CyberGuard Advantage, LLC’s Post

The PCI Security Standards Council has just released an information supplement on PCI DSS Scoping and Segmentation Guidance for Modern Network Architectures. This guide addresses how network segmentation and scoping can effectively be applied in today’s complex and evolving environments, ensuring that sensitive cardholder data is protected. I'm proud to have been one of the SIG members contributing to this important work. This document provides practical insights that will be invaluable for any organization striving to meet PCI DSS requirements while securing their networks in an increasingly digital world. #PCIDSS #Cybersecurity #NetworkSecurity #Compliance #PCI #DataProtection #ModernArchitectures

The recording of the webinar on modernizing privileged access to infrastructure is now published: https://lnkd.in/dTy3z_rx #pam #cybersecurity #iam

It's great to see so many peers in the cybersecurity community continue to help advance the NCCoE's Zero Trust efforts. Virtru’s data-centric security platform is designed to align with the NCCoE’s Zero Trust guidelines, offering persistent protection and dynamic, granular access controls. By integrating seamlessly with platforms like Google Workspace and Microsoft Outlook, Virtru ensures that Zero Trust principles are applied across everyday workflows. This allows organizations to implement and maintain robust Zero Trust strategies, enhancing data security, governance, and compliance with evolving cybersecurity standards while supporting secure collaboration across internal and external networks. Cassandra Zimmerman, Jayaprakash Ayyappan, Will Ackerly, Dana Morris, Shannon Vaughn #datacentricsecurity #zerotrust | Virtru, National Institute of Standards and Technology (NIST)

How resilient is your organization to cyberattacks🔓? NetApp releases their new Cyber Vault Reference Architecture, which uses snapshot recovery with logical air gapping to help facilitate faster recovery from cyberattacks. Krista Macomber provides insights into how Cyber Vault works to decrease downtime. Check it out: https://hubs.ly/Q02xhGHl0

"Take your CloudNative network security to the next level! In my latest article, I dive into the world of Zero Trust Networks, mutual TLS (mTLS), and SPIFFE, exploring how these innovative technologies can: ➡ Enhance security and reduce risk ➡ Simplify network management and complexity ➡ Protect your organization from evolving threats Whether you're a security expert or looking to expand your knowledge, this article has got you covered! Read now and discover the power of Zero Trust, mTLS, and SPIFFE in strengthening your network's defenses! #Kubernetes #ZeroTrust #mTLS #SPIFFE #Cybersecurity #NetworkSecurity #InfoSec" https://lnkd.in/g8mKsYMk

A unified platform simplifies ZTNA implementation ZTNA and microsegmantation are two key products and a starting point for organizations to transition to a zero-trust architecture, Petrillo noted. “Depending on their security priority, a business normally starts a transformation with one or the other.” However, deploying ZTNA and using next-generation firewall (NGFX) to segment their internal networks and workloads is a complex and inefficient approach. Organizations need a unified ZTNA and and microsegmentation solution, he added. “With a unified zero-trust platform, businesses can start with either solution but over time they get benefits from a single agent, console and policy. This reduces the complexity of managing disparate solutions and accelerates the time it takes to get to a zero-trust architecture,” Petrillo said.

In the modern enterprise, data security is often discussed using a complex lexicon of acronyms—DLP, DDR, DSPM, and many others. While these acronyms represent critical frameworks, architectures, and tools for protecting sensitive information, they can also overwhelm those trying to piece together an effective security strategy. This article aims to demystify some of the most important acronyms

Making PCI Compliance easier with network visibility. Gigamon Deep Observability Pipeline can make network logs application aware. That visibility and awareness can help aid with compliance and security frameworks. PCI is one such framework. From a networking perspective PCI is good digital hygiene. Some examples are: no unencrypted traffic, no expired or self signed certs, and no communication between protected and unprotected networks. I have put together a blog and white paper on how Advanced Metadata Intelligence can be leveraged to help achieve compliance and then aid in the ongoing verification of the compliant state. The paper is designed in three sections. The first section is for Executive staff, the second section is for the architect to understand the solution and lastly the appendix has tactical practitioners guide on what to turn on so Gigamon can aid in that specific requirement. All 12 requirements are covered for the sake of completeness even if Gigamon has no visibility or control in that area. Please feel free to reach out to me personally if you have questions! Blog: https://lnkd.in/gftGJfnF Paper: https://lnkd.in/g-jDzpqx

It is exciting to see the evolution of 5G Core network security, particularly the advancements in SBA security since Release 16. This blog highlights the crucial role of SCP in segmenting security layers and the industry's push for automated certificate management. It's evident that standardization efforts are crucial for ensuring robust security in 5G deployments. I am looking forward to seeing how this collaborative effort continues to enhance SBA security for future challenges. As a reader, I find this narrative not only informative but also reflective of the concerted efforts aimed at fortifying 5G infrastructure against emerging threats. It reinforces the importance of collaboration and innovation in safeguarding the integrity and reliability of our digital ecosystems. #5Gsecurity #Networksecurity #Standardization #TeamEricsson

SBOMs are undergoing a makeover 💄. OASIS Open has launched the OSIM standard, which aims to build a unified #SBOM model: https://lnkd.in/e4ZYk2gW According to the co-chair of OSIM, Isaac Hepworth: "By establishing standardized information models, we can enhance transparency, interoperability, and resilience in end-to-end operations — ultimately aiding cyber-risk management and protecting critical infrastructure." Allan Friedman, PhD of the Cybersecurity and Infrastructure Security Agency (CISA), shared hopeful sentiment towards the initiative: "This work by OASIS will facilitate automation for easier and cheaper implementation and tooling and help provide a unifying supply chain framework and raise the level of collaboration across industries." However, some are questioning OSIM's real-world capabilities, such as Neatsun Ziv, co-founder and CEO of OX Security: "In the end, it will not reduce manual work, or improve how organizations react. It will just create another standard for reporting." To get the 411 on all things SBOM in 2024, watch this on demand webinar: https://lnkd.in/eKdKhkvr #SoftwareSupplyChainSecurity #Cybersecurity