Howard Latham

Timely breach notifications are critical for data security. Find out why a Wisconsin county is under scrutiny for delaying a breach notification by 11 months. https://hubs.la/Q02SvkHm0 #DataBreach #HIPAACompliance #BreachNotification #CyberSecurity #HealthcareSecurity #DataProtection #HIPAATimes

4

"An Indiana dental practice agreed to pay the state $350,000 and implement a long list of data security improvements following an alleged "cover up" of a 2020 ransomware data breach" -- Clearly, knowingly covering up a breach is not ok for even private entities! #Cybersecurity #LegalImplications #Law #RiskManagement https://lnkd.in/gHvZfE5s

8

Introducing Josh Kadrmas, a member of our Approvals Committee, and Cyber Risk Analyst Team Lead for North Dakota Information Technology (NDIT). The Approvals Committee ensures that providers can verify their products and achieve StateRAMP Authorized status. Josh shares his experience about being a committee member, stating, "It's rewarding to know the service providers we approve are making technological advances for so many people and doing so in a secure way with privacy principles embedded within their products." Learn more about Josh and his experience at StateRAMP: https://okt.to/bVk6lX #StateRAMP #Cybersecurity #StateandLocalGovernment

16

Understanding SOC reports is crucial for effective vendor risk management. Ryan Buckner, Principal and Chief Knowledge Officer at Schellman Compliance, LLC sheds light on the importance of SOC reports, the differences between various types, and how customers can effectively review them. Listen to the full episode, out now, only on LumiQ! https://lnkd.in/gPie5745

22

Click the link below and tune in to LumiQ’s podcast as our own Ryan Buckner sheds light on the importance of SOC reports, including: ✔ Best practices for reviewing SOC reports to enhance vendor risk management ✔ The key differences between Type 1 vs. Type 2 reports ✔ Potential action items for customers reviewing SOC reports 🎧 Don't miss this insightful conversation that can empower your vendor risk management strategy!

20

1 Comment

“The days of cybersecurity being just about security are over for healthcare. The name of the game here is cyber resilience" — EVP, GRC, David Finn: https://lnkd.in/ggtfH2Aa Michigan Attorney General urges consumers to monitor their credit and other accounts after second major cyberattack on McLaren Health within the last year. McLaren Health is still determining impacts to patient and employee data, while continuing to work on restoring operations after last week's cyberattack. Some ambulances at the Michigan health system’s 13 hospitals and care facilities are still in diversion, and government officials are calling for action over the potential cybercrime and other consequences tied to the ransomware attacks and recent security incidents involving providers in the state. These secondary attacks serve as a reminder of why cyber resilience is so critical in 2024. By prioritizing effective cyber resilience, Healthcare Defenders ensure continuous improvement in their efforts to secure the digital health network. First Health provides experienced insights and expert leadership to support effective and efficient digital health cyber resiliency. For additional Cyber Resilient Digital Health insights from First Health Advisory’s Leadership sign up for First Health Fridays at https://lnkd.in/gW7T94Nu or contact us at [email protected] if you have any questions. #IncidentResponse #IR #IncidentResponsePlan #Ransomware #CISO #CIO #Compliance #DigitalHealth #HealthcareInnovation #Cyberattack #IoMT #HealthcareSecurity #OneBlood #HospitalLeadership #RiskManagement #HospitalManagement #HealthcareIT #McLaren #HealthTech #CyberRisk #PatientSafety #HealthcareCybersecurity #HIPAA

14

“There's a huge appetite for automation beyond just the SOC team. The SOC team actually benefits when, say, the IT organization is using the same platform as they are.” On the latest episode of the Riskybiz podcast with Patrick Gray, Matt Muller shares some of the ways leading organizations are shifting their approach to security orchestration and automation. Watch the full conversation: https://lnkd.in/eqqggTqq

59

Mark your calendars for the #Chicago CyberRisk #CISO Dinner on Tuesday, August 20, 2024 presented by your Chicago CISO Leadership Board, Troy Mattern, CISO of StoneX Group Inc., Bill Podborny, CISO of Constellation Brands, Shaun Khalfan, SVP, CISO of PayPal, Julie Myerholtz, VP, CISO of Brunswick Corporation, Jack Burback, CISO of Wintrust Financial Corporation, Erik Hart, CISO of Cushman & Wakefield, Sara Schmidt, CISO of US Foods, and Ricardo Lafosse CISO of Kraft Heinz at Gibsons Restaurant Group. Engage in an interactive, round-table discussion on Mitigating and Responding to Incidents. Every cybersecurity leader must adapt their approach to what makes their organization competitive in the marketplace—especially as it relates to building the relationships and processes that streamline responding to a major incident. In this collaborative discussion, local security leaders share insights on preventing and responding to incidents. Discuss: • Building relationships and processes to ease decision making • Improving key technologies to mitigate risk • Identifying key attack vector Interested in learning more before you apply? Reach out to your community cultivators, Todd Bratulich and Parham Eftekhari. CyberRisk Alliance #CISOcommunity #collaboration #networkingevent #cybersecurity #networking #CRAEvents

