Rahul Jalali

As methods for hacking continue to evolve, identity-first security approaches are taking the necessary guidelines to keep your information and your accounts protected. #identityfirst #security

5

Proposed change and risk can be difficult to navigate for any company in any industry. A resilient business structure can help your team navigate new initiatives and updates to technology. #techmodernization #resiliency

14

Recently UnitedHealth disclosed in SEC filings that the Change Healthcare cyberattack earlier this year had substantial financial repercussions, costing the insurance giant a staggering $870 million in the first quarter of 2024. And then on May 1st, the CEO of UnitedHealth revealed in a US Senate hearing that the cyberattack was initiated through a server entry point that lacked multifactor authentication - a fundamental cybersecurity measure. This highlights again the importance of implementing basic security practices first. Our adversaries often exploit such basic oversights, underscoring the truth that many cyber threats could be mitigated by adhering to fundamental security protocols. https://lnkd.in/eA8e7r_9

20

1 Comment

🚨 Minnesota’s new data privacy law goes into effect in 2025. Are you ready? The Minnesota Consumer Data Privacy Act (MCDPA) is a comprehensive data privacy law signed by Governor Tim Walz on May 24, 2024, and set to take effect on July 31, 2025. Jumpstart your compliance readiness in three steps. 1 REVIEW Review your data collection and sales practices, particularly regarding sensitive data. Conduct data protection assessments for certain processing activities starting January 1, 2025. 2 UPDATE Update your website's privacy and cookie policies. Ensure they are accessible and provided in clear, understandable language. 3 IMPLEMENT Implement a consent management platform (CMP) that respects universal opt-out mechanisms (UOOMs). Pay special attention to gathering consent for the sale of sensitive data, if applicable. QUESTIONS? What compliance questions do you have? Reply below to get the conversation started. #dataprivacy #privacy #minnesota

6

3 Comments

That would be 4 out of the 5 operational risks for me. I also would add the operational risk of the expanding skill and learning gaps as IT tries to keep up with technological advancements and innovative approaches.

5

October is Cybersecurity Awarness month. In a recent conference meeting I learned from Cyber experts at Trimble that transportation and logistics was the 2nd highest targeted industry. It makes sense considering some of the technical debt, archaic processes, security practices and in part lack of controls. Opportunity for leveraging cloud based systems is becoming more attractive if only for increased security and protection. Although, one could argue leveraging cloud computing also brings its own security challenges. Here are 4 things you can do now to help stay safe online: *Use strong passwords (and don’t share them) *Turn on MFA *Recognize and Report Phishing (no - not a picture of your large mouth bass 🐠) *Update your software (and other critical infrastructure) Sharing a helpful link if you don’t already have this bookmarked - Stay vigilant friends! https://lnkd.in/g63cgZvH

31

2 Comments

Are new titles like "CTO and Transformation Officer" the key to innovation? Or are we just adding complexity? In a fast-changing tech landscape, titles don’t drive success—strategic execution does. Learn why rebranding your top tech roles could set your organization up for failure, and how focusing on the right leadership balance between innovation and operations is what really matters. Read more to see why Fortium Partners' CEO Burke Autrey believes the right strategy outweighs fancy titles, and what your company can do today to succeed in a tech-driven world.

3

1 Comment

🚀 Exciting News! 🚀 I am thrilled to share that I was recently interviewed as part of the CISOs4AI collective for the latest issue of Office Automation magazine. This in-depth discussion covers our perspectives on the evolving landscape of AI and cybersecurity. 📖 You can check out the full interview on page 44 of the magazine. You have to know Italian to read it (or to translate it with you favourite AI), but the insights are universal! A big thank you to my esteemed colleagues Paolo Cannistraro, Fabrizio Cilli, Andrea Licciardi, Simone Pezzoli, and Francesco Terracciano for their invaluable contributions to this discussion. 🔗 Read the interview 👇 #CISOs4AI #Cybersecurity #ArtificialIntelligence #OfficeAutomation #Interview 

36

The best way to measure success in the realm of cybersecurity is with the absence of surprise. Having your team and company prepared and protected for when the inevitable happens is the best way to built your cybersecurity strategy. #cybersecurity #beprepared #cyberattacks

