Mike Pedrick

Just in - CISA publishes Encrypted DNS Implementation Guidance for Federal Agencies to enhance cybersecurity and protect sensitive data. Stay ahead of the curve with this important resource: https://lnkd.in/eMeN-uxt #cybersecurity #CISA #encryptedDNS

2

Cybercom looking to combine and standardize defensive cyber kits; solicitation issued April 29, 2024, DefenseScoop https://lnkd.in/eg3H2tea U.S. Cyber Command, through the Defense Innovation Unit, has begun the process to standardize the gear that defensive cyber teams use to perform their missions. That effort will now also combine the equipment cyber protection teams use with the kit for hunt-forward operations performed by the Cyber National Mission Force, Cybercom’s elite unit tasked with defending the nation against significant digital threats. Hunt-forward operations, conceptualized over five years ago, involve physically sending defensively oriented cyber protection teams to foreign countries to hunt for threats on their networks at the invitation of host nations.

75

3 Comments

Have you checked out the Spring 2024 Information Outlook? This issue includes articles on Cyber Security, Preserving Cultural Artifacts, the Solar Eclipse and much more! Give it a read today: https://ow.ly/JtG650RETNB

7

Do you need to be CMMC Level 2 compliant, but are having trouble translating the cybersecurity gobbligook into real actions that your IT team can take? We are having a live webinar on June 27, 2024 at 2pm EST to demonstrate the Kieri Compliance Documentation. This is a full-featured program for CMMC Level 2 and NIST SP 800-171 compliance which includes policies, procedures, system security plan, user agreements, record-keeping databases, account request form, self-assessment form, and other vital resources needed to be compliant. Monthly Q&As and over 50 hours of video training included. Kieri Solutions uses this program to efficiently manage our CMMC Level 2 compliance. We passed a DoD assessment for CMMC Level 2 and NIST SP 800-171 compliance with a perfect 110 score using this governance program. We have over a hundred clients using the KCD to manage their compliance and prepare for CMMC Level 2 assessment themselves. 𝐃𝐨𝐞𝐬 𝐭𝐡𝐢𝐬 𝐬𝐨𝐮𝐧𝐝 𝐥𝐢𝐤𝐞 𝐲𝐨𝐮? 🔸 You are frustrated with your policies and procedures… 🔸 You don’t know how to perform some CMMC requirements, or how to answer assessment objectives like “define non-essential functions”… 🔸 Your documentation is out of date… 🔸 You bought compliance templates elsewhere and they are too complex to get through… 🔸 You are paying a huge monthly fee to a GRC website and you’re still stuck filling in blanks… 🔸 You don’t have a record keeping system that makes it easy to gather the info you need for assessment… 🔸 Your users are asking how to mark CUI and you don’t know how to help them… If so, please join us for this webinar. We will be showing the program that we use to reach and maintain a "110" score. https://lnkd.in/eRjbVFrD Kieri Solutions - Authorized C3PAO

35

6 Comments

The Office of the National Cyber Director (ONCD) recently released the first-of-its-kind Cybersecurity Posture Report at #RSAC: https://bit.ly/3UybTyD The report evaluates the strategic environment and cyber risk landscape, taking into account trends in threat actor capabilities, as well as the opportunities and challenges within U.S. cybersecurity policy. From highlighting the rise of nation-state actors disrupting U.S. critical infrastructure to the prevalence of new attack vectors such as supply chain attacks in emerging technologies like #AI, the report underscores the urgent need for enhanced collaboration between government agencies, private sector entities, and international partners. As an industry leader in threat intelligence, we're committed to providing insights and solutions to empower organizations to defend against emerging threats effectively. We commend ONCD for their efforts and look forward to our continued partnership in shaping the future of cybersecurity policy.