2

Mark your calendars for the #Chicago CyberRisk #CISO Dinner on Tuesday, August 20, 2024 presented by your Chicago CISO Leadership Board, Troy Mattern, CISO of StoneX Group Inc., Bill Podborny, CISO of Constellation Brands, Shaun Khalfan, SVP, CISO of PayPal, Julie Myerholtz, VP, CISO of Brunswick Corporation, Jack Burback, CISO of Wintrust Financial Corporation, Erik Hart, CISO of Cushman & Wakefield, Sara Schmidt, CISO of US Foods, and Ricardo Lafosse, CISO of Kraft Heinz at Gibsons Restaurant Group. Engage in an interactive, round-table discussion on Mitigating and Responding to Incidents. Every cybersecurity leader must adapt their approach to what makes their organization competitive in the marketplace—especially as it relates to building the relationships and processes that streamline responding to a major incident. In this collaborative discussion, local security leaders share insights on preventing and responding to incidents. Discuss: • Building relationships and processes to ease decision making • Improving key technologies to mitigate risk • Identifying key attack vector Interested in learning more before you apply? Reach out to your community cultivators, Todd Bratulich and Parham Eftekhari. CyberRisk Alliance #CISOcommunity #collaboration #networkingevent #cybersecurity #networking #CRAEvents

7

🚨 Breach Alert: City of Columbus, OH 🚨 Rhysida ransomware group claims to have stolen 6.5 TBs of sensitive data from City of Columbus servers after a July 18 attack. This breach led to the shutdown of multiple city services and compromised the personal information of many police officers. The stolen data includes internal logins, city databases, emergency services applications, and city video cameras. Rhysida has demanded a $1.9 million ransom. Details: ◾️ Data Compromised: 6.5 TBs of sensitive data. ◾️ Risk to Business: Rated at 1.356, indicating a severe threat level. ◾️ Current Status: The incident is under investigation by cybersecurity experts, the FBI, and DHS. Action Steps: Beyond disrupting services, attacks against municipal governments can expose highly sensitive data. Strengthen your cybersecurity posture and monitor third-party risks. Need guidance on enhancing your cybersecurity defenses? Contact Reclamere today. We’re here to help fortify your defenses against sophisticated cyber threats. #Cybersecurity #Ransomware #Reclamere #BreachAlert

5

The latest issue of The LEAD is out and Brian A. Colao's Definitive DSO Report is a must read. You won't want to miss this Fall issue. It's PACKED with valuable insights in leadership, cyber attacks, and the future of DSOs. Click here to view the digital copy: https://lnkd.in/gUs7Wrfm #Dykema2024 #TheLEAD #WomeninDSO #DSOs

60

4 Comments

Did you catch our episode about the CISA Secure by Design Pledge? Chris, Matt and Izar discuss the question: Is it really moving the industry forward or just more corporate fluff? Click to listen! https://buff.ly/3wPBbR0 #TheSecurityTablePodcast"

2

1 Comment

Please join #SilverSky in a webinar sponsored by CUNA Strategic Services as Tom Neclerio, SilverSky’s CISO, reviews the benefits of using Continuous Validation Testing to improve your Credit Union’s cybersecurity posture. Tom will cover how this improved testing works and how it better protects against new and known vulnerabilities and they key fact that we want to find them as early as possible. https://lnkd.in/evrgXCwQ #CyberSecurity #CreditUnions

4

What is the best way to fund IT needs across various agencies and departments? To improve outcomes, start with a baseline and allocate the resources to the areas of highest risk likelihood and impact. Tools alone are never the answer. You can put the best paintbrush in my hand, but that doesn't make me an artist. The same is true with SIEM, a pen testing tool, or a compliance portal provided to an organization without experience or training to detect and validate threats or how to implement controls to achieve data protection requirements. The shortcut is often to wrap a service around the tool that empowers the organization to learn how to effectively leverage the solution to get to the outcome: https://lnkd.in/eKX2_AAr

2

#Throwback to the CISO ExecNet Indianapolis Chapter, where Sicura co-founder Kendall Moore discussed the importance of customizing security settings! Default configurations can be vulnerabilities. ➡️ Learn more about cybersecurity best practices at sicura.us! . . . #Cybersecurity #SecuritySolutions #InformationSecurity #Sicura #SecurityAwareness

7

🎉 The NSCP National Conference is underway! Check-in with Brad Filepas and Brian Olney at Booth 5 to see how SteelEye's Compliance CoPilot and integrated surveillance platform can elevate your compliance approach. 👋 Will you be there? Let us know, and don’t forget to drop by and say hello! ➡ Explore the event: https://lnkd.in/d2MdBCuP #NSCP #conference #compliance #integratedsurveillance #ComplianceCoPilot #NationalSocietyofComplianceProfessionals

23

Last week, Larry Kinkaid, cybersecurity consulting manager at BARR Advisory, and Joshua Schmidt, vCTO, sat down to discuss the nuances of vendor risk management and the shortcomings of security questionnaires. ➡️ Missed the live webinar? Check out the recap: https://hubs.li/Q02ztdll0 #TPRM #SecurityQuestionnaires #VendorRiskManagement

15