Noëmie HONORE (She/Her)

A few weeks ago, Emmanouil Perselis provided valuable insights into the application security approach at CM-MC, sparking a lively discussion at the Belgian Cyber Security Coalition Focus Group on application security. He discussed various aspects, including different application development stacks, IDE plugins for early SCA, SAST, and container scanning, a mix of internal and external pen testing, Copilot development support, and triage based on exploitation prioritization. In breakout sessions, we addressed topics such as legacy systems, initial onboarding, prioritization, and triage. We delved into the 'No Triage' principle by applying the latest stable versions of container platforms. Additionally, we tackled the vulnerabilities backlog by emphasizing the ownership of product owners and risk sign-off by the business. It's always fascinating to bring together application security experts from a wide range of organizations—academia, startups, and medium to large enterprises—for valuable open discussions on this often underemphasized area of application security. Kudos for Emmanouil Perselis and thanks for hosting the session to Taco Mulder and Sebastien Deleersnyder #CM #MC #cybersecurity #applicationsecurity

25

Still have questions about the NIS2 Directive? Check out this guide from our partners at Approach Cyber to learn more about the new legislation and steps you can take to remain compliant ✅

3

1 Comment

Yesterday, cybersecurity professionals gathered in Brussels for the Twelfth EU MITRE ATT&CK® Community Workshop. Hosted by the Centre for Cybersecurity Belgium and supported by MITRE Engenuity, the event featured key insights on AI, risk assessment, and collaborative security strategies. nFuse's managing partner, Rutger Saelmans, shared his perspectives on integrating advanced technologies and practical security measures. Read our blog (link in comments) for detailed highlights and key takeaways from this significant event. 🔐🌐 🚀 Want to know how nFuse implements the MITRE framework? Come visit us at Cybersec Europe 2024!!! #Cybersecurity #MITREATTACK #Infosec

6

1 Comment

Did you know cybersecurity and a chess game have something in common? Ivana Butorac, EU Cyber Compliance manager at Sopra Steria, explains: “It's all about strategy and knowing how to checkmate the other side. If you know your strategy well, you will move the right chess piece.” So: keep your calm and build strength through serenity. Curious to know what else she’s got to say? Check out the video. #cybersecurity #cyberseceurope #SopraSteriaBenelux #jaarbeurs #itsecurity

36

1 Comment

Did you know cybersecurity and a chess game have something in common? Ivana Butorac, EU Cyber Compliance manager at Sopra Steria, explains: “It's all about strategy and knowing how to checkmate the other side. If you know your strategy well, you will move the right chess piece.” So: keep your calm and build strength through serenity. Curious to know what else she’s got to say? Check out the video. #cybersecurity #cyberseceurope #SopraSteriaBenelux #jaarbeurs #itsecurity

110

4 Comments

🔐 Ready to take control of your cybersecurity? With over 90% of attacks exploiting user access, mastering user access is your ticket to #NIS2 compliance! Join us on June 26th at 4:00 PM CET for a dynamic session with our expert Bart Van Ingelghem and Elimity. We will tackle: ✅ NIS2: Key Changes and Implications ✅ NIS2 & IAM: Requirements, Governance, and Reporting ✅ Case Study: Achieving NIS2 Compliance with Limited Resources ✅ Solution: Lightweight Identity Governance Don’t miss this chance to boost your cybersecurity game and nail compliance. Register now > https://lnkd.in/gc2iQzyu

11

2 Comments

Are you ready? Belgium raises the NIS2 bar for ensuring digital safety Belgium is set to redefine cybersecurity with the NIS 2 law, effective October 18, 2024. This landmark legislation is a game-changer for protecting critical sectors: Expanded Protection: The law now secures additional sectors, ensuring top-tier cyber defense. Proactive Stance: Entities are mandated to implement forward-thinking cybersecurity measures, signaling a shift to a more proactive defense strategy. Penalties with Impact: Non-compliance now carries heavier fines, with repeated offenses seeing a doubling of penalties, reinforcing the importance of adherence. Knowledge is Power: Management training is not just recommended but required, stressing the value of expertise in cybersecurity. Enforcement with Teeth: Belgian authorities are empowered to enforce the law, with board members facing specific penalties, including temporary bans from managerial roles for non-compliance. Belgium’s NIS 2 law is a bold declaration of its dedication to establishing a cyber-secure environment and setting a new standard in cyber resilience. Read more about the new law here: https://lnkd.in/e3aAZNqe also see link from Valéry Vander Geeten below. Call to action: KPMG offers a complimentary session to help relevant stakeholders in enterprise businesses prepare for this transition. We cover relevant topics for NIS2, including legal, compliance, third-party risk, sustainable solutions, data privacy, change management and so much more... Our holistic approach ensures alignment with both your local and global business needs. Reach out if you are interested. #Cybersecurity #NIS2Directive #Belgium #DigitalDefense #CyberResilience #Compliance #BoardAccountability

