Brian Waala

A new CIS/MS-ISAC report sheds light on #TribalSector #cyberthreats and concerns. What is keeping tribal cybersecurity leaders up at night? Link to the full report in our summary. https://bit.ly/4h7PGlr Center for Internet Security Cybersecurity and Infrastructure Security Agency #TribalOrganizations #TribalNet #Cybersecurity #CyberRisk #Ransomware #CybersecurityAwarenessMonth #CyberCrime #SocialEngineering #InformationSecurity #DataBreach #CyberMaturity #ThinkEXTEND

5

What's the best way to protect #CUI? Find out in our ebook: https://ow.ly/xAXf50Q5GV3 Includes scoping diagrams, process flows, team exercises and more. #DoD #cybersecurity #DIB #govcon #governmentcontracting #cmmc #cmmc2 #dfars #nist800171

4

What's the best way to protect #CUI? Find out in our ebook: https://ow.ly/xAXf50Q5GV3 Includes scoping diagrams, process flows, team exercises and more. #DoD #cybersecurity #DIB #govcon #governmentcontracting #cmmc #cmmc2 #dfars #nist800171

3

This week's podcast, CIRCIA Rulemaking: Double Incident Reporting for the DIB. Defense contractors have had cyber incident reporting obligations under DFARS clause 252.204-7012 for many years. Recently, however, CISA issued a 457-page proposed rule implementing the 2022 Cyber Incident Reporting for Critical Infrastructure Act. Unless CISA and DoD can reach an agreement, DIB contractors will have duplicative incident reporting obligations for two different agencies. Links to watch/listen are in the comments ⬇ #DIB #DOD #cyber

14

2 Comments

We are setting the standard and @Gartner agrees! "HyperSphere is the first and only solution to have a published NIST National Checklist hardening guide derived from NIST 800-53 rev5 and aligning to both FISMA and DoD IL4 baselines." 👉 https://lnkd.in/einirruU #Gartner #CyberCompliance #SecurityStandard

13

🗞️ In CyberScoop: "[T]he years of work to build up federal collaboration with industry are paying off, from the Joint Cyber Defense Collaborative to the National Risk Management Center — the 'proto' version of the JCDC, [Chris Krebs] said — to the National Security Agency’s Cybersecurity Collaboration Center. "'We’re starting to see that these things work with the resources and time into it, but it’s generating results and there’s no better evidence of the results, I think, than when Russia invaded Ukraine, and the ‘Shields Up’ campaign and the breadth to which that was able to change behavior in industry,' said Krebs, now chief intelligence and public policy officer at SentinelOne." To learn more, read the full article by Tim Starks: https://s1.ai/CS-Collab

42

CISA released some new guidelines on best practices for event logging and threat detection. Use these to fortify your defenses.     https://lnkd.in/gnejH8dw Fast response, fixed right the first time. To learn more or get support, visit  https://uptechit.net/.    #Cybersecurity #EventLogging  #ITsupport #managedITservices #dedicatedIT #desktopsupport   

5

Join us on Wednesday, May 29th at 8:30 AM to discover how CERT Ukraine and CISA work together to combat cyber threats! Limited tickets available - act fast! Link in bio for more details and to get tickets. #CERTUkraine #CISA #CyberDefense #Collaboration #CyberSecurity.

12

What does CMMC entail? CMMC serves as a validation of a contractor's cybersecurity posture. Mandatory for all DoD contractors and subcontractors handling CUI, CMMC compliance mandates adherence to NIST SP 800-171 controls, verified through third-party certification. Achieving CMMC compliance is not only crucial for securing contracts with the DoD but also for demonstrating your commitment to safeguarding sensitive data. https://cmmc.smeinc.net/ #IYKYK #CMMC #DoD #Cybersecurity #SMEInc

1

Unlock actionable intelligence faster with GrayKey, empowering you to solve cases quickly, reduce crime in your community, and maximize your mobile forensics investment. With GrayKey, you gain... Technical Features: • Faster brute force access to iOS and leading Android devices, unlocking critical evidence. • Ability to access and extract data from devices, regardless of their state. • Access to credential stores like Keychain and Keystore, potentially decrypting previously inaccessible content. • Category-Based Extractions to target specific data efficiently. Evidentiary Results: • Protect your community with real-time information through swift extractions. • Bring closure to victims by obtaining in-depth data to help bring criminals to justice. • Solve more cases by accessing devices quickly and securing vital evidence sooner. • When time is critical, selectively extract the specific data needed to jumpstart your investigation. Discover how GrayKey can enhance your investigations today. www.claritasinsight.com #OnlineInvestigations #CyberSecurity #MobileForensics #CLARITAS

1

Tired of managing security testing across a scattered team? AttackIQ Mission Control centralizes control testing for faster remediation and improved ROI. 📅 Join Jose Barajas at 10 AM PT/12 PM CT/1 PM ET on July 18th to learn how AttackIQ Mission Control streamlines security operations for organizations. Discover how to seamlessly orchestrate testing across departments and locations, gain insights specific to your role with role-based dashboards, and simplify testing workflows for faster results. ➡ Register today and optimize your #SecurityOperations: https://bit.ly/3RZa5hw #LinkedInLive #Cybersecurity

13

Does being compliant with CMMC really matter right now? A small fraction of defense contractors have already done the hard work to prepare for these critical requirements to protect our national defense infrastructure. For the remaining ~200,000 contractors, it is a risk management decision. Can you afford to lose contracts with those clauses? Would your business stay afloat without that government customer? Could waiting hurt your business and bottom line? We have seen companies lose HUGE contracts that resulted in having to layoff people who have been there for 20 years. This stuff has a huge impact. Don’t think that you have to do it all at once! You just need to start with a solid plan and a budget. When you do this, you are ahead of the majority and will be on your way to a competitive advantage before you know it. The hardest part is getting started. Feeling stuck? Valor Cybersecurity is here to help you get ready. #cybersecurity #defense #compliance #dod

6

Turbocharge your Incident Response readiness with Natsar's Cybersecurity Program Bundle. 17 docs, NIST-based plan, policy, templates. Save 10% when bundled. #IncidentResponse #CyberSecurity https://zurl.co/F3qD

2

CISA outlines what steps school districts can take to understand and respond to anonymous threats. It also provides advice for staying prepared for future incidents and coordination with law enforcement or other local partners. #ThreatResponseGuide #K12schools #ThreatManagement #ValentinoSignatureServices #BePrepared #PurposePassionIntegrity

4

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has added three new flaws in its Known Exploited Vulnerabilities (KEV) catalog, including a critical OS command injection impacting Progress Kemp LoadMaster. https://lnkd.in/e6snbZh4 #rhymtech #thinkcyberthinkrhym #rhymcyberupdates

3

Mastering Risk with MITRE ATT&CK and CTEM is tomorrow! Join Hive Pro on Thursday, December 12th, 2024, at 9 AM PDT / 12 PM ET, for a webinar on leveraging MITRE ATT&CK and Continuous Threat Exposure Management (CTEM) - https://hubs.li/Q02-PF7p0

8