Michael Giovaninni CISSP
Agawam, Massachusetts, United States
906 followers
500+ connections
About
I am the CEO / Chief Technologist of NetWerks Strategic Services, a company that helps…
Services
Articles by Michael
-
The Importance of January 14, 2020..
The Importance of January 14, 2020..
From an historical perspective, January 14th, like many other days of the year, has a plethora of important events…
3 Comments -
Dealing with my insecurities...
Dealing with my insecurities...
So, this past week I spent some quality time attending the International Security Conference - West in Las Vegas. I've…
1 Comment -
Knowing When to Run...
Knowing When to Run...
In The Beginning It all started with what small businesses always hope for - the unexpected opportunity for new…
Contributions
-
You're a small business owner who needs to keep tabs on network traffic. What are your options?
Each of these suggested platforms have their merits. One thing that they all have in common - they are not for the faint of heart to operate and have a significant learning curve. Wireshark is a fantastic diagnostic tool for packet tracing and traffic analysis - however if you are not familiar with the OSI model and the various network protocols in use, this is probably beyond the scope of most small businesses who do not have an on