Ryan Powell

This speaks volumes to the importance of having a Board members who are versed in cybersecurity and a correctly constructed Board. Take note, and get ready, there will more callouts.

18

1 Comment

Very interesting…. Interesting that it was Plymouth County Retirement Association (Massachusetts) that initially filed the lawsuit and also that the focus of the class action seems to focus not only on the false claims of secure software update practices, but also that CrowdStrike mislead investors in a situation that enabled their stock to trade artificially high, especially taking into account the risks in how the platform was managed. In other related news, Delta CEO claims the incident cost Delta $500 million forcing them to have no choice but to seek damages. What will be the net impact of this incident on CrowdStrike? #crowdstrike #lawsuit #material #financialimpact

16

2 Comments

Now more than ever, #CyberInsurance is a must for every organization. See what it can do for you, what customized options are available and what value it brings to the table. #Cybersecurity https://dy.si/1TW1sZ2

4

The recent CDK ransomware attack that impacted car dealerships nationwide highlights a growing concern for businesses: cybersecurity threats are no longer rare events but daily challenges. As a CISO, ensuring that executives and board members are not only aware of these risks but also equipped to address them is crucial. Clear, concise communication that ties cybersecurity efforts to business goals is essential for fostering a secure organizational environment. Here are a couple of the questions every CISO should consider to bridge the communication gap with the board and secure essential support: How do I justify my cybersecurity budget? Demonstrate the return on investment by showcasing how safeguarding critical data and infrastructure protects the organization's financial health. How do I celebrate security achievements? Highlighting and celebrating security successes boosts morale, fosters a culture of awareness, and reassures stakeholders of the organization's commitment to data protection. Remember, communication isn't just about presenting problems—it's about showcasing achievements and aligning cybersecurity efforts with the organization's strategic objectives. More on these key questions here: https://lnkd.in/e8Z4bQKQ #Communication #CISOsConnect #Cybersecurity #Ransomware

14

1 Comment

I encourage my network to watch this great conversation between Mike Battistella and Richard Pharro on Cybersecurity Beyond Compliance Mike dispels the misconception that passing a compliance audit guarantees long-term security. Richard and Mike explore how continuous improvement is vital for cybersecurity and why organizations must go beyond compliance to protect their digital assets. Mike also highlights the crucial role of leadership in embedding cybersecurity into business strategy, ensuring it’s seen as essential for survival, not just a technical necessity. #cybersecurity #cybersecurityrisk #nistcybersecurityframework

7

Charlotte IT and Security leaders! If securing OT is your responsibility, you dont want to miss this session. Todd Wiedman and I will be facilitating a great boardroom discussion where everyone can share their pain points and approaches for improving OT security. We hope you will join us! #evanta #otsecurity #cybersecurity #ciso

44

1 Comment

Seeking CMMC compliance? Confused about the process? Check out Aspire Cyber’s CMMC Level 1 Mock Assessment video for an informative and funny webinar on this very subject!

3

3 Comments

The insurance and re-insurance industry needs a reboot! If they would get their act together and start doing better predictive metrics, they could reduce the chaotic variability in their profits/losses, properly price premiums, and provide clear guidance to clients on minimum security requirements so more policies could be sold. However, the insurance industry remains resistant in understanding the traditional actuary models for natural disasters, fires, and accidents do NOT apply to cybersecurity. Let it go. You need different models, which means different analytical talent and leadership to deliver those. The first insurance companies to move in this direction will have a significant competitive advantage. I have been patiently waiting for Insurance to come to this conclusion for 15 years and counting! #cyberinsurance Jason Rebholz #cybersecurity #metrics

8

3 Comments

🏥 Healthcare organizations, let's go over identity management and device security as a mitigation strategy. (The second in our series!) This is a dive into CISA’s Mitigation Guide: Healthcare and Public Health (HPH) Sector with real-life strategies. ⚕️ How do you protect your network as CISA recommends now? Without sacrificing patient health? 🔎 You start with the discovery and classification of every asset, identifying vulnerabilities and threats, profiling behavior & communications, and then securing every device. We call this the *See, Know, Secure* approach to “whole hospital” security. https://bit.ly/3Zc3STW #cybersecurity #DigitalHealth #IoT

9

How can healthcare organizations mitigate security risks? Availity’s CISO Mike Green offers tips that will strengthen security protocols and proactively identify vulnerabilities. Access the answers on the Availity blog: https://okt.to/NWLrVs

33

1 Comment

Are you looking to automate compliance to make it go away? As we continue to develop and extend the de.iterate assurance program we of course introduce more automation of evidence creation, collection, and decision making. Not to replace human interaction but to complement it. Some of the reasons why blindly automating compliance, and why relying on it is risky are covered in our recent blog post. #compliance #compliancenerds #ISO27001 #ISO27701 #ISO42001 #cybersecurity #risk #riskmanagement de.iterate #privacy

21

1 Comment

Cyber-insurance can play a big role in stopping ransomware — if we let it, says this month’s guest columnists Monica Shokrai and Kimberly Goody. Cyber-insurers can help reduce attackers’ financial gains from incidents, first and most importantly by requiring a minimum level of security standards to strengthen an organization’s defenses before approving an insurance policy.

21

Security teams need answers to tough cloud data security questions and to close exposures faster. That’s why we’re introducing data security posture management (DSPM) and AI security posture management (AI-SPM) capabilities for Tenable Cloud Security. Key benefits: ✔️ Gain complete visibility of your cloud data ✔️ Proactively identify cloud data exposure ✔️ Reduce the likelihood of a data breach 🔗 Learn more: http://ow.ly/q424105O2IL

8

😖😩😤 Feel familiar? We're here to help clear away the fear, uncertainty & doubt you may experience when attempting cyber risk quantification with our IRIS Risk Retina series. Sign up for new report notifications and exclusive insights & analysis! Get rid of your FUD: https://lnkd.in/gijK6QTP #newsletter #cybersecurity #cyberrisk #riskquantification #whitepaper #research #CISO #CMO #security #marketing #datascience #business #management

1

Did you know that Cybersecurity and Infrastructure Security Agency recently released easy to use cybersecurity resources? Watch James Maxwell's (Vice President and Chief Information Security Officer) three-minute video overview with helpful tips and an introduction! 

4

Is CMMC giving you headaches? See how CyberProfen offers relief. Watch the full video at: https://lnkd.in/e5ejkMJF #Compliance #NIST #CMMC

7