Feroz Merchhiya, CGEIT, CRISC, SCPM, QTE, FACHDM

If you are in Higher Ed and you have implemented the HIPAA Compliance for Google Workspace, I would greatly appreciate if we can connect. We are confused by some of the instructions we see in this guide - https://lnkd.in/g_wAYtbt - and would love to learn how others have implemented it so we can apply them to our instance. Thanks in advance.

9

1 Comment

The Cybersecurity Maturity Model Certification (CMMC) is designed to enforce protection of sensitive unclassified information for government contractors. But you don't have to start from square one. Learn about CMMC level 1 on the blog and discover how to set your organization up for success in cybersecurity. https://hubs.li/Q02KCvcD0 #cmmc #federalcontractor #compliancetips

16

1 Comment

Join Sunjay Sood and Al Miralles for an exclusive webinar where they dive into our strategic approach to tech investments and decision-making. Discover how we prioritize and organize our work to meet CDW's critical demands, harnessing our team's energy and creativity. Don't miss out on insights that can transform your tech strategy! #TechInnovation #FutureTech #StrategicInvestments https://dy.si/f2ype

6

K-12 schools cyber security challenges and mitigation K-12 schools face a variety of cybersecurity challenges that are critical to address in order to protect sensitive data, ensure the continuity of education, and maintain a safe digital environment for students, staff, and faculty. By proactively addressing these challenges, K-12 schools can better protect their digital environments and ensure a safer, more secure learning experience for all. Here are some of the key cybersecurity challenges in K-12 schools: 1. Limited IT Resources 2. Inadequate Security Awareness and Training 3. Outdated Infrastructure 4. Increased Use of Technology and Remote Learning 5. Sensitive Data Protection 6. Cyberattacks and Ransomware 7. Third-Party Vendor Risks 8. Cyberbullying and Online Safety 9. Policy and Governance 10. Physical Security   Mitigation Strategies: To address these challenges, K-12 schools can consider the following strategies: - Invest in Cybersecurity Training: Regular training for students, teachers, and staff to build awareness and resilience. - Upgrade Infrastructure: Allocate budget for updating hardware and software, and implementing modern security measures. - Develop Incident Response Plans: Establish and regularly update incident response plans to prepare for potential cyberattacks. - Enhance Data Protection: Implement strong encryption, access controls, and regular audits to safeguard sensitive data. - Engage with Vendors: Ensure that third-party vendors adhere to high security standards and conduct regular security assessments. - Implement Monitoring Tools: Use cybersecurity tools to monitor networks, detect threats, and respond promptly to incidents. For more information about XeneX support for K-12 cyber security needs and a more detailed version of this blog please visit us at www.xenexSOC.com #cybersecurity #soc #compliance #incidentmanagement #cyberinsurance

5

Huge thanks to Sonja Hammond, CISSP, PCI-ISA National Veterinary Associates and Baylor University - Hankamer School of Business! Appreciate your collaboration on this article to help protect businesses and our four-legged friends! Bindu Sundaresan

73

4 Comments

Defense contractors will soon be required to achieve Cybersecurity Maturity Model Certification (CMMC) Level 3 by implementing additional security controls. This expected shift creates an urgency for government contractors and subcontractors to assess and upgrade their cybersecurity frameworks. While implementing additional security controls over sensitive information can be costly, SOSi VP of Enterprise IT Andrew Bream, PMP says a hybrid approach that blends a FedRAMP High and a commercial cloud environment can provide an efficient solution. Read more about about Andrew’s hybrid approach that balances financial and operational burdens in this Washington Technology article: https://lnkd.in/eTQuDDpx #CMMC #CybersecurityCompliance #DefenseContractors #HybridCloudSolution #CostEffectiveCybersecurity

6

I really appreciate K12 SIX and Douglas Levin's proactive approach to K-12 cybersecurity. Instead of just reacting to incidents, he's equipping schools with the practical tools and knowledge to get ahead of the curve - and genuinely making a difference. This kind of forward-thinking leadership is essential in today's threat landscape. #cybersecurity #education.

