Simon Rycroft’s Post

Huge thank you to Ong Johnson, Khai Yi Lo and the team at Halim Hong & Quek, a member firm of Andersen Global for having us yesterday. It was a great session sharing one of S-RM cyber training series, "The First 48 Hours," which provided an overview of what a cyber incident response typically entails, including recommendations and common missteps to avoid.   From our experience in dealing with cyber incidents, the first 48 hours are often the most critical. The decisions and actions taken during this vital period can have significant impacts on the overall response.   Taking the right actions early can prevent further harm and stop the threat actor from maintaining or regaining access to the network. This allows attention and efforts to be focused on restoring and recovering systems, ultimately minimizing business interruption, which is often the most costly aspect of a response and notoriously difficult to quantify. Mark Farley Shradha Borar Kyle Schwaeble #yourfirstcall #incidentresponse #cyber

What types of #cybersecurity #incidents represent the highest risk? This chart from Cyentia Institute's Information Risk Insights Study (IRIS) 2022 makes a strong case for network and system intrusions. It's based on the relative frequency and financial losses from 77,000 cyber events experienced by 35,000 organizations over the last decade. Being the sole pattern in the dreaded upper-right quadrant, system intrusions are far and away the riskiest incident pattern. They account for about half of all events as well as half of total losses recorded over the last decade. While not part of this particular analysis, our studies of extreme and massive multi-party events point to the exploitation of valid accounts (T1078) and public-facing applications (T1190) as the primary initial access techniques for system intrusions. Download the IRIS 2022 (no registration req'd): https://lnkd.in/e_BGmwT #cybercrime #cyberattacks #cyberrisk

The superlative Richard Clarke, Lonestar Advisory Board Member, speaking with CNN this morning on the the current cyber disruption. Sincere words of wisdom. If you've not yet read The Fifth Domain: Defending Our Country, Our Companies, and Ourselves in the Age of Cyber Threats or Cyber War: The Next Threat to National Security and What to Do About It, or Warnings: Finding Cassandras to Stop Catastrophes....we highly recommend ALL.

Recently, I had the opportunity to share my insights on the challenges of quantifying #cyberrisk and its implications on businesses, irrespective of their industry and size on the Australian Broadcasting Corporation (ABC). The episode also sheds light on the recommended steps by the Australian Signals Directorate for businesses targeted by cyber attacks and offers best practices to mitigate cyber risks similar to those recommended by TNK. Listen to the episode here: https://lnkd.in/gc3Vgr-H #CyberRisk #CyberInsurance #AustralianSignalsDirectorate #ABC #TheMoney #Hackenomics #TNK

Digital Identities Have Evolved — Cyber Strategies Should Too: The scale of identity exposure has increased significantly, with over 90% of surveyed organizations reporting an identity-related breach within the last year. These attacks have long-lasting consequences – SpyCloud’s 2024 Identity Exposure Report found... The post Digital Identities Have Evolved — Cyber Strategies Should Too appeared first on Cyber Defense Magazine. https://lnkd.in/g-pgAHsE

Cyber threats are a gamble you can't afford to take with your deals. RSM's IT and cyber due diligence services minimize disruptions and maximize success. Protect your investments from costly consequences: Neal Cao Kevin Carpenter Craig Coffaro

In the two years leading up to January 2024, almost 700 cyber incidents were reported among Russell 3000 companies in the U.S., impacting more than 10% of the firms. One-third of those involved the compromise of a supplier or other third party, and a new study by ISS-Corporate also identified substantial third-party aggregate risk concentration across Russell 3000 firms. Read the full analysis by Douglas Clare, Managing Director, Cyber Strategy, and Brian O'Leary, Senior Associate, Cyber Advisory: https://lnkd.in/gKQCjGEg Learn more about our cyber risk solutions here: https://lnkd.in/eGn-9c9X #CyberRisk #CyberBreaches #Russell3000

We enjoyed an excellent exchange of lessons learned from #cyber incidents this week, when we hosted a “War Room in the War Rooms”. Kekst CNC’s Callum Laidlaw and Mikey Hoare partnered with experienced breach counsel Ellie Ludlam for Pinsent Masons, cyber forensic specialists S-RM's Daniel Caplin and tech consultancy Alchemmy's Phil Aitchison for a discussion on how to prepare for, and manage, cyber threats. Held in the unique location of London’s Churchill War Rooms, the intimate event allowed participants to share and discuss what keeps them awake when it comes to data security; from geopolitical actors to screengrabs of ransom notes. Key takeaways? Prepare for the worst, focus on compliance and control of your message, don’t get bounced into communicating before you have confidence in what you’re telling people, and make sure that you not only have a cyber plan, but you test it (with your teams) to make sure it would work in action. #cybersecurity 

Can't wait to hear the discussion on the Cybersecurity Acquisition Policy #cyber #acquisition #procurementleaders #strategy #cyberfuture2024 GTSC's Homeland Security Today

Today the Australian Department of Home Affairs and Cyber Minister Clare O'Neil will release the newest Cyber Security 💻 strategy for 2023-2030, I have taken the key points from the IT News article and summarised them below. 🔽 Let me know your thoughts on the new strategy and what opinions you might have in the comments! 💬 Find the IT News article here: https://lnkd.in/ghWzzhyg #canberracyber #federalgovernmentcyber #departmentofhomeaffairs