Jeffrey Winn

Every security framework emphasizes the criticality of an asset inventory, and this is especially true for successful vulnerability management. In this video, Brian Contos highlights 5 ways an asset inventory is foundational to the efficacy of any vulnerability management program.

14

"More vendors" doesn’t equate to "more protection." In fact, it leaves you more vulnerable to risk because it’s easy to overlook duplicate efforts, security gaps and growth opportunities. Bundling your GRC services into one platform is the most effective method for trimming the fat. It connects all your business groups to leave you with a better understanding of how your organization is functioning as a whole. Ready to reap the benefits of consolidation? Check out our recent guide to learn how to get the process started. #GRC #VendorConsolidation #RiskManagement

12

In a fantastic example of why I love what Joanne C Klein ☁️is putting out there, here is a description of a number of flow-on effects from making retention labels auto-apply only. This user-centric approach needs to be taken wherever possible - focussing on letting the tools do the work, not constraining the user. As we move to holistic application of Data Security, this <must> be the focus.

6

1 Comment

Patrick Gillespie of GuidePoint Security says COVID really made the IT/OT Converegence explode. "A lot more IoT devices going out on the plant floor, and carpeted side, like you mentioned. And then COVID happened. So, now you have to work remotely, global pandemic. So, now your automation engineers from Germany, or Austria, or Canada can no longer travel to the US, or vice versa. And plus, your employees working from home need to weigh in. So, best thing to do is to hook up OT to IT, and let’s go in through the IT VPN, have direct access essentially into these typically flat OT networks. So, yeah. I think COVID really drove that convergence, which has driven a lot of new threats and new vulnerabilities, new exploits, everything. Increased business risk dramatically for everybody, and especially in critical infrastructure." The #IoTSecurityPodcast is powered by Phosphorus Cybersecurity Inc.

18

1 Comment

Download "The CMMC Everything I Need to Know To Get Started Guide" Whether you're navigating the complexities of Controlled Unclassified Information (CUI) or aiming to enhance your cybersecurity posture, this guide has you covered. Here's what you'll discover inside: - Comprehensive Introduction to CMMC - Eligibility Criteria and Onboarding - Detailed Guidance on Handling CUI - Navigational Steps for Compliance - Essential Government Resources - Preparatory Advice for CMMC Assessment - And more! Click the link to download your free guide today! https://lnkd.in/ec-fhpe8 #cyber #cybersecurity #CMMC #CMMC2 #NIST #NIST800171 #infosec #informationsecurity #governmentcontractors #contractors #DoD #Defense #CUI #DefenseContractors #MSP #MSSP

9

CMMC LEVEL 2 ASSESSMENT TOOL Assess CMMC readiness and identify gaps in compliance with the secure XLS tool for internal use. Available at no cost for a limited time only, this secure tool can help organizations track CMMC implementation progress, identify gaps in compliance, and prepare for assessment. Download the Advanced CMMC Level 2 Assessment Tool here: https://hubs.la/Q02xQxp50 #CMMC

4

Explore this enlightening piece on Online Safety by Premier's Dr. Mary Margaret C., an essential read for ANYONE!

5

My favorite new Action1 feature, CISA KEV integration, is a great way to prioritize #patching of vulnerabilities of utmost importance. This new blog post explains it in-depth.

17

3 Comments

You need a single source of truth for GRC efforts? You've got it: SafeBase streamlines shared GRC efforts, so your team has more time to focus on strategic projects (like growing your GRC program). Check out how we're building the Trust Center Platform for GRC teams: https://hubs.ly/Q02C1k-x0

6