12

This is relevant to all of our Medicare Agents, Agencies and IMO's out there. Cyber Criminals now have access to 2800 organizations' data and their customers. This is alarming. Keep an eye out for the most vulnerable population, our seniors, and how this will be used against them. Please remember, you are the collector of VERY sensitive data that the cyber criminals want, do not be the one that gives it to them. #CyberSecurity #DataBreach #Medicare #Insurance

8

🚨 Blue Yonder Ransomware Attack Disrupts Grocery Store Supply Chain 🚨 A recent ransomware attack on Blue Yonder has caused major disruptions in grocery store supply chains, shedding light on critical vulnerabilities in supply chain management. Learn more about the impact and how businesses can safeguard against such threats. 🔗 Read the full article here: https://lnkd.in/d5BVeafz #Cybersecurity #Ransomware #SupplyChain #BlueYonder #BusinessResilience

5

Return to office: Magnet or a mandate? 💼 In the wake of the pandemic, the landscape of work has transformed, sparking debates on the necessity of physical presence versus the allure of flexibility. ▶️ Don't miss out on this on-demand event shaping the future of work.

4

We all think we're too savvy to fall for a scam. But the reality is, fraudsters are getting smarter and more creative in their approaches.  The latest target? American Express cardholders. 💳 Cybercriminals have launched an email phishing scam under the guise of enhancing security measures. The email prompts recipients to click on a link to set up a fake "American Express Personal Safe Key," - which falsely promises to protect them against phishing attacks. Tricky, right? So, how can you protect yourself from falling for scams like these? Here are a few tips: • Always stay cautious when clicking on links or providing personal information, even if it appears to be from a trusted source. • Contact the company directly through their official channels (such as their website or customer service line) if you receive any suspicious emails. • Be wary of urgent messages claiming that your account is at risk - scammers often use fear tactics to make you act impulsively. If there is even a hint of doubt, it's best to err on the side of caution. #ScamAwareness #FraudPrevention #Cybersecurity #PhishingScam 

8

Catch the CISO Panel on September 25 at 11am; we’ve got some of Houston’s best and most experienced CISO’s/CXO’s on the panel. Can’t thank them enough for giving their time. CISO Panel: Navigating the CISO Evolution: Embracing AI, Enhancing Cyber Resiliency, Ushering the Next Cyber Leaders, Strategic Budgeting Amidst Regulatory Changes, and Current Events Date and time: 9/25/24 11:00 AM - 11:45 AM CT Location: Track 3 - CXO (320) Speakers: Dd Budiharto, Mario Chiock, Marc Crudgington, Mary Dickerson, Alfred Lindseth, Keith Turpin Description: The CISO panel at HOU.SEC.CON 2024 will explore the rapidly evolving role of the Chief Information Security Officer in today's complex cybersecurity landscape. The discussion will cover key topics such as the integration of AI in security frameworks, strategies for enhancing cyber resiliency, and the challenges of managing cybersecurity budgets amid new SEC regulations. Panelists will also address current events impacting the industry, providing insights into how CISOs can navigate these challenges while maintaining robust security postures. Additional topics will include ushering the next-generation of cyber leaders, accomplished CISO – what’s next, and other hot topics. This session promises to be a deep dive into the critical issues shaping the future of the cybersecurity profession and its leaders. #cyber #ciso #cxo #leadership #cyersecurity #criticalinfrastructure #currenttopics #ai #cyberresilience #incidentresponse #mentorship #leadfromthefront #leadership

33

2 Comments

Sharing an even more advanced invoicing phishing scam where they include a fake email from me approving of the charge. While they didn't include (fake) banking instructions like last time, they did include an invoice and a fake W-9 with a TIN (doesn't exist in the state of NV as listed). Clearly some success rate here on their end. With the raise of LLMs, the need for better observability, detection, and human process/controls will be key. We train our AP team well and have human-in-the-loop checks, which is similar to how Leverage AI drives customer value to ensure the important stuff (exceptions/changes) are reviewed and actioned easily/quickly but without assumption a robot or code can solve. #phishing #security #ai #llm #cybersecurity #scam

8

1 Comment