Mark Collier

I often get asked “where do I start with TX-RAMP?” Companies know they need it - they’re told they do. But it’s not easy to know where to start. Here’s what you need to know 👇 1️⃣ File for your provisional certification. This will give you 18 months to get the full certification. 2️⃣ Download the TX-RAMP Security Plan Workbook. This serves as your questionnaire and list of necessary controls (117 for Level 1 certification, 223 for Level 2). 3️⃣ Build your program, one control at a time. Once your program is built, you can submit your workbook and other documents to the Texas DIR for their evaluation. No expensive, third party audits necessary! TX-RAMP Certification is a big project, even for companies that have an existing cybersecurity compliance program. There’s a reason they give you 18 months to go from provisional to full certification! Your certification lasts three years, but there are some ongoing reporting requirements to meet. You need to monitor, fix, and report vulnerabilities and breaches to the Texas DIR. More helpful info can be found in the guide below. https://lnkd.in/etitFTkY 

10

This is very interesting... seems to be a riff on an analysis technique that we described in an article titled "Beyond Timelines - Anchors in Relative Time" ten years ago in Digital Forensics Magazine. The technique has been applied to extremely high-profile and high-stakes cases since then.

11

2 Comments

🚨 **Texas Tech Health Cyberattack – Critical Systems Down, Recovery Ongoing** 🚨 Since late September, Texas Tech Health Sciences Center has faced a ransomware attack, crippling key systems like patient records and radiology services. Recovery is still in progress, affecting care across the region. This underscores the urgent need for **well-tested recovery plans** for mission-critical systems and infrastructure to ensure rapid response and minimize impact when cyber threats strike. https://lnkd.in/gUTAqqUv #Cybersecurity #TechRecovery #MissionCritical #PatientSafety #Infrastructure Cayosoft

6

How many PCI compliance requirements can you check off? Each checkmark is a step towards a more secure future. Don’t just meet the standards — exceed them. Curious to see how you stack up? Contact our team to find out. https://lnkd.in/gJ2EsiUC #OmegaTecks #Cybersecurity #KansasCity #ITSupportKansasCity #PCICompliance #Checklist

1

How many PCI compliance requirements can you check off? Each checkmark is a step towards a more secure future. Don’t just meet the standards — exceed them. Curious to see how you stack up? Contact our team to find out. https://lnkd.in/gJ2EsiUC #OmegaTecks #Cybersecurity #KansasCity #ITSupportKansasCity #PCICompliance #Checklist

3

Data-centric security is crucial in digital transformation as it focuses on protecting the most valuable asset—data—separately from network infrastructure. This approach is especially vital for industries like utilities, where data breaches can lead to significant financial loss, reputation damage, and operational disruptions. By implementing data-centric solutions like DPRM, organisations can ensure operational continuity and safeguard against sophisticated cyber threats, thereby enabling seamless digital transformation without compromising data security.

10

OneDrive Confusing You? Here’s How to Take Back Control of Your Windows Storage! When setting up a new Windows PC, OneDrive might be moving your files to the cloud without you realizing it. While cloud backup is great for some, it can create storage issues and confusion for others. Learn how to manage your known folders, decide where your files should be stored, and keep your PC organized. #OneDrive #Windows11 #CloudBackup #DataManagement #TechSolutions #Productivity https://lnkd.in/ebTv3T9Y

8

Attention all cybersecurity enthusiasts! 🚨👨‍💻 Globe Life, a prominent Texas-based insurance holding company, is currently investigating a potential data breach involving one of its web portals. 😱 The incident, discovered on June 13, 2024, highlights the critical importance of robust access permissions and user identity management. As a proud member of the HYPR team, The Identity Assurance Company, I cannot stress enough the significance of implementing phishing-resistant MFA and passkeys. These cutting-edge solutions, championed by the FIDO Alliance, provide unparalleled protection against phishing attempts and unauthorized access. 🔐 While the full extent of the breach is yet to be determined, Globe Life has taken swift action by removing external access to the affected portal and activating its incident response plan. They have also engaged external security experts to assess the scope, nature, and impact of the incident. 🔍 This event serves as a stark reminder that no organization is immune to cyber threats. It is crucial for companies to prioritize the security of their digital assets and the sensitive information of their customers. 🙌 I encourage everyone to stay informed about the latest developments in cybersecurity and to advocate for the adoption of robust security measures within their own organizations. 💪 To learn more about this developing story, check out the article by Sergiu Gatlan on Bleeping Computer: https://lnkd.in/gGRz8vD4 #CybersecurityAwareness #DataBreach #IdentityManagement #HYPR #FIDOAlliance

