Rob Shapland

💻 Why Penetration Testing is Crucial Penetration testing identifies vulnerabilities in your systems before cybercriminals can exploit them. Regular testing helps to strengthen your defences and protect sensitive data. Periculo offers comprehensive penetration testing services, simulating real-world attacks to uncover and fix vulnerabilities in your network. https://lnkd.in/edj_wkS5

1

On Day 1 of #CyberUK24 please stop by the stand and say hello to the CYSIAM team. #CYSIAM #CyberSecurity #CyberCapacityBuilding #ManagedDetectionandResponse #CyberThreatIntelligence #IncidentResponse #DigitalForensics

32

tmc3 have reported that CTO of National Cyber Security Centre, Ollie W. has given a bleak overview of the current security market - he feels we possess the knowledge to develop secure tech but the market fails to incentivise it. The tech industry’s approach to #cybersec is apparently a patchwork of temporary fixes that merely covers up deeper vulnerabilities. He goes on to say that a fundamental change in the market is needed where firms choose long-term quality over short-term gains with incentives for prioritising the development of innovative and robust solutions. I mean it's saying a lot without saying much isn't it? It's economically and technically unviable for businesses to be a cybersec panacea. So it's for that very reason you see the likes of Check Point Software and Proofpoint and Netwrix Corporation grow through acquisition - so they can cover more bases. And I'm fairly certain the current #vc market would happily snap up a vendor that solves more than its fair share, especially considering more businesses are coming out with more innovative solutions which solve more than just a subset issue e.g. hackurity.io.

2

1 Comment

Thanks to those who reached out to organize one-on-one discussions regarding their data protection challenges. We have a spare 1-hour slot next week for anyone interested in some free Data Protection advice from our subject matter experts at Trust Hogen. 🔒💡 #DataProtection #Cybersecurity #ExpertAdvice Gary@Trusthogen.com

12

Cyber Essentials is a Government-backed scheme that focuses on helping organisations protect themselves against the most common online threats. If you’re a supplier planning on bidding for UK government contracts involving handling certain sensitive and personal information, it's a mandatory requirement. However, even if you are not planning on working as a government supplier, the Cyber Essentials certification aims to provide businesses with a baseline of cybersecurity controls. At Lucid, we can help you to put the controls and measures in place that will allow you to secure cyber essentials certification, and maintain it in the future. To find out more or to discuss how we can help, please feel free to drop me a message or get in touch with our team at lucidgrp.co.uk #LucidGroup #CyberEssentials #CyberSecurity #TechSupport

2

Unfortunately I will not be attending #RSAC this year as originally planned... However, the reason I won't be attending RSA Conference is because I'm boomeranging 🪃🪃🪃 back to #Microsoft! It's been a hell of a year, with the better part of the last 12 months being unemployed, experiencing a layoff, learning some hard lessons in different people's communication and management styles, and learning ways to better advocate for my own communication needs as an #AuDHDer. BUT it's been a great opportunity for deep thinking, self care, skill building, family time, projects, dreaming, planning, and self-advocacy. ✅️ I finally have a steady supply of ADHD meds from the VA and am getting my service-connected health concerns addressed 🏥 ✅️ I've drafted my business proposal and operating agreement for my small business idea and gotten buy-in from supporters and investors 💰 ✅️ I've lost 12 lbs and gained a ton of muscle 💪🏽🏋🏻‍♀️ ✅️ I've built shelves, lots and lots of shelves 🛠 ✅️ I've started studying for my CISSP and received support from Onward 2 Opportunity to take the exam 🔐 ✅️ I've registered for an entrepreneurial conference for veterans starting small businesses 👩🏻‍💼 ✅️ I've been getting rid of so much stuff I've been holding on to "because I might use it someday" to create more space and decrease clutter 🔌💾⌨️🖱🖥📒 ✅️ I've organized, scanned, shredded, donated and thrown away countless documents, doodads, and doo-hickeys 📃 ✅️ I've planted over 500 trees 🌳! ✅️ I've mentored multiple veterans and women 🫡👩🏻 But above all... I've filled my heart with so much love and joy that my cup has been overflowing. In spite of the pain, trauma, fear, and anxiety... I've chosen to be more determined, to believe that all of the good I've put out into the world will come back to me (and it has! in spades!), and to continue to make progress on my goals, no matter the roadblocks that temporarily bar my initial path. I am very fortunate and I realize this. A lot of people have struggled over the last few years with unemployment. I struggled to find employment, much less the right fit of employment, yet I still had a much easier time than many. I promised myself a long time ago that I would never be homeless again, and for the first time, I've realized that I have created enough of a cushion and safety net for myself that I truly never will be. 🥰 #cybersecurity #formerfosterkid #fostercarealumna #layoffs #newjob #newbeginnings #security #infosec #leadership #solidarity #inspiration #hired #O2O #IVMF #veteran #bipoc #nuerodiversity #boomerang #autistic #adhd #auties

