James Trethaway

📢 Check Point Again a Frost Radar XDR Leader in 2024 In this report, Check Point was cited as a Growth and Innovation Leader in Extended Detection and Response (XDR). Check Point XDR/XPR Key Highlights: • Collaborative Threat Prevention • AI Copilot • Consolidated Threat Intelligence and Analytics • Infinity Playblocks Automation • Centralized IOC Management • Threat Intelligence & Event Correlation Download your free copy of the Frost Radar™ XDR Report to learn more about why Check Point is a Growth and Innovation leader in Extended Detection and Response 👉 https://lnkd.in/gecJVKrG Yael Cinamon

4

Heading out to Las Vegas next week for SentinelOne's OneCon conference? Don’t miss the opportunity to hear from GuidePoint Security Mid Atlantic's very own Matt Casey, MS, CISSP as he dives into the topic of Fortifying Cyber Resilience through the integration of SentinelOne and Expel MDR. Matt’s expertise will shed light on enhancing your organization’s cyber resilience strategy in today’s threat landscape. If you are interested in registering for this conference please feel free to message me directly! #OneCon2024 #Cybersecurity #SentinelOne #Expel #GuidePointSecurity

57

Cybersecurity Snapshot: Tenable Report Warns About Toxic Cloud Exposures, as PwC Study Urges C-Suite Collaboration for Stronger Cyber Resilience http://ow.ly/pWqB105MsTU

11

looking forward to this Conference and having great conversations about Cybersecurity and Compliance.

6

With the latest and greatest #ransomware infection impacting CDK Global and its huge dealer network, I feel like it's a good time to re-share this piece I wrote from 5 years ago. I could have written this today...seems that nothing is changing on this front. #CISO #infosec #CEO #CIO

7

2 Comments

Do you need to be CMMC Level 2 compliant, but are having trouble translating the cybersecurity gobbligook into real actions that your IT team can take? We are having a live webinar on June 27, 2024 at 2pm EST to demonstrate the Kieri Compliance Documentation. This is a full-featured program for CMMC Level 2 and NIST SP 800-171 compliance which includes policies, procedures, system security plan, user agreements, record-keeping databases, account request form, self-assessment form, and other vital resources needed to be compliant. Monthly Q&As and over 50 hours of video training included. Kieri Solutions uses this program to efficiently manage our CMMC Level 2 compliance. We passed a DoD assessment for CMMC Level 2 and NIST SP 800-171 compliance with a perfect 110 score using this governance program. We have over a hundred clients using the KCD to manage their compliance and prepare for CMMC Level 2 assessment themselves. 𝐃𝐨𝐞𝐬 𝐭𝐡𝐢𝐬 𝐬𝐨𝐮𝐧𝐝 𝐥𝐢𝐤𝐞 𝐲𝐨𝐮? 🔸 You are frustrated with your policies and procedures… 🔸 You don’t know how to perform some CMMC requirements, or how to answer assessment objectives like “define non-essential functions”… 🔸 Your documentation is out of date… 🔸 You bought compliance templates elsewhere and they are too complex to get through… 🔸 You are paying a huge monthly fee to a GRC website and you’re still stuck filling in blanks… 🔸 You don’t have a record keeping system that makes it easy to gather the info you need for assessment… 🔸 Your users are asking how to mark CUI and you don’t know how to help them… If so, please join us for this webinar. We will be showing the program that we use to reach and maintain a "110" score. https://lnkd.in/eRjbVFrD Kieri Solutions - Authorized C3PAO

38

6 Comments

Are you looking for a strategy to protect your organization from attackers like Midnight Blizzard? Here are two steps you can follow.

2

The key to winning against #CyberThreats is Preparation. Discover how PacketWatch and Expedient join forces to build a strong defense and rapid incident response plan. If you're serious about mitigating the risks of ransomware, insider threats, and more, don't miss this joint webinar. Tune in tomorrow, to learn from industry experts Jeff Lennon and AJ Kuftic. 👉 https://lnkd.in/eYfbeqYe #CyberDefense #IncidentResponse #RansomwareDefense #PacketWatch #Expedient #Webinar #DRaaS #CyberResiliency #BusinessContinuity #IRPlanning #DFIR #IncidentResponse #Partnership

14

Data Security is not another tool in the SOC. The need to approach Data Protection from a platform perspective is key to deliver operational resiliency. New innovation available for all clients.