23

Simplify Your CMMC Level 1 Self-Certification! Understanding System and Communications Protection (SC) is crucial to safeguarding your business. Learn how to: ✅ Verify and control external connections like USBs and networks. ✅ Restrict sharing sensitive information on digital platforms. 🔗 Watch the full video for actionable tips: https://lnkd.in/esr3hmdN 💡 Stay ahead of the cybersecurity curve—protect your organization today! 👉 Follow us for more insights and compliance tips. #Cybersecurity #CMMC2020 #CMMCCompliance #DataProtection #CyberThreats #InfoSec #SmallBusinessTips #CyberHygiene #ComplianceMadeSimple #BusinessSecurity #HowToBecomeaCMMCLevel1SelfCertified

3

Insider threats are a risk for your business as well as your vendors & consultants. Interview tough, run those background checks, have a third-party risk management program, and make sure you have a solid plan for asset management and DLP!

16

📚 Unlock the secrets of CMMC with our eBook: "The Alphabet Soup of CMMC: Common Terms Defined And Your Recipe for Success." Get clarity on the essential terms, acronyms, and concepts shaping cybersecurity discussions. Whether you're new or seasoned, this guide has insights for everyone. 🔍 Decode the jargon, understand compliance, and fortify your security posture. But that's not all! We go beyond definitions, offering a roadmap for CMMC success. Learn how to blend compliance, security, and efficiency seamlessly. 💡 Download now for a comprehensive CMMC journey. Secure your business, streamline processes, and elevate your cybersecurity game. Don't miss out! #CMMC #Cybersecurity #eBook #DownloadNow https://lnkd.in/gTckemEF

3

The determination of your organization’s required CMMC certification level is the responsibility of the contracting agency. Requests for Information (RFIs) and Requests for Proposals (RFPs) will specifically list the required CMMC certification level. But waiting for an RFI or RFP before implementing the requirements will likely put your organization behind in the bidding process. A better approach is for your organization to get an idea of the types of RFIs and RFPs to which they will be responding or to have direct communications with their customers on the expectations as to the level of unclassified sensitive information they will be required to handle. At the core of the CMMC certification level determination is the type of information processed by the contracting organization. For those contractors (primes and subs) within the DIB, the following CMMC framework levels apply based on the data processed within the contractor’s information systems. • CMMC Level 1: Non-federal organizations processing FCI are required to meet the cybersecurity requirements at CMMC level 1. This level encompasses the basic safeguarding requirements for FCI specified in FAR Clause 52.204-21. • CMMC Level 2: Non-federal organizations processing CUI are required to meet the cybersecurity requirements at CMMC level 2. This level encompasses the security requirements for CUI specified in the NIST SP 800-171 Rev 2 per DFARS Clause 252.204-7012. • CMMC Level 3: Non-federal organizations processing CUI that is determined to be an HVA, critical program, or otherwise required to reduce the risk of Advanced Persistent Threats (APTs) must implement CMMC level 3. The required CMMC level is determined by the Federal government and specified in the RFI or RFP. The security requirements at this level contain a subset of the security requirements specified in NIST SP 800-172. Lantego can help organizations with CMMC preparation: https://buff.ly/4ceCp7I

1

Transform your government contact center by learning how AI-driven strategies can enhance citizen satisfaction, reduce costs, and increase operational efficiency. https://ivision.link/uhuK9

13

The technology vendor space is evolving extremely fast, the technology vendors of the past are forced to make innovative products & services and respond faster. To get to those operating characteristics, the technology vendors are moving their products to a technology vendor who has built solutions of the new age. [In contrast to bulk of the other moves of start-ups and new-age companies being acquired by the established companies] IBM SIEM merging with Pala Alto networks or sometime back Veritas and Cohesity. With established technology vendors bringing in customers and the new technology vendors having the right technology, it is an effective way to remain relevant and grow.

4

Guardrails and guidelines are required to remain diligent with innovation. Efficiency from AI is wonderful, but make sure it doesn't put you at risk unnecessarily. #impactful #leading #BusinessResiliency

1

Today’s complex data environment requires greater granularity and multiple factors in access control decisions – beyond just identity.  Improve your security and risk posture with zero trust architecture. #GartnerSEC #Cybersecurity #ZeroTrust 

9