366

90 Comments

Cheltenham cyber company is first official local cyber advisor under new government scheme 🌐🔐 A managed IT service and security provider (MSP) based in Cheltenham has become the first MSP in the local area to be accredited as both a Cyber Advisor and a Cyber Essentials Certification Body. This new accreditation will place ReformIT among an elite group of cyber advisers and cyber essentials certification bodies across the UK. The Cyber Advisor scheme was launched by the Government’s official National Cyber Security Centre (NCSC) and The IASME Consortium, aimed at helping businesses to protect themselves from increasing cyber threats. Initially developed for IT products and services suppliers to the central UK government, the Cyber Essentials and Cyber Essentials Plus certification demonstrates that an organisation has an essential level of cyber protection in place. NCSC approved Cyber Advisors provide small and medium-sized organisations across a range of industries with reliable and cost-effective cyber security analysis, advice and practical support, focusing on the key areas of the Cyber Essentials criteria. Continue reading... https://lnkd.in/ePsfWJme #technology #cyber #innovation #government #advising #cybersecurity #businessnews #businessintelligence

1

1 Comment

Hello All posting with my academic hat on today, so call all in the Glos area Please find below a message from Sophie Burch explaining all about The Gloucestershire Cyber Launchpad (GCL). Do contact me by message if you would like to be in contact with the organiser.  BEGINS It’s time to try something new in the hunt for young cyber talent, do you as employers want to be part of this scheme?   Natural cyber aptitude can be found in unexpected places, when you really look. Like in those who think differently, see things that others miss, and are naturally suited for the cyber sector. But missed out or miscategorised by the system, this tech-talent is currently being left to fall through the cracks, when it should really be filling the gaps.   That’s what The Gloucestershire Cyber Launchpad (GCL) is all about.   Supported by Cynam, GCL is a collection of responsible, open-minded, and forward-thinking cyber employers who are ready to try something different. Recognising the hidden talent in the system, GCL employers will offer Cyber Security Degree Apprenticeships to those gifted individuals currently left out – including young people who are neurodivergent and those who would otherwise miss out on higher education opportunities.    As the educational provider in this scheme, University of Gloucestershire talent scouts are working with schools and communities to identify candidates for these apprentice roles. GCL employers will then be able to interview and hire candidates who meet their skills requirements and organisational needs.   Once apprentices are recruited, we will work closely with each employer to support and nurture the unique skills, characters, and abilities of these young adults – as well as deliver taught content associated with the apprenticeship.   Does this opportunity sound of interest, do you want to talk over further,message me and I can link you into the team. #cynam #University of Gloucestershire

43

10 Comments

Shocking News!! A recent cyberattack against NHS provider Synnovis, has led to more than 1,100 planned operations and 2,100 outpatient appointments getting postponed. The group who carried out the attack, a Russian group called Qilin, have also reportedly published almost 400GB of data, including patients names, dates of birth, NHS numbers, and blood test descriptions. For me, this story reminds me just how ruthless cyber criminals are, how damaging (and potentially life-threatening) cyber crime can be, and how important it is for all of us in businesses and not-for-profit organisations to fight back! And, when I say fight back, that doesn’t just mean installing the latest cyber security software and sitting back… …it also means getting staff trained on how to spot and avoid potential attacks, and how they can lessen the damage if an attack happens, especially when you consider that a staggering 95% of cyber attacks are down to human error - a fact you can read more about in the link below ⏬ https://lnkd.in/gVUF3YyY If you’d like to get your staff trained in cyber awareness, call 01525 331060 to speak directly to me or one the JamCrackers team about our affordable, online Cyber Awareness Training. www.jamcrackers.co.uk #CyberSecurity #NHSCyberAttack #DataBreach #StaySafe