38

SEC Charges R.R. Donnelley & Sons Co. $2.1 Million Fine for Cybersecurity-Related Controls Violations On June 18th, 2024, the U.S. Securities and Exchange Commission announced that RR Donnelley, a global provider of business communication and marketing services, agreed to pay over $2.1 million to settle disclosure and internal control failure charges relating to cybersecurity incidents and alerts in late 2021. This SEC settlement with RRD highlights critical issues around cybersecurity and internal controls. Key findings include inadequate controls over material non-public information (MNPI), heightened insider trading risks, and violations of the Securities Exchange Act of 1934. Key Allegations: - Inadequate controls to prevent MNPI misuse - Insider trading risks due to poor monitoring - Regulatory violations and insufficient disclosure controls Inadequate Cybersecurity Response: - Between Nov 29 and Dec 23, 2021, RRD's internal intrusion system issued numerous alerts. - Alerts were reviewed by a third-party MSSP and escalated to internal cybersecurity personnel. - Despite escalations, RRD failed to take timely action, leading to unauthorized data exfiltration of 70 GB, including personal and financial information of 29 clients. - Issues identified included lack of prioritization, workflow for alerts, and inadequate auditing of the MSSP's performance. - Only after an external company alerted the CISO did the firm respond effectively. How AdvisorDefense Can Assist Registered Investment Advisors (RIAs): We offer a comprehensive suite of services tailored to help RIAs meet SEC regulations and bolster their cybersecurity defenses. Our mission is to empower RIAs with the necessary tools and expertise to navigate the cybersecurity landscape, ensuring compliance with regulatory requirements and protecting client information. By partnering with AdvisorDefense, RIAs can enhance their cybersecurity posture, ensure compliance, and protect their clients from evolving cyber threats. Protect your clients. Maintain your reputation. Ensure compliance. Contact us to learn more about how we can support your firm. https://lnkd.in/eVKtr3_x #Cybersecurity #SEC #Compliance #RIAs #AdvisorDefense #CyberRiskManagement #FinancialServices #RegulatoryCompliance #CyberThreats #CyberSecurityAwareness #CyberSecuritySolutions

10

Hear Ye, Hear Ye! Gather 'Round for the Latest Installment of the LBMC Cybersecurity Sense Podcast: "PCI Monthly Update: Latest PCI News, Requirement 11 Overview, and QSA Insights" Step forth and lend thine ears to this most informative episode, wherein Andrew Kerr, William Parks and myself, the sages of cybersecurity at LBMC unravel the intricacies of PCI DSS v4.0 Requirement 11. Esteemed for its rigorous scanning requirements, this standard is a bulwark in the fortress of data security. Join as the esteemed QSAs share their profound wisdom on maintaining the bastions of compliance. This discourse is not merely an auditory delight but a beacon of knowledge for those navigating the tempestuous seas of cybersecurity. Pray, delay not! Avail thyself of this opportunity to acquire sage advice and remain fortified against the ever-lurking threats of the digital realm. Listen posthaste: https://lnkd.in/gfDTTZaH Equip thyself with knowledge, for it is the sword and shield against the unseen foe! #Cybersecurity #PCIDSS #DataSecurity #Compliance

5

Our #massdatagov recently commented on the on the Cybersecurity and Infrastructure Security Agency #CIRCIA #cybersecurity reporting requirements NPRM including suggestions around reporting requirements for incidents affecting more than one organization. Read our comment here: https://ow.ly/JRRW50SiqLG #security #mhdcregulatory

1

John Mracek has exceptional insights and best practices to share at #Secure360. The cyber landscape is experiencing an increasing sophistication of threats along with rapid modernization of tech. Learn how model of shared accountability is ideal since no one can do it alone! #tech #cyber

32

1 Comment

Join me and other #cybersecurity professionals for a 60-minute round table #isc2 webinar on Friday, June 14, at 11AM Eastern / 8AM Pacific, where we will discuss multiple top of mind topics such as security certifications as well as the pathways into cybersecurity from different career fields. Register below:

8

In February of this year, the National Institute of Standards and Technology (NIST) published a major update to their Cybersecurity Framework (CSF) document. Amongst the various changes was an increased emphasis for organizations to strengthen IAM, PAM and cloud security practices. Check out our most recent blog post to learn more about the updates in NIST CSF 2.0 and the steps your team can take to adhere with these revised standards. https://lnkd.in/gnZC-Xya

8

🚨 Alert: CISA issues emergency directive post-Midnight Blizzard Microsoft Hits! While Federal Civilian Executive Branch (FCEB) agencies are primary targets, all organizations urged to ramp up security due to elevated risk. Are you also dealing with such threats? Contact us for best cybersecurity solutions! Read here: https://lnkd.in/gnAtY-TF #SimpleCyber #CyberSecurity #EmergencyDirective

1

Last week the White House released Version 2 of the National Cybersecurity Strategy Implementation Plan (NCSIP). The Plan, which outlines actions the federal government is taking to improve our national cybersecurity posture, includes five pillars. Find out what the five pillars and what this means for MSPs in this article - https://lnkd.in/e7awvpRu #MSPnews #technews #cybersecurity

2