requirements, OIG found critical gaps in implementation, raising concerns about the effectiveness of OCR’s efforts to mitigate cybersecurity risks across the healthcare sector.

2

Hmmm how do I leverage the NIST CSF 2.0 www.ncsecourse.com for Compliance and Reporting "How can an organization enhance its cybersecurity governance framework according to the NIST CSF 2.0's Govern function? Include recommendations for establishing roles, responsibilities, policies, and procedures to manage cybersecurity risk effectively." #NISTCSF ICTTF - Cyber Security Community, Academy and Events

2

3 Comments

Those who are following CMMC have (probably? hopefully?) heard of the DoD Procurement Toolbox and its FAQs regarding cybersecurity. If not, here is a link to the Toolbox: https://lnkd.in/eM9i3pj5 DoD published an update to the FAQs yesterday for the first time in about 4 years. There are some interesting changes, and it is also interesting to see what has not been updated. I am especially intrigued by the United States Department of Defense’s answers to Q15 and Q16. Given all the work with #CMMC and the much anticipated new rules, I would have expected them to update the answers to mention that the assessments are coming. Below is a direct link to the PDF. Thanks to Robert Metzger and Joe Scholefield, CCP for finding and posting this. https://lnkd.in/exEGfxDx

11

Greensboro, NC, August 02, 2024 --(PR.com)-- In a recent interview, renowned Cyber Security Expert Maurice Kamgaing discussed the importance of implementing Splunk Enterprise Security for organizations to enhance their cybersecurity measures. During the interview, Kamgaing highlighted the key benefits of utilizing Splunk Enterprise Security, a leading cybersecurity platform that provides real-time visibility and advanced analytics for detecting and responding to potential threats. Kamgaing emphasized that implementing Splunk Enterprise Security enables organizations to proactively identify and mitigate security risks, helping them stay ahead of cyber threats and protect sensitive data. One of the key takeaways from the interview was the effectiveness of Splunk Enterprise Security in reducing incident response time. Kamgaing explained that the platform's powerful correlation and analytics capabilities allow security teams to quickly identify and prioritize threats, enabling faster incident response and minimizing potential damage. Another important aspect discussed by Kamgaing was the scalability and flexibility of Splunk Enterprise Security. He highlighted that the platform can seamlessly adapt to the evolving needs of organizations, whether they are small businesses or large enterprises. This scalability ensures that organizations can effectively manage their security operations, regardless of their size or complexity. Furthermore, Kamgaing emphasized the importance of continuous monitoring and threat intelligence in today's rapidly evolving threat landscape. He explained that Splunk Enterprise Security provides real-time visibility into security events and utilizes machine learning algorithms to detect anomalous behavior, enabling organizations to proactively identify and mitigate potential risks. In conclusion, the interview with Cyber Security Expert Maurice Kamgaing shed light on the significant benefits of implementing Splunk Enterprise Security for organizations. From reducing incident response time to providing real-time visibility and threat intelligence, Splunk Enterprise Security proves to be a valuable tool in enhancing cybersecurity measures and safeguarding sensitive data. To learn more about implementing Splunk Enterprise Security and enhancing your organization's cybersecurity, visit the official website. About Maurice Kamgaing: Maurice Kamgaing is a renowned Cyber Security Expert with extensive experience in implementing cybersecurity solutions for organizations. He has helped numerous businesses strengthen their security posture and protect their sensitive data. Kamgaing is highly knowledgeable in the field of cybersecurity and is dedicated to raising awareness about the importance of robust cybersecurity measures. Contact Apiagne, Inc. Maurice Kamgaing 704-749-2235 https://apiagne.com https://lnkd.in/eZf7zKVv

5

In case you are wondering why vulnerabilities are slow to show up in your monthly scan results...