5

Attack surface reduction is one of the most effective (and sadly one of the most underused) ways to increase security. Hitting the power button on legacy infrastructure helps to improve security and the environment. #turnitoff

2

In the same way you have a backup broadband connection with a different service provider in the event your main connection goes down, it’s probably time for the dust to be blown off alternative navigation systems and decreasing reliance on GPS as the sole navigation system. Whether it’s map and compass, inertial navigation with lasers, visual comparison navigation or celestial navigation (with its obvious limitations), we’ve got to stop relying on single, exploitable points of failure. Navigation aids, like AI, should merely be thought of as tools in a toolbox. The more tools you have that are capable of doing the same job, the more resilient and effective you’ll become. Ditching the selection of tools in favour of one single tool might make for a lighter load to carry but it’s a long walk back to get proficient with another tool when the only one you have breaks. So think about this problem when you’re considering replacing “people” with “AI”. A polluted data lake feeding your AI won’t make you more competitive…

9

2 Comments

Any recommended Youtube | Podcasts | Blogs for latest breach/vuln news? Like something technical, but also something I can grasp and understand the impact of a given breach/vuln in the wild. Comment below.

1

11 Comments

Sorry but this feels insane to me! If you're a provider of SOC 2 reports, and you allow your auditee to put periodic in their control testing for their SOC 2 Type 2 report. What exactly are you testing as part of that control that it operates in an ad-hoc manner? Am I missing something? I understand firms want to 'de-risk' their reports, but it also removes the value and validity of the control testing. How do you reviewing access quarterly or within 24 hours of a user terminating when your report states you do it periodically? #SOC2 #VendorManagement #AICPA

11

1 Comment

Having a 27001 certificate doesn't necessarily mean you are 'more secure' than a company who hasn't certified. It simply means you are managing information security risk to a level which is deemed sufficient by a certification body. Take this in to consideration when you're completing supplier due diligence and the only question you ask is 'are you 27001 certified?' If you're not sure what questions you should ask as part of your supplier due diligence process, drop me a PM and I'll see if I can give you some pointers.

20

5 Comments

Here's the bottom line: if you're running CentOS Linux in your business, you should be aware CentOS will no longer exist as a supported production environment after 30 June. That means that you will no longer receive security updates or critical fixes for your operating system. If you are currently using CentOS, it is important to start planning your migration to an alternative option. This could include moving to CentOS Stream, which will continue to receive updates, or switching to another Linux distribution altogether. Remember, it's crucial to have a plan in place before the end of June to ensure the security and stability of your business systems. Stay informed and take action now to avoid any potential disruptions. PM me if you need a hand. The image used is licensed under the Creative Commons Attribution-Share Alike 3.0 Unported license. #linux #centos #linuxsupport

3

2 Comments

Here's the bottom line: if you're running CentOS Linux in your business, you should be aware CentOS will no longer exist as a supported production environment after 30 June. That means that you will no longer receive security updates or critical fixes for your operating system. If you are currently using CentOS, it is important to start planning your migration to an alternative option. This could include moving to CentOS Stream, which will continue to receive updates, or switching to another Linux distribution altogether. Remember, it's crucial to have a plan in place before the end of June to ensure the security and stability of your business systems. Stay informed and take action now to avoid any potential disruptions. PM me if you need a hand. The image used is licensed under the Creative Commons Attribution-Share Alike 3.0 Unported license. #linux #centos #linuxsupport

1

Here's the bottom line: if you're running CentOS Linux in your business, you should be aware CentOS will no longer exist as a supported production environment after 30 June. That means that you will no longer receive security updates or critical fixes for your operating system. If you are currently using CentOS, it is important to start planning your migration to an alternative option. This could include moving to CentOS Stream, which will continue to receive updates, or switching to another Linux distribution altogether. Remember, it's crucial to have a plan in place before the end of June to ensure the security and stability of your business systems. Stay informed and take action now to avoid any potential disruptions. PM me if you need a hand. The image used is licensed under the Creative Commons Attribution-Share Alike 3.0 Unported license. #linux #centos #linuxsupport

7

3 Comments