10

The train has left the station! 🚆 Today the Belgian 🇧🇪 Parliament transposed the European 🇪🇺 Directive NIS2 into Belgian law. The NIS2 Directive brings a more rigorous regulatory framework that impacts how information security is managed. By extending the scope and depth of mandatory security measures, it ensures that organizations, including Enabel, are better equipped to handle cybersecurity risks. Now, as someone not necessarily being as enthusiastic about Information Security as I am, you might ask: "What does this have to do with me?". Well for me, and I know a lot of people in this domain think the same, Information security is not just a compliance requirement; it's a catalyst for better governance. By strengthening our cybersecurity posture, we not only protect our data and systems but also enhance the support for our colleagues who do the "actual work". Effective information security practices streamline operations and enable our teams to work more efficiently, focusing on delivering their important objectives while setbacks of digital threats are being kept at a minimum. https://lnkd.in/gp_BwHwn

13

Protecting AI systems from cyber attacks is a key responsibility for any organization that uses AI. According to our survey, Belgian respondents see confidential information and intellectual property as the most vulnerable assets in AI systems. To safeguard them, a comprehensive security strategy and governance framework is needed, covering the whole AI lifecycle, from data collection to model deployment.

10

1 Comment

🔐 Stay Ahead of NIS2 Regulations! 🚀 ❗ Deadline -> October 2024 👀 Organizations will need to take a close look at their operations and apply the correct measures to ensure compliance and resilience in the face of evolving cyber threats. 🔍 In case you missed it, the Belgian law transposing the NIS2 Directive establishing a framework for the cybersecurity of networks and information systems has been approved by the Federal Parliament. 💼 These regulations are a game-changer in cybersecurity, ensuring that organizations stay at the forefront of digital resilience and security. 🔒 What does this mean? It's all about fortifying digital infrastructure, safeguarding sensitive data, and maintaining the trust of clients and partners. 💡 Looking for more insights? Check out these invaluable resources: 🔗 Dive deep into the NIS2 directive with the Centre for Cyber Security Belgium: https://lnkd.in/eY4BPUyT 🔗 Equip yourself with essential cyber fundamentals using the CyberFundamentals Framework: https://lnkd.in/ex7SD4M3 🔗 Get the full scoop on NIS2 straight from the source: https://lnkd.in/eNBghqhD 💻 Let's empower ourselves with knowledge, embrace these regulations, and continue to elevate cybersecurity standards! #NIS2 #Cybersecurity #DigitalResilience #ccb #InfoSec #CyberAwareness #DataProtection #PrivacyMatters #SecureNetworks #CyberDefense #ITSecurity #RiskManagement #CyberThreats #DigitalTransformation #CyberHygiene #TechLeadership #CyberResilience #SecurityCompliance #EURegulations #BelgiumLaw #CyberExperts #TechCommunity #SecureDigitalFuture #InnovationInTech #CyberEducation

10

On the evening of 16th May 2024, the prestigious venue of BRUGMANN in Brussels hosted a highly anticipated roundtable organised by CIONET Belgium and its partner Splunk. Titled "AI & Security: Double-edged Sword? Catalyst for Security or Gateway to New Risks?", the event confronted the urgent and complex realities of integrating AI technologies into organisational resilience strategies. The roundtable delivered a colourful discussion on the role of AI in building future-proof strategies for the evolving cyber landscape, combining a vision of possibility while staying grounded in reality. Event highlights: 💥 Debbie Janeczek, Chief Security Officer at Swift, delved into the dual nature of AI in security, emphasising both the opportunities and threats it poses. She highlighted SWIFT’s strategic refresh, including the AI working group focusing on developing a clear policy and ensuring the security of AI systems throughout the company. 💥 Rik Bobbaers, Tech CISO at ING Global, shared insights on how AI can enhance risk management and security processes. He discussed ongoing projects, including the use of Generative AI and Machine Learning to reduce false positives in their SIEM system, analyse role overloads in IAM, and detect anomalies in coding. The roundtable underscored the importance of balancing innovation with caution, ensuring that AI is leveraged to enhance security without introducing new vulnerabilities. A heartfelt thank you to Splunk, to our speakers, Debbie Janeczek and Rik Bobbaers, for their invaluable insights, and to all our attendees - Alain De Maght, Dirk De Meirsman, Benito De Pelsmaeker, Taco Mulder, Lorenzo Bernardi, Jaana Nyfjord, and Stephanie Cox - for their active participation and thought-provoking contributions. Stay tuned for the blog post on our CIONET website soon. #AI #CyberSecurity #CIONETBelgium #Splunk #RoundTable #Innovation #Collaboration #FutureProofing

