Don Cox - MBA, CCIO, CCISO, CISM, PMP, ITIL, QTE

As the threat landscape in modern computing continues to evolve, the Cybersecurity and Infrastructure Security Agency (CISA), in conjunction with several other federal agencies, recently published "Modern Approaches To Network Access Security" to provide updated guidance on best practices regarding network access, including remote access to critical resources. The guidance is directed at all organizations, no matter their size, and focuses on three recommended security solutions, Zero Trust (ZT), Secure Service Edge (SSE), and Secure Access Service Edge (SASE), to enable better visibility to activity and more granular and dependable access controls. As noted in the summary, "this guidance helps organizations to better understand the vulnerabilities, threats, and practices associated with traditional remote access and VPN deployment, as well as the inherent business risk posed to an organization’s network by remote access misconfiguration." We highly recommend reviewing that guidance for anyone who supports networks and remote access platforms, and contact us today if you are ready to learn more about how Gemini Tech Partners can work with you to evaluate your current security posture and provide guidance on next steps to help ensure you put processes in place that are strategically aligned with your overall business goals. Get more detail from Dark Reading (which includes a link to the CISA published guidance) at: https://lnkd.in/eDWva3gy #ITsecurity #networksecurity #cybersecurity #vpn #zerotrust #accesscontrol #ztna #sase

1

Nonprofit K12 Security Information Exchange has backed the proposed requirement for schools to disclose cyber incidents as generally “appropriate.” The Cybersecurity and Infrastructure Agency's proposed rule would limit reporting of major cyber incidents to school districts enrolling over 1,000 students. The public comment period on CISA’s proposed rule is open through June 3. How do you think schools should be best included in CISA's suggested requirements for reporting cyber incidents to the federal agency? #k12cybersecurity #edchat

2

Updates Proposed to ‘Green Book’ Guidance on Internal Agency Controls - FEDweek: Updates Proposed to ‘Green Book’ Guidance on Internal Agency Controls  FEDweek #CyberSecurity #InfoSec #SecurityInsights

1

⏰ Just 20 hours left to register for another insightful SANS Institute webcast titled "SANS 2024 SOC Survey: Facing Top Challenges in Cybersecurity." Kicking off at 10:30am PT TOMORROW, Fri., July 12, our very own Scott Dowsett CISSP CISA CRISC CDPSE will speak soon after at 11:00am EDT and will join a panel discussion to follow (@ 11:45am EDT) with several other industry experts including Christopher Crowley, Shahar Ben-Hador, Joshua Costa, Bob Hansmann, Mick Leach, Jay Lillie, Byron Page, Edward Wu, and Ashish Malpani. 👏🏼 Learn more and register here 🔗 : https://lnkd.in/gKWdSSKN #cybersecurity #AI #SOC #ThreatIntel #SecurityAutomation #SecurityOperations

37

2 Comments

Hopefully you a process to frequently assess your organization's cyber risks. ⚠️ If you don't currently have process in place, and you should, here's 6 Types of Risk Assessment methodologies and their use case. 📝 Feel free to reach out if we can point you in the right direction🤝 #cybersecurity #nonprofit #riskassessment

1

National Cyber Strategy Implementation: Regulatory Harmonization and Reciprocity https://buff.ly/3x1TzWX via Alex Sharpe on Thinkers360 #BusinessStrategy #Cybersecurity #RiskManagement

1

1 Comment

Celebrating 30 Years of #CISSP - Learn how the CISSP certification has continued to evolve to remain the most sought-after credential in the field for cyber leaders. https://ow.ly/lzmA50RsyEC #infosec #cybersecurity #informationsecurity #infosecurity #cyberattacks #CybersecurityCertification

1

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a security flaw impacting NextGen Healthcare Mirth Connect to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The flaw, tracked as CVE-2023-43208 (CVSS score: N/A), concerns a case of unauthenticated remote code execution arising from an incomplete patch for another critical flaw CVE-2023-37679 (CVSS score: 9.8). Details of the vulnerability were first revealed by Horizon3.ai in late October 2023, with additional technical specifics and a proof-of-concept (PoC) exploit released earlier this January. Mirth Connect is an open-source data integration platform widely used by healthcare companies, allowing for data exchange between different systems in a standardized manner. https://lnkd.in/g7CfMEqJ

1

Why are computer programming skills important in digital forensics and incident response? Learn how you can automate repetitive tasks, streamline forensic processes, and deepen your knowledge of how computers work in this FREE webinar with Matt Danner from Monolith Forensics. Register today: http://csh.social/monwebj #dfir #investigation #digitalforensics #digitalinvestigations #computerprogramming

1

Why are computer programming skills important in digital forensics and incident response? Learn how you can automate repetitive tasks, streamline forensic processes, and deepen your knowledge of how computers work in this FREE webinar with Matt Danner from Monolith Forensics. Register today: http://csh.social/monwebj #dfir #investigation #digitalforensics #digitalinvestigations #computerprogramming

1

Why are computer programming skills important in digital forensics and incident response? Learn how you can automate repetitive tasks, streamline forensic processes, and deepen your knowledge of how computers work in this FREE webinar with Matt Danner from Monolith Forensics. Register today: http://csh.social/monwebj #dfir #investigation #digitalforensics #digitalinvestigations #computerprogramming

1

Why are computer programming skills important in digital forensics and incident response? Learn how you can automate repetitive tasks, streamline forensic processes, and deepen your knowledge of how computers work in this FREE webinar with Matt Danner from Monolith Forensics. Register today: http://csh.social/monwebj #dfir #investigation #digitalforensics #digitalinvestigations #computerprogramming

1

Did you know that Cybersecurity and Infrastructure Security Agency recently released easy to use cybersecurity resources? Watch James Maxwell's (Vice President and Chief Information Security Officer) three-minute video overview with helpful tips and an introduction! 

4

🔥 Diving into the 2023 Director's Handbook on Cyber Risk Oversight by NACD (National Association of Corporate Directors)! 📚 This comprehensive guide is a must-read for all board members looking to navigate the complexities of cybersecurity. 🌐 Credits to the brilliant minds at NACD (National Association of Corporate Directors) for this invaluable resource! #CyberSecurity #BoardGovernance #KnowledgeIsPower #CyberRescue

52