David Sherry

Today, the Cybersecurity and Infrastructure Security Agency released the Connected Communities Risk Postcard series. The risk postcard series is represented by three double-sided postcards, each featuring a risk to connected communities on the front, and mitigation recommendations on the back as outlined in the Cybersecurity Best Practices for Smart Cities. (Thank you Marina Lail Kelly). https://lnkd.in/e3Rpv3Yq

13

Great conference: theme “Strengthening Ecosystems: Aligning Stakeholders to Bridge the Cybersecurity Workforce Gap” #CyberSecurity #NICEConference #ProfessionalDevelopment #CyberWorkforce #Networking #Innovation

16

Meet Jessica Hoffman, CISSP , the new voice of CISO Stories! With her extensive background in cybersecurity, she’s ready to dive into critical topics and engaging discussions. Jessica has dedicated her career to safeguarding sensitive information like Personally Identifiable Information (PII), Protected Healthcare Information (PHI), and Federal Tax Information (FTI). Learn more about her journey in our blog: https://bit.ly/4elQ6m6 #cybersecurity #CISOStories #podcast #PII #PHI #FTI

2

2 Comments

A really insightful conversation with the CEO of ISC2, Clar Rosso! I think many will enjoy it! Listen on Apple, Spotify, and YouTube! ISC2 Los Angeles Chapter

16

As with all emerging technology, it can be difficult to wrap your arms around the true risk, steering clear of FUD, when there are so many unknowns and things are changing every week. It's really important to keep a learning mindset and seek out information about the new types of risk AI deployment in your organization creates BUT also to look at risk that has already been accepted because it falls within the risk tolerance or appetite and understand how AI might impact that risk such that it changes where it falls in the amount of risk the org is willing to take on. #cybersecurity #riskmanagement #AI

3

What a day! I'll leave this here without further commentary: One commenter sought clarification of whether the definition encompasses accidental incidents, such as chance technology outages, that do not involve malicious actor, while another commenter advocated broadening the definition to any incident materially disrupting operations, regardless of what precipitated it.[1] * * * We are also retaining “unauthorized” in the incident definition as proposed. In general, we believe that an accidental occurrence is an unauthorized occurrence. Therefore, we note that an accidental occurrence may be a cybersecurity incident under our definition, even if there is no confirmed malicious activity. For example, if a company’s customer data are accidentally exposed, allowing unauthorized access to such data, the data breach would constitute a “cybersecurity incident” that would necessitate a materiality analysis to determine whether disclosure under Item 1.05 of Form 8-K is required.[2] [1] Pages 72-73 [2] Page 78 https://lnkd.in/gCeT8qPP #SECcyberrule #incidentresponse #SEC

29

1 Comment