42

On May 21, 2024, at the Telecoms Council meeting in Brussels, European ministers adopted key conclusions on the future of cybersecurity. These conclusions, prepared by the Belgian Presidency of the Council of the European Union, set the direction for future EU cybersecurity policies. Cyber threats have escalated in complexity and scale, particularly with rising global tensions and the war in Ukraine. The COVID-19 pandemic and advancements in Artificial Intelligence have further underscored the importance of robust cybersecurity measures. Despite most digital infrastructure being privately owned, cybersecurity remains a shared responsibility. 🔹Legislative Background The EU has significantly increased its cybersecurity legislation over the past five years, with key laws including: - NIS1 Directive (2016) - Cybersecurity Act (2019) - Cybersecurity Competence Centre & Network (2021) - NIS-2 Directive & EU IBA Regulation (2023) - Cyber Resilience Act, Cyber Solidarity Act & CSA amalgamation (2024) 🔹Key Conclusions The 37-paragraph document highlights several priorities: 1. Implementation: Emphasis on fully implementing existing cybersecurity legislation, which will require extensive effort from both national agencies and industry. 2. Harmonisation and Cooperation: The need for harmonised standards, certification, supply chain security, and cooperation with the private sector. 3. Support for SMEs: Specific focus on supporting small and medium-sized enterprises (SMEs) and ensuring adequate funding and skilled experts for cybersecurity initiatives. 4. Coordinated Approach: Avoiding legislative fragmentation and clearly defining roles and responsibilities at the European level. 5. Fighting Cybercrime: Strengthening cooperation to combat cybercrime and revising the cyber incident crisis management framework. 6. Multi-stakeholder Engagement: Central cooperation with private sectors and academic institutions. 7. Active Cyber Protection: Emphasising active cyber protection and leveraging digital identity to enhance security. 8. Global Cooperation: Enhancing cooperation with third countries, particularly in the transatlantic context, to build a robust global cybersecurity ecosystem. 9. Emerging Technologies: Addressing opportunities and threats from AI, quantum computing, and 6G, and promoting Free and Open-Source Software. 🔹 Future Directions The Council calls for a renewed cybersecurity strategy from the European Commission and the High Representative, addressing the evolving threats and incorporating these conclusions. The Council's stance is encapsulated in the title "Implement and Protect Together," underscoring the collective effort required to enhance cybersecurity across Europe.

4

Exciting news - 🚀A new IT Security Blog is in town: 👉🏼"IT Security Talk with Nicolas Spreitzer" (https://lnkd.in/ezKuhJCw) 🖋️I decided to regularly write short articles about different domains of IT Security to contribute to safer environments and give back to the IT Security Community. 🛡️The first article series is about BCM (Business Continuity Management), Part 1 is already live. 🔔If you like the content, follow me to stay updated on more articles to come. #ITSecurity #itsec #itsecurity #BCM #Blog

19

On the 18th of June, come to the Cyber Résilience conference in Brussels. we ll talk about strategy, regulations and policies, technic and solution . And maybe you ll meet us ! ^^ https://lnkd.in/epavrpAN

9

1 Comment

Great overview by TNO and partners of the top-10 developments that will affect cybersecurity priorities for the telco-providers. If presented as cost-factors these priorities can be challenging to finance and execute. In the strategic follow-up, it would be interesting to look at it from the economic-by-design perspective where economic considerations are at the center of the design process to drive these cybersecurity priorities.

6

🚀 Exciting News from Cyber Made in Belgium (CMiB), an Agoria initiative! 🚀 We are thrilled to offer you a unique opportunity to shape the future of cybersecurity skills in Belgium and Europe—one of our top priorities! CMiB for Talent/CyberTalents, in collaboration with European partners, is launching a survey to assess the professional cybersecurity skills needs in Belgium. This survey is part of the CyberHubs project, co-funded by the European Commission, aimed at bolstering cybersecurity skills across Europe. 🌐 Your input is vital! 🌐 Help us understand the challenges companies face in cybersecurity and identify the most sought-after skills in the market. Your insights will be crucial for developing strategies and training programs tailored to your needs. 📋 The survey takes just 15 minutes to complete, and all responses are strictly confidential. As a thank you, you'll receive a detailed report on cybersecurity skills trends in Belgium. Be a part of shaping the future of cybersecurity in Belgium and Europe. Click the link below to start the survey now! ⬇️https://ow.ly/sh6U50S9g8S #CyberSecurity #CMiB #CyberTalents #CyberSkills

4