Ralph Johnson, CISSP, CISM, CIPP, HISP

With an increase in consumer banking done online post-pandemic, and the current geopolitical situation, it’s important for the Public and Private sectors to share threat intelligence to stop bad actors and Secure the Internet.

5

CISA just released a FREE Anonymized Treat Response Guide for K-12 Schools. It outlines a structured approach for schools to address anonymous threats, especially those delivered via social media. Key aspects include: 1. Early Detection and Reporting: Schools should build awareness among students, staff, and families to report threats early rather than reposting them. Encouraging "Report, Don’t Repost" helps limit the spread of alarming but often unsubstantiated threats. 2. Partnership Development: Schools should establish partnerships with law enforcement, mental health professionals, and other stakeholders to manage threats effectively. Multidisciplinary threat assessment teams are recommended for evaluating and responding to threats. 3. First Response Actions: Every threat should be treated as credible initially. Schools should take pre-planned steps to ensure safety, including low-visibility law enforcement presence, before escalating responses like lockdowns or school closures as needed. 4. Mental Health Resources: Anonymous threats often signal underlying student issues. Mental health professionals play a key role in addressing these concerns, helping mitigate threats, and reducing trauma. 5. Communication and Preparedness: Clear communication with the school community is vital to managing the situation and minimizing panic. Schools should also engage in regular drills and establish protocols to be prepared for future threats. These strategies aim to ensure a balanced, informed response that prioritizes student safety while minimizing disruption and trauma​.

8

Full video: https://lnkd.in/ghSJgDgV From Barista to Cybersecurity: Inspiring Career Switches Discover how professionals from diverse backgrounds, like baristas and restaurant managers, are successfully transitioning into cybersecurity roles. This video highlights unique journeys and the skills that make them thrive in this exciting field! #CybersecurityCareers #CareerTransition #InspiringJourneys #TechCareers #DiverseBackgrounds #CloudEngineering #PenTesting #CareerGrowth #JobSwitch #CyberSuccess

1

Check out this podcast interview with me just after my TribalNet keynote in Vegas recently. I was asked a random question at the end about the first concert I attended that you might find interesting (and it's not just what's listed in the podcast description). #infosec #CISO #CIO #businessleaders #cybersecurity #podcast #keynotespeaker #backtobasics #rockconcerts #ISAC

5

Last week the White House released Version 2 of the National Cybersecurity Strategy Implementation Plan (NCSIP). The Plan, which outlines actions the federal government is taking to improve our national cybersecurity posture, includes five pillars. Find out what the five pillars and what this means for MSPs in this article - https://lnkd.in/e7awvpRu #MSPnews #technews #cybersecurity

2

Great article by Dark Reading on the current state of the NVD Backlog and how to track daily progress using the Fortress Information Security NVD Analysis dashboard.

7

In this article for the IACP's Police Chief Magazine, PenLink's Johnmichael O'Hare and our own Trey Amick talk about how digital forensics and open-source intelligence (#OSINT) are playing crucial roles in modernizing police investigations: https://ow.ly/UH9O50SUg9q #DFIR

29

Still time to register for our FREE Webinar "Cybersecurity for the Small Business". Thur Apr 18th 1pm EST / 11am MST / 10am PST Register Below: https://lnkd.in/gtZ2A9ep We have all seen news stories about Cyber Attacks on large businesses, Government Municipalities, and other organizations but do you know that small businesses are becoming a greater target for attacks? Most States require via privacy and other cyber laws that businesses of all sizes take steps to protect their employee and customer privacy data. This FREE webinar is an introduction to Cyber Risk Management for Small Businesses to include current risks, simple mitigations strategies and low to no cost fixes to protect data. Perfect information for "at home" businesses to those with one or more physical locations. Feel free to share via social media to anyone you feel might benefit from this information. Melanie Clay, CPCU Helen Thomas The Smalls Colorado Vegas Chamber Colorado Springs Chamber & EDC

18

5 Comments

Are you following along with our Achilles series? To register: https://lnkd.in/gUP2FSfS In part 2 I will discuss what failures were found and how they could be avoided or detected through the use of basic security controls, leveraging the CIS Controls. Please join me in the discussion May 8th to see what could have been done. To register: https://lnkd.in/gUP2FSfS From there you can find the first installment if you missed it previously. Cheers.

15

Great article Thomas Graham, PhD, CISSP, MBA! The widespread adoption of CMMC across all departments in the Executive Branch (Agriculture, Commerce, Defense, Education, Energy, Health and Human Services, Homeland Security, Housing and Urban Development, Interior, Labor, State, Transportation, Treasury, and Veterans Affairs) cannot come soon enough. Our U.S. sectoral approach has led to redundancy, duplication, and contradiction. Too much effort is being wasted within the Executive Branch, and it's translating into business in all sectors playing compliance whack-a-mole! Go CMMC!

2

1 Comment

Collaboration between IT staff & management is one of the most important parts of building and maintaining a strong #cybersecurity posture, but LMG Security often discovers gaps in this area when working with clients. Read Madison Iler's blog for advice: https://lnkd.in/gUS7k4K4

12

1 Comment

I went on a theme of parsing and protocols this week -- talking about the consequences when a design is under-specified and even when it specifically reminds implementers to take certain actions. John Kinsella brought up a Safe C++ proposal, which gave us a chance to talk about C++ vs. Rust, learning curves, and how horrible C++ template errors can be to debug. We also talked about an #appsec angle for WordPress that involves an insecure plugin (not at all surprising) and an insincere security effort (both surprising and worrying). Show notes at https://lnkd.in/gHd-Xekb https://lnkd.in/gJTDK5EB

6

Nov. 19 at #ISCEast: Build your test-day confidence and prepare to earn the #SecurityIndustry #Cybersecurity #Certification with SIA's SICC Review Course! Don't miss this helpful course designed to help you prep for the certification exam. Learn more and sign up at the link in the comments! ISC Security Events

5

1 Comment