10

I read recently about the audacious hacker attack at the MGM Grand Casino. Hackers are becoming increasingly bold in the organizations they are pursuing. You lose essential services or your data is stolen...yes that is an inconvenience and in some cases could even be life threatening. But, you start messing with my money and it brings this to whole new level! To add insult to injury, the FTC is now probing MGM's response to the attack. Post-Quantum Cryptography could take this all to a new level, where Quantum computers have the potential to break public-key cryptography once they begin operating at a large scale – an event not anticipated to occur for several more years. Viavi Solutions Inc. announced the addition of performance testing capability for Post-Quantum Cryptography (PQC) system deployments. Introducing cryptographic protocols can create additional network performance overhead, ultimately affecting end-user quality of experience. TeraVM Security Test can emulate large-scale user endpoint traffic applications over secure access connections while measuring individual traffic flow performance. #cybersecurity #quantumcomputing #DoD

12

1 Comment

Are your employees tired of those boring cybersecurity training videos? Give them a few laughs with this fun series from the Cyber Security Entertainment Network (CSEN). #CybersecurityAwareness #SecurityVideos

1

Beware of the pitfalls with XDR vendors—here’s what you need to watch out for: - XDR is not SIEM: Don't mistake XDR for a log management system. The more logs you shove into it, the worse it performs. XDR is designed for precision, not data hoarding. Manage it wisely, or you'll lose control. - SIEM isn’t XDR: Merely slapping “Nextgen” in front of your SIEM doesn’t transform it into XDR. SIEM is inherently limited by variety and high data volume—understand its boundaries before you push them. - Ignore the hype: Claims that cloud-based XDR offers better correlation are just marketing fluff. Data isolation is crucial, regardless of where it's stored. If your data isn't loaded into the cloud, it should not impact the quality of threat detection. Vendors can upload everything necessary for detection to your on-prem instance. Remember, the main difference between on-prem and cloud is cost and ease of implementation/use. Stay sharp and don’t let vendor slick talk cloud your judgment. #XDR #SIEM

100

9 Comments

With an increase in consumer banking done online post-pandemic, and the current geopolitical situation, it’s important for the Public and Private sectors to share threat intelligence to stop bad actors and Secure the Internet.

5

AI vulns in the NVD… Cool! Like the NVD maintainers have nothing left to do with “non-AI” vulnerabilities. In the same article, the good news, however, is Congress is finally concerned about the NVD situation: “…actively exploring solutions to help NIST address this problem...” #NVD #vulnerabilitymanagement https://lnkd.in/gB-zdHHW

7

Attention OT Professionals: Secure Your Remote Privileged Access Risks with Cyolo Are you attending the upcoming OT.SEC.CON? If so, be sure to connect with my friend David Diaz, who will be there to share his expertise on how Cyolo can help you mitigate the growing challenges of remote privileged access in your OT environment. In today's dynamic OT landscape, many organizations are increasingly engaging with a diverse range of users, including third-party vendors, partners, contractors, technicians, and other external OT staff, to support essential OT functions that often involve remote privileged operations. This trend has introduced new security risks that require a proactive approach to safeguarding your critical infrastructure. Discover How Cyolo Can Secure Your Remote Privileged Access David Diaz is an OT security specialist with deep expertise in Cyolo powerful solution that can help you: 1 - Administrate identities, access and authentication 2 - Provide Authorization and Least Privileges 3 - Provide recording and auditing 4 - Streamline Compliance Connect with David Diaz at OT.SEC.CON Don't miss the opportunity to learn from David Diaz's extensive experience in securing remote privileged access in OT environments. Visit him at the Cyolo booth during the OT.SEC.CON conference, and discover how this innovative solution can help you safeguard your critical operations in the face of evolving remote access challenges. See you at OT.SEC.CON!

9

1 Comment

320 is an important number. Why? Say your team spends just 5 minutes and 20 seconds every day going through the Level 2 CMMC Assessment Guide. You will read the whole thing 3 times in 3 months. I’ve written about this before: https://lnkd.in/dhyffJcX. And while you’re reading, take a couple of days and apply your knowledge to a tabletop exercise. Go through every single artifact or piece of evidence. Review how your team will answer questions assessors may have. That way, everybody on the team is ready. Remember, as assessors, we are looking for real muscle memory. It’s not enough to check the box or have a policy sitting in a filing cabinet somewhere. You need to demonstrate that you have been fulfilling all 320 CMMC requirements, as an integrated part of your operations. As always, we here at MNS Group are happy to answer any questions. So get reading! #DoD #CMMC #contractors #cybersecurity #assessment

50