48

New study finds uptick in cybersecurity disclosers due to new SEC requirements. Still, few detail the material impact of these events. More work and clarity are needed. https://lnkd.in/gQ2paXVs #cybersecurity #infosec #SEC #disclosure

7

Thoughts on Just-In-Time procedures and NIST SP 800-171 / #CMMC compliance... At Kieri Solutions - Authorized C3PAO , we figured out that people follow procedures best when they 𝘢𝘳𝘦𝘯'𝘵 𝘱𝘳𝘰𝘤𝘦𝘥𝘶𝘳𝘦𝘴. ??? Let me explain. You're onboarding a new user. To be compliant with #CMMC, your onboarding team needs to go through a convoluted process involving getting details about the new user, verifying NDA, background checks, training, requesting permissions, justifying permissions, reviewing permissions, authorizing permissions, creating accounts, creating records of the accounts, creating records of the permissions for the accounts, assigning expiration dates for each account, setting up a laptop, authorizing the laptop...!!! It goes on and on. If your strategy is to tell your HR and IT team that they need to perfectly follow a 70 step process on page 19 of ye old 𝐈𝐓_𝐏𝐫𝐨𝐜𝐞𝐝𝐮𝐫𝐞𝐬_𝐌𝐚𝐧𝐮𝐚𝐥, 𝘺𝘰𝘶 𝘮𝘪𝘨𝘩𝘵 𝘢𝘴 𝘸𝘦𝘭𝘭 𝘱𝘢𝘤𝘬 𝘶𝘱 𝘺𝘰𝘶𝘳 𝘣𝘢𝘨𝘴 𝘳𝘪𝘨𝘩𝘵 𝘯𝘰𝘸. The error rate will be upwards of 80%, unless you nag and threaten 😡 everyone constantly, in which case you might get down to an error rate of 30% (and your team will quit). Instead, if you use a combination of a well-designed Access Request Form and an Account Management database, all your team needs to do is remember to start with the correct form. 📝 The form should have fields and just-in-time instructions for each step of the process between HR and your IT Department. All your team needs to do is fill out each field in the form and they will complete the background screening, training, permissions, justifications, etc. naturally without nagging. Then, a well designed Account Management database helps your team manage the accounts long-term by including checks ◻️ for commonly-forgotten steps (like user agreements), next-review dates, annual training refresher dates, mapping the user to their supervisor, granular "should-be" permissions for both digital systems and facilities, and historic authorization notes. The last step for perfect procedures is a regular review to look for and fix errors. But again, if you want to be successful, don't expect your team to remember your dusty policies and procedures book in the corner. Instead, use a scheduled task, a ticket, or a checklist with just-in-time instructions to make sure that the review gets done. Pro-tip: next-review-dates are an excellent way to spread this task across time, instead of trying to do it all in one lump. Are your compliance policies and processes working for you, or against you? There is a better way. Use thoughtful design in your compliance system to reduce errors and streamline functionality. Screenshot below is from the Kieri Compliance Documentation's Account Management Database, showing some of the magic of our full-featured 800-171 / CMMC Level 2 compliance program. I'll put the link in comments, for anyone that is interested.

54

5 Comments

Its been a few weeks since the Gartner IAM conference and with the Holidays upon us I have had a chance to reflect on much of what was shared. (Btw slight segue here: I think thats masterful scheduling since many of the conferences come and go in the midst of the work year and there is very little time to really think about or analyze the boatloads of interesting nuggets and data points thrown at you! ) The gorilla in the room this year was predictably #AI and even though there were differing points of view, I think the general consensus, and one I wholeheartedly share, was that it is here to stay and it is up to us to make sure we leverage its power (when it comes to automation) while ensuring that security controls are also beefed up to support the ever expanding threat options it gives bad actors. Its a bit like nuclear energy, you can use it for clean energy generation as well as prepare for its use in weapons of mass destruction. And while all the discussion around AI, managing human and non human IDs etc. was interesting and relevant, I also want to send a big shout out to Rahaf Harfoush for talking about wellness in a digital world. Thank you for pointing out that the tools we use and the work ethic we promote within our teams is totally designed to sacrifice creative thinking and uninterrupted productivity at the altar of sub second responsiveness! Not to put too fine a point on it, why do you think its taken me this long to put this post out? #HappyHolidays #gartnerIAM #quiettime

17

Outdated risk management frameworks like #3LOD are under scrutiny. Brian Betterton, Vice President, IA at GuidePoint Security, is quoted in Tech News World commenting on how 3LOD splits risk across functions but lacks the continuous focus needed for modern business risk. #CyberRisk is enterprise business risk and thus requires a holistic risk management approach. Learn more: https://okt.to/PKSYhU ECT News Network #RiskManagement #CyberResilience

4

💡 Do I need to report PKI maturity level? Reporting your PKI maturity level isn’t just a checkbox! 🛠️ While not mandated by the PKI Consortium, documenting your PKI maturity level can: 📈 Highlight your current PKI status to stakeholders 🚀 Pinpoint key areas for improvement 📊 Track progress over time effectively Depending on your organization's needs, regulatory requirements, or improvement goals, reporting might be essential. Learn more about PKI Maturity Model: https://pkic.org/pkimm/ #pki #pkimm #pkic #maturity #improvement #assessment #benchmark #guidance PKI Consortium Paul van Brouwershaven Leigh Bailey

9

1 Comment

The new NERC CIP-015 guidance on INSM (Internal Network Security Monitoring) is coming. We have a lot of very smart folks here at Dragos, Inc. with backgrounds in the industry that are preparing us for the rollout. Here's some guidance on how to prepare. #criticalinfrastructure #nerccip #insm

10