4

Attackers are adapting to the standard practices for vulnerability management. They aren’t using CVSS severity as the criteria for compromise. Instead, they are prioritizing the most exploitable vulnerabilities, which are often those ranked as medium or low severity. If security and patching teams are too focused on critical CVEs, they can miss middle-of-the-road exploits that allow attackers to gain network access and then move laterally into business-critical systems. Following your monthly scan, analyze vulns by the ease of exploit and compare that to the CVSS score. It may shed light on gaps you didn't know existed. #cybersecurity, #vulnerabilitymanagement, #proactivesecurity

13

2 Comments

Healthcare industry groups are urging the federal government to simplify and relax the proposed cybersecurity incident reporting requirements outlined by the Cybersecurity and Infrastructure Security Agency (CISA). The rule, part of the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA), aims to enhance threat detection and response. However, organizations like the American Hospital Association (AHA) and the College of Healthcare Information Management Executives (CHIME) argue that the stringent 72-hour reporting timeline and extensive data preservation requirements place undue strain on healthcare providers. They call for harmonization of reporting standards and clearer inclusion criteria to reduce the burden on healthcare entities. #healthcare #cybersecurity #aha

5

Finally! This is the winning statement I see as a critical issue in industry today: "Compliance frameworks are merely starting points". Too often I see programs that are designed to become compliant... and then stop. True security requires continuous strides towards operational excellence across your risk managed attack surface. I recommend all practitioners of our art to study multiple sources on the topic, including this one. 👉 Practical tips here: https://gag.gl/D8cP6U #Cybersecurity #Kitecast #PrivateContent #CMMC #AISecurity #ZeroTrust #ComplianceTrends

15

Join our upcoming webcast, "Level up and adapt: Evolving your cybersecurity strategy to align with NIST CSF 2.0," where we will explore the transition from National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) 1.1 to the recently released NIST CSF 2.0. It will guide listeners on how to level up their cybersecurity strategies by aligning with the evolving framework and adapting to the new security landscape.

9

CMMC Level 2 Assessment Objective: Flaw Remediation for Controlled Unclassified Information (CUI) Data PRACTICE: Organizations must identify, report, and correct system flaws in a timely manner. ASSESSMENT: All software and firmware have potential flaws. Organizations must identify systems that are affected by announced software and firmware flaws, including potential vulnerabilities resulting from those flaws, and report this information to designated personnel with information security responsibilities. Security-relevant updates include patches, service packs, hot fixes, and antivirus signatures. Be prepared! Your assessor could ask to 🔍 EXAMINE system and information integrity policy. 🗣 INTERVIEW system or network administrators. 📝 TEST organizational processes for identifying, reporting, and correcting system flaws. (CMMC Assessment Guide: Level 2 Version 2.11, page 241) #CMMC #DoD #cybersecurity #NIST #InformationSecurity

57

A recently released HHS OIG report underscores the challenges that many organizations face in managing #cloudsecurity and risk, comprehensive visibility, and control. Read Qualys' Jason White's insights in his latest #blog here. https://lnkd.in/gShUGdSC

31

💡 Do I need to report PKI maturity level? Reporting your PKI maturity level isn’t just a checkbox! 🛠️ While not mandated by the PKI Consortium, documenting your PKI maturity level can: 📈 Highlight your current PKI status to stakeholders 🚀 Pinpoint key areas for improvement 📊 Track progress over time effectively Depending on your organization's needs, regulatory requirements, or improvement goals, reporting might be essential. Learn more about PKI Maturity Model: https://pkic.org/pkimm/ #pki #pkimm #pkic #maturity #improvement #assessment #benchmark #guidance PKI Consortium Paul van Brouwershaven Leigh Bailey

