CyberRisk Alliance’s Post

A great organization that can be leveraged to significantly improve your security awareness program.

𝐖𝐡𝐲 𝐃𝐢𝐝𝐧'𝐭 𝐘𝐨𝐮 𝐂𝐚𝐭𝐜𝐡 𝐭𝐡𝐞 𝐁𝐫𝐞𝐚𝐜𝐡? I recently watched a talk by Mark E.S. Bernard, CISO, CIO, PM, Architect that discussed the question of 𝐰𝐡𝐲 𝐜𝐲𝐛𝐞𝐫 𝐛𝐫𝐞𝐚𝐜𝐡𝐞𝐬 𝐨𝐟𝐭𝐞𝐧 𝐠𝐨 𝐮𝐧𝐝𝐞𝐭𝐞𝐜𝐭𝐞𝐝. It made some great points, and I wanted to share them. After a breach, it's important to ask these questions: - 𝐖𝐚𝐬 𝐢𝐭 𝐚 𝐡𝐮𝐦𝐚𝐧 𝐞𝐫𝐫𝐨𝐫 𝐨𝐫 𝐚 𝐭𝐞𝐜𝐡𝐧𝐨𝐥𝐨𝐠𝐲 𝐞𝐫𝐫𝐨𝐫? This could be Phishing or Software Vulnerability. - 𝐖𝐚𝐬 𝐢𝐭 𝐝𝐮𝐞 𝐭𝐨 𝐰𝐞𝐚𝐤 𝐆𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞? Do we have clear policies, process and procedures? and are we ensuring that they are followed? - 𝐖𝐚𝐬 𝐈𝐓/𝐈𝐓 𝐚𝐮𝐝𝐢𝐭 𝐧𝐨𝐭 𝐜𝐨𝐦𝐦𝐮𝐧𝐢𝐜𝐚𝐭𝐢𝐧𝐠 𝐰𝐢𝐭𝐡 𝐨𝐭𝐡𝐞𝐫 𝐠𝐫𝐨𝐮𝐩𝐬 𝐥𝐢𝐤𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲? 𝐨𝐫 𝐢𝐭 𝐜𝐨𝐮𝐥𝐝 𝐛𝐞 𝐭𝐡𝐞 𝐨𝐭𝐡𝐞𝐫 𝐰𝐚𝐲 𝐚𝐫𝐨𝐮𝐧𝐝? - 𝐀𝐫𝐞 𝐰𝐞 𝐚 𝐯𝐢𝐜𝐭𝐢𝐦 𝐨𝐟 𝐨𝐮𝐫 𝐨𝐰𝐧 𝐜𝐮𝐥𝐭𝐮𝐫𝐞? Does the organization support the interaction between departments on incident response situations? - 𝐖𝐚𝐬 𝐢𝐭 𝐚 𝐬𝐨𝐩𝐡𝐢𝐬𝐭𝐢𝐜𝐚𝐭𝐞𝐝 𝐚𝐭𝐭𝐚𝐜𝐤? Was it a known vulnerability or Zero day? - 𝐖𝐚𝐬 𝐢𝐭 𝐝𝐮𝐞 𝐭𝐨 𝐥𝐚𝐜𝐤 𝐨𝐟 𝐠𝐮𝐢𝐝𝐚𝐧𝐜𝐞? Are the employees get guidance from experienced members on their teams? - 𝐖𝐚𝐬 𝐢𝐭 𝐝𝐮𝐞 𝐭𝐨 𝐥𝐚𝐜𝐤 𝐨𝐟 𝐤𝐧𝐨𝐰𝐥𝐞𝐝𝐠𝐞? This could be a lack of knowledge about security risks, or a lack of knowledge about how to protect against those risks. By asking these questions, organizations can learn from their mistakes and take steps to prevent future breaches. The link for the talk: https://lnkd.in/dqwc2FhC

Secure your spot for an Executive Interview at RSA Conference! Amplify your voice, showcase your solutions, and be part of the cybersecurity narrative. Act fast! Book now. #RSAC2024 #Cybersecurity #ThoughtLeadership

Some of the team have been away for #SANS #DFIR Summit, #BSides and #defcon31 and have recorded a #Cybeers #USA special! Nick, Rich and Milan talk about their key takeaways from each these conferences as Digital Forensics and Incident Response analysts. Did we also get a possible hint about #expansion of the #UK team? 😉 I'd say I'm jealous, but I struggle with 20C+ and I saw the temperatures being posted! Check the episode out, below 👇 https://lnkd.in/eSuYq8kY

🚀 Dive into the future of cybersecurity disclosure with Jacob Olcott VP of Government Affairs at Bitsight! Join us at SecureWorld Midwest Virtual Conference on November 15, 2023, at 12:00 pm for an exhilarating session on meeting the SEC's new disclosure requirements. Discover how tech leaders can powerfully convey their company's cybersecurity narrative. Get ready to unravel what investors crave to know about cybersecurity! Don't miss out on understanding the new regulations, exploring live success stories, and envisioning the road ahead. 📈 🔍 https://bitsig.ht/3FW2OIT #CyberStoryTeller #SECInsights #SECCompliance #SECregulations