Andy Lancaster’s Post

Here are some examples of bad cybersecurity goals  👎 1️⃣Get a SOC 2 in 2 weeks. (Functionally impossible.)  2️⃣ Get better at cybersecurity. (What does “better” mean?)  3️⃣ Implement password rotation. (This was an ok control 15 years ago!) I am a fan of the SMART framework for setting goals. Good goals are: Specific, Measurable, Accountable, Realistic, and Timely. So what does a good cybersecurity goal look like? For a growing company, it might be: IT Director David Underhill will lead Fake Co. to qualify for cyber insurance by Q3 2024. Let’s break it down. Specific: Qualifying for cyber insurance is a singular, specific objective. Measurable: This is a yes/no measurable. Do you, or do you not, qualify for cyber insurance? Accountable: This is assigned to David Underhill. He is empowered to achieve the goal, and knows other people expect him to succeed! Realistic: Almost any organization can implement the necessary steps needed to qualify for cyber insurance within 9 months. Timely: A deadline is set, and it is currently timely to the organization’s needs (the board has decided it can no longer accept certain cybersecurity risks). Read more about cybersecurity goal setting in this month's issue of Tales from the Click! https://lnkd.in/e8k_4dtw #fciso #cybersecurity

I’m a big proponent of sports analogies, but I’ve yet to consider the similarities between golf and cyber (kudos to Jeff Shiner). While there’s little variance in the types of clubs you’d find in most golfers’ bags, there’s a cohesive nature to the set—every club has a distinct property and an opportune time to show value. This should be no different than your cyber portfolio, yet we still find environments that have seven eight-irons, three drivers, and no putter. That’s probably not the best strategy for breaking par. So, what gives? Understanding where your capabilities show value and exploring the art of the possible for each of them is something we’ve seen organizations struggle with for years, especially given the competitive vendor landscape where everyone is adding additional functionality to keep pace. Combine this with the controls in the core enterprise stack, and it’s no surprise that we often see an inefficient and nonsensical collection of “clubs.” What’s an appropriate starting point? Very simply, it’s about understanding where each tool has the chance to reduce risk relative to business impact and how it can be further optimized.

The rise of ransomware has transformed it into a well-organized criminal operation, with a notable increase in attacks worldwide in 2023, becoming more complex over time. The increasing trend of double extortion, where criminals not only encrypt but also steal data, presents serious challenges for companies, leading to potential financial losses and operational disruptions. In this challenging landscape, it’s essential to adopt proactive cybersecurity measures. Instead of depending on reactive solutions, organizations should focus on implementing advanced preventive strategies such as automated patch management and real-time endpoint protection, along with employee training, to significantly mitigate the risk of ransomware attacks.

When it comes to sports and technology, there may not seem to be an obvious connection between the intense physical demands of the Ironman Triathlon and the complex world of cybersecurity. In this article, we will explore this relationship and discover the valuable lessons that can be learned from both. #cybersecurity https://lnkd.in/g-ws7374

Netenrich, Inc. CEO Raju Chekuri shares valuable insights on the expanding enterprise attack surface and the need to modernize SecOps strategies. Learn how our Adaptive MDR solution, in partnership with Google Cloud Security, enhances security efficacy and eliminates blind spots. #AdaptiveMDR #SecOps #Cybersecurity #GoogleCloud https://gag.gl/wdQgQ1

The recent F1 race in Melbourne was filled with drama and a new champion with Ferrari. To win races their teams must master precision, adaptability, and speed. IT pros can harness these principles to elevate patch management strategies. Discover how the fast-paced tactics of F1 racing can improve your endpoint management. From strategic adaptability to performance under pressure, learn to navigate the IT landscape with the agility of an F1 team. Ready to speed up your patching game? #Cybersecurity #PatchManagement https://bit.ly/49cfVli

Netenrich, Inc. CEO Raju Chekuri shares valuable insights on the expanding enterprise attack surface and the need to modernize SecOps strategies. Learn how our Adaptive MDR solution, in partnership with Google Cloud Security, enhances security efficacy and eliminates blind spots. #AdaptiveMDR #SecOps #Cybersecurity #GoogleCloud https://gag.gl/wdQgQ1

Netenrich, Inc. CEO Raju Chekuri shares valuable insights on the expanding enterprise attack surface and the need to modernize SecOps strategies. Learn how our Adaptive MDR solution, in partnership with Google Cloud Security, enhances security efficacy and eliminates blind spots. #AdaptiveMDR #SecOps #Cybersecurity #GoogleCloud https://gag.gl/wdQgQ1

Livall “smart” helmet flaw exposes location tracking and privacy risks Read more in my article on the Bitdefender blog: https://lnkd.in/gDvgPe2x #cybersecurity #vulnerability #privacy #locationtracking

Netenrich, Inc. CEO Raju Chekuri shares valuable insights on the expanding enterprise attack surface and the need to modernize SecOps strategies. Learn how our Adaptive MDR solution, in partnership with Google Cloud Security, enhances security efficacy and eliminates blind spots. #AdaptiveMDR #SecOps #Cybersecurity #GoogleCloud https://gag.gl/wdQgQ1