9

1 Comment

CMMC - Clean-up in Isle 7, There is a consistent mess in Isle 7. Only if you have had an actual CCA perform a Mock Assessment will an OSC/OSA (Organization Seeking Certification / OSA - Organization Seeking Assessment) know what an assessment requires. (14 policies; 8 plans, 320 Assessment Objectives, 280 Artifacts) You think you are ready for your final Assessment by a C3PAO for CMMC Compliance? You're not! The CMMC Certification Process: 1. You have gone thru your Self-Assessment. (With Expert guidance) 2. Created and entered your score into the SPRS system. 3. You did a "Readiness" Project which kicked out a Gap Analysis and a POA&M. 4. You have a central library (GRC Service? Spreadsheets?) of artifacts as evidence of compliance. All assembled over many months by different contributors. (Guaranteed there is a lack of conformity.) 5. You remediated and documented everything from the POA&M. 6. Your Policies, Procedures and Evidence documents are all ready, and in order? 7. You think you are in a ready state for an Assessor to breeze through all the evidence and certify you. You schedule a C3PAO for your Assessment. 8. The Assessor will review, find issues for remediation ie: gaps. 9. Back to remediation 10. Reschedule the final Assessment 11. Rinse repeat until you are fully compliant. WHAT IF WE COULD SHORTEN THIS PROCESS AND SAVE TIME ($) AND EFFORT? DoD estimates CMMC paperwork burden at 525 hours https://lnkd.in/g48JBDEb Insert step 7.1 - Run a Mock Assessment by a CCA using an AI Based Documentation review Service that produces a POA&M that addresses the integrity of your Artifacts and Evidence in less than a week. Insert step 7.2 Remediate from POA&M items. Insert step 7.3 Re-run the Service for final readiness status. WHY? - To confirm your readiness. - To present a more palatable set of documentation to the C3PAO and accelerate Certification. - To Save countless manhours in the journey to certification. - To help streamline steps 8, 9, 10, and 11 above. NOTE: The Service will generate an immediate ROI. Improve your chances of 1st time certification by working with Gailey Solutions. Get actionable results in days, not weeks. Call Gailey Solutions for CMMC help and guidance. NOTE: We White Label this Service to Partners in the CMMC Community to help you guide your clients thru the Process.

1

By 2026, every defense contractor must meet CMMC compliance to stay eligible for DoD contracts. It sounds daunting, but here’s the truth: CMMC isn’t just about compliance—it’s about protecting your business and the nation. What Exactly Is CMMC? The Cybersecurity Maturity Model Certification (CMMC) is a framework designed to ensure that companies working with the DoD have strong cybersecurity practices in place. It protects Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) from cyber threats, which are becoming more frequent and sophisticated. Think of it as a blueprint for protecting information. It’s not one-size-fits-all. There are LEVELS—ranging from basic practices to advanced controls, depending on the type of work you do. If your team handles Controlled Unclassified Information (CUI), CMMC isn’t optional. It’s essential. How Do You Start? 1️⃣ Learn the Levels: Understand which level of CMMC applies to your business (spoiler: not all require the same effort). 2️⃣ Know Your Current State: Where are your gaps? Perform a quick gap-assessment. 3️⃣ Get Expert Help: You don’t have to do this alone. Collaborate with professionals who’ve walked this path. This is more than a regulation. It’s an investment in the longevity of your business. What’s Stopping You? Drop your thoughts in the comments or DM me. #CMMCCompliance #CybersecurityForDoD #DefenseContractors #cmmc #cmmc2

9

Ransomware attacks like the one on #UMC Health are a devastating reminder of the urgent need for robust cybersecurity in healthcare. Having worked in the trenches as an ER nurse, I’ve witnessed firsthand how diversions and delays in patient care can impact lives. Now, as someone deeply committed to healthcare cybersecurity, my goal is to spearhead efforts to prevent such breaches, protect sensitive patient data, and ensure uninterrupted access to critical care. Protecting patients isn’t just about the clinical care they receive—it’s about safeguarding their data and the systems that support their treatment. This is the fight I’m passionate about, and it’s why advancing cybersecurity measures in healthcare is paramount. #HealthcareCybersecurity #DataProtection #DigitalHealth

12