Stefan Van Gansbeke

I was the keynote speaker at a conference last week: #SecAppDev in Belgium. Being there as a wonderful experience with incredible leaders and developers. In one session, the speaker asked: “Who is responsible for cybersecurity in an organization?” He received six responses. They might surprise you…check the video for the answer. Nonetheless, this led me to think more about responsibility vs accountability. I often address this with CISOs and senior management that I work with. I also cover it is my talks on the #CISO role (with varying perspectives) because it’s so critical. This week in our series of #SeniorManagementandtheCISOrole we will dive deeper into this topic of responsibility and accountability as it relates to senior management. Check out the video.👇🏽 As always, please let me know what you think in the comments below. 

#SeniorManagementandtheCISOrole - Part 3 of 5 
#BringingSeniorManagementAlong
#CybersecurityisBoardAccountability
#CISOroleisBoardAccountability

67

2 Comments

This is one of the most thought-provoking articles I've read in years. It takes a broad and opinionated view of our present cyber safety challenges on a systemic societal level and postulates concrete measures which might well improve the status quo. I cannot say that I agree with all of the recommendations, I need more time to consider the ramifications. Nevertheless I can recommend this article as being worth ten minutes of your precious time and attention, do have a look:

4

Proximus NXT did not miss Cybersec Europe 2024 in Brussels !!!!! On the contrary, we took this opportunity to unveil our Belux #Cybersecurity Report for the 5th consecutive year. ✔ The report shows that 1 out of 3 Belux companies encountered at least one cybersecurity incident in 2023. 💥 Whilst budget constraints are not the primary issue, the scarcity of skilled personnel and escalating technological complexity pose the most significant challenges to address. During the event, our Proximus NXT experts shared these critical insights. A special shout-out to our very own Wouter Vandenbussche, Product Owner Cybersecurity Services, whose presentation emphasised the importance of proactive cybersecurity measures in mitigating risks and fortifying defences. Learn more about our findings in the Proximus NXT Cybersecurity Report here. 👇 https://lnkd.in/exe3YdR9 #ITSecurity #DigitalSafety #digitaltrust

178

A few weeks ago, Emmanouil Perselis provided valuable insights into the application security approach at CM-MC, sparking a lively discussion at the Belgian Cyber Security Coalition Focus Group on application security. He discussed various aspects, including different application development stacks, IDE plugins for early SCA, SAST, and container scanning, a mix of internal and external pen testing, Copilot development support, and triage based on exploitation prioritization. In breakout sessions, we addressed topics such as legacy systems, initial onboarding, prioritization, and triage. We delved into the 'No Triage' principle by applying the latest stable versions of container platforms. Additionally, we tackled the vulnerabilities backlog by emphasizing the ownership of product owners and risk sign-off by the business. It's always fascinating to bring together application security experts from a wide range of organizations—academia, startups, and medium to large enterprises—for valuable open discussions on this often underemphasized area of application security. Kudos for Emmanouil Perselis and thanks for hosting the session to Taco Mulder and Sebastien Deleersnyder #CM #MC #cybersecurity #applicationsecurity

25

NIS2 - An opportunity to move beyond compliance Watch our podcast here and reach out if you and your organization are unsure on how to move forward towards building a resilient enterprise. Thanks again to our wonderful guest speakers Raymond Bierens and Edwin Van Den Heuvel. connect2trust Plat4mation Tanium ServiceNow

28

EU ICT Regulations - AI act, MiCA, DORA, GDPR, EIDAS2.0 An information systems infrastructure and operations architecture approach. In my last presentation about MiCA I said.... “Hopefully the presentation showed that web 3 , digital asset regulatory systems infrastructure at scale and its information governance, consistency , accuracy (pedigree), dynamics and real time performance will be foundational for the new Internet . We have the experience and systems tools in the cuMesh platform to create a POC demonstrator for the MiCA application and EU infrastructure… We will post an update on such developments in a few weeks..” A few weeks have passed so here is an update.. Not just MiCA this time but the key set of EU finance sector regulations from an infrastructure systems engineering perspective.  We close off this with: “Hopefully this update presentation shows that web 3 , digital asset regulatory systems infrastructure at scale and its information governance, consistency , accuracy (pedigree), dynamics and real time performance will be foundational for the new Internet . We have the experience and systems tools in the cuMesh platform to create a POC demonstrator for the EU critical applications and EU governed infrastructure… We will post an update on such developments in another few weeks..” see cumesh.au

23

14 Comments

During the presentations of SoSafe's latest cybersecurity trends in 2023, we often used this case as an example to show how hackers are relying more and more on social engineering tactics rather than sophisticated technological methods. Read the full story: https://lnkd.in/eesgFAcB #humanfirewall #socialengineering

28

'Dear Sirs' _ for Resilience-Resilience Steer per our Teams Security BZK SSC-ICT CISO-office it's advised to use https://signal.org/ instead of WhatsApp' 'We Advise you to inform in future state opportunities that are relevant for our business partners network updates with use of signal #Secure and aware #Policy for °formal° messenger services, go to app via your Android or IOS device , our mobile numbers are same/same and always on #Availablity plus #Online, or via text message or e-mail.' Signal : https://signal.org/install NLSERVICES public announcement ssc-ict-ciso@minbzk.nl 🌐

5

Are you ready? Belgium raises the NIS2 bar for ensuring digital safety Belgium is set to redefine cybersecurity with the NIS 2 law, effective October 18, 2024. This landmark legislation is a game-changer for protecting critical sectors: Expanded Protection: The law now secures additional sectors, ensuring top-tier cyber defense. Proactive Stance: Entities are mandated to implement forward-thinking cybersecurity measures, signaling a shift to a more proactive defense strategy. Penalties with Impact: Non-compliance now carries heavier fines, with repeated offenses seeing a doubling of penalties, reinforcing the importance of adherence. Knowledge is Power: Management training is not just recommended but required, stressing the value of expertise in cybersecurity. Enforcement with Teeth: Belgian authorities are empowered to enforce the law, with board members facing specific penalties, including temporary bans from managerial roles for non-compliance. Belgium’s NIS 2 law is a bold declaration of its dedication to establishing a cyber-secure environment and setting a new standard in cyber resilience. Read more about the new law here: https://lnkd.in/e3aAZNqe also see link from Valéry Vander Geeten below. Call to action: KPMG offers a complimentary session to help relevant stakeholders in enterprise businesses prepare for this transition. We cover relevant topics for NIS2, including legal, compliance, third-party risk, sustainable solutions, data privacy, change management and so much more... Our holistic approach ensures alignment with both your local and global business needs. Reach out if you are interested. #Cybersecurity #NIS2Directive #Belgium #DigitalDefense #CyberResilience #Compliance #BoardAccountability

10

🎙️𝐄𝐧𝐚𝐛𝐥𝐞 𝐝𝐨𝐢𝐧𝐠 𝐛𝐮𝐬𝐢𝐧𝐞𝐬𝐬! 𝐁𝐮𝐢𝐥𝐝 𝐚 𝐬𝐞𝐜𝐮𝐫𝐞, 𝐩𝐫𝐢𝐯𝐚𝐜𝐲 𝐩𝐫𝐞𝐬𝐞𝐫𝐯𝐢𝐧𝐠 𝐝𝐚𝐭𝐚 𝐬𝐞𝐫𝐯𝐢𝐜𝐞 𝐰𝐢𝐭𝐡 𝐌ulti Party Computation (MPC) In episode 3 of the re:invent security podcast Jeroen Prinse and I welcome Toon Segers sharing shedding light on MPC. Curious what MPC has to do with Security? This technology enables us as security professionals to create a data sharing service for our organization that is secure by design and privacy-preserving and which enables organizations to share sensitive and confidential data with others. Links to the podcast in the comments. Comment, like 👍 and subscribe to the re:invent security podcast page on LinkedIn and your favorite podcast player. Please tag anyone who might find it interesting. #PodCasting #InformationSecurity #BusinessEnabler #MultiPartyComputation

34

1 Comment

This is one of the hot compliance topics of the year, alongside the AI Act. Rather than seeing NIS2 as a second GDPR, with its regulatory pressure and penalties, let's see it as an opportunity to strengthen your company's cyber serenity in a threatening digital landscape!

20

Do we really want to sell cybersecurity with pink skirts? 🤦🏻‍♀️ It’s 2024. We work hard every day to make women visible in cyber and attract those hesitant to join. Women4Cyber Belgium is doing an incredible job. Yet, according to the ISC2 survey, women still only make up 25% of the cyber workforce — a mere 1% increase from 2023. The journey is still challenging, and we need more support to bring women into cyber. Using #stereotypical marketing strategies might be a commercial tactic, but is it responsible? Is this the image we want for our women and daughters? Let’s aim for progress and inclusivity, not outdated stereotypes 🙌. Together, men & women, we are stronger! #CyberSecurity #WomenInTech #Women4Cyber #InclusiveMarketing Cybersec Europe 2024

180

39 Comments

According to Cees van der Wens [NL] “An official ISO 27001 certificate never makes a statement about an organization’s information security, only about an organization’s information security management system.” But what happens with the senior leadership is too caught up in their own realms to back up and support the CISO and don’t manage the management system? It takes a village to keep an effective ISMS effective. Cyber efforts really need to be the concern of the entirety of the senior leadership. Yes even the CMO, for example, should be putting in effort to stay secure.

1

🚀 Preparing for NIS2 compliance? Check out our new article that explores the requirements of NIS2 and how our solutions can guide your company towards a successful transition. Secure your infrastructure today! 🔒 #NIS2 #Security #Compliance #Innovation Approach Cyber Jorien Decroos David Vanderoost Florence Steenackers Steve Mihy

12

Once again back in the lovely city of Leuven, Belgium for Academy days with Start it Accelerate | @KBC. What a wonderful program to be apart of. Many thanks to our business coaches and mentors for all their help, allowing us at PSI to bring Nemsis, a Breach and Attack Simulation software to a larger market. If you are a financial firm, looking at you insurance companies especially, need help addressing multiple pillars for real world scenario testing of your critical infrastructure due to the DORA legislation. Drop me a note and we can arrrange a demo. Persistent Security Industries

16