Queensland Government’s Post

Government of Canada’s - Enterprise Cyber Security Strategy The Government of Canada’s Enterprise Cyber Security Strategy is a plan to improve cyber security across government departments and agencies to continue to provide secure and reliable digital government services. It serves as a framework to move the government even more from a defensive position to a proactive cyber security approach by improving training, applications, policy, and monitoring. The strategy is built on 4 strategic objectives to help federal organizations take a broader, enterprise-wide approach to protect their systems against cyber risks: Articulate cyber risk and its business impacts meaningfully for effective, action oriented, and accountable decision-making Prevent and resist cyber-attacks more effectively towards a greater protection of GC information and assets Strengthen capabilities and resilience across the GC to proactively prepare for, respond to, and recover from cyber events Foster a diverse GC workforce with the right cyber security skills, knowledge and culture https://lnkd.in/erem5UfN

PHISHING, VISHING AND SMISHING ...these are terms for ways, through email, phone and text respectively, that unscrupulous people use to try and trick you into doing something by making you think the communication came from someone you know. They might try to make you part with money or personal information like passwords. (For a glossary of terms, see the UK Cyber Security Council website at https://lnkd.in/eVSHQ3yu) These are person-to-person scams which rely on your ability to spot the fakes but sophisticated #cybersecurity threats to organisations can be much harder to detect and stop. Success for the cyber criminals can mean significant disruption, and financial and reputational damage to the organisations targetted. People are a factor in such incidents but are rarely the root cause. Instead, the root cause is often a systemic, organisational failure that needs addressing otherwise it will continue to influence cyber security performance. Amanda Widdowson, Thales' Design & HF Discipline Manager, gave a lecture on this topic at #EHF2024 and emphasised how #humanfactors can help mitigate the potential for people to unwittingly assist a breach. Amanda is lead author on a CIEHF publication, The role of human factors in delivering cyber security, which gives recommendations relating to behaviour change, cyber security maturity levels, organisational resilience, board decision-making and presentation of cyber security information. Read more at https://lnkd.in/dJwHnDHp #ergonomics

Want to know why Americans are hacked more than any other citizen in the world? The status quo of Americans in the realm of cyber security is meeting the bare minimum. Very few companies actually invest in their cyber security posture. It doesn't even have to be the most expensive options, it can be done on a shoe string budget. But more often than not, when we at JRPC InfoSec, engage a company in an Incident Response, we discover at least one if not multiple of the following: 1. EDR tools not being monitored 2. Improper implementation of MFA 3. Lack of IAM hygiene 4. Shadow IT with massive vulnerability 5. Weak passwords policies 6. No email security control 7. No Incident Response plan 8. No Data Loss Prevention in place 9. "But we got SOC2 or <insert x certification> certified bro, we didn't think we could get hacked!" 10. They think their MSP, internal IT team, is a security team 11. Their MSSP is complete garbage Large company or small business, these are the trends we see on an almost weekly basis...

While cyber security requires quality tools and technology, people and the values they bring to their role are still essential for success. #cybersecurity #securityprofessionals #informationsecurity

Have you read the latest guidance material on the Incident Response Planning Enhanced Cyber Security Obligation for declared Systems of National Significance (SoNS)? An incident response plan outlines how an organisation will respond to a cyber security incident. The plan should provide those involved in the response with a clear understanding of ‘what to do’ and ‘who to call’ to minimise the impact of an incident and continue to provide essential services to the community. We strongly encourage all critical infrastructure organisations to have incident response plans in place, and to regularly test these plans via cyber security exercises. Organisations who do this will be well-placed to respond to an incident -making Australia a more secure and resilient nation in the face of rising cyber security threats. Read the Incident Response Planning Enhanced Cyber Security Obligation guidance material here👉 https://lnkd.in/gVZD_7Xz

🔒 Cybersecurity for Small Businesses 📊 Worried about digital foes knocking on your cyber door? The Canadian Centre for Cyber Security has a remedy! Here are some key takeaways from their recent guidance for small and medium organizations: 🛡️ Implement baseline cyber security controls - a cost-effective shield against cyber threats. 💡 Stay ahead of the game by having an incident response plan and keeping systems updated. 🔒 Secure your devices, back up data, and encrypt like it's nobody's business. 📚 A little training goes a long way - educate employees on the dangers of phishing. 🌐 Establish secure cloud and outsourced IT services to fortify your digital fortress. Cyber threats don't discriminate, so whether you're in healthcare or hospitality, these practices are your digital armor. Ever heard of CyberSecure Canada? It's like a badge of honor for organizations that ace cybersecurity basics! Stay savvy, stay secure. Your cyber security is your best defense. 💻🔒 https://lnkd.in/gMtXGgzs

While cyber security requires quality tools and technology, people and the values they bring to their role are still essential for success. #cybersecurity #securityprofessionals #informationsecurity

In Malaysia, a Sophos study reveals widespread burnout among cyber security and IT professionals, affecting their diligence and contributing to security breaches. Key causes include resource scarcity, executive pressure, alert overload, monotony, and increased threats. Solutions call for organizational support, attitude shifts, and improved governance to foster cyber resilience. Read full news 👉 https://lnkd.in/ggibu-AG #CyberDSA2024 #cybersecurity #cyberresilience #digitalwellbeing

With the rise of home and hybrid working the risk of a cyber attack has also grown. Here’s an informative article giving tips on cyber security protocols for businesses offering remote working. These include… -        Establishing a strong identity governance platform -        Having a zero-trust security model -        Implementing a thorough inventory of assets -        Using a quantum-enabled comms network  -        Upskill your teams so they know the risks -        Establish strong firewalls -        Multi-factor authentication (see my previous post!) I’d be interested to know how many of these are being used by your business. https://lnkd.in/gpA5T3pN

Majority of cyber security, IT professionals in Malaysia experiencing burnout and fatigue, says Sophos - The Edge Malaysia: Majority of cyber security, IT professionals in Malaysia experiencing burnout and fatigue, says Sophos  The Edge Malaysia #CyberSecurity #InfoSec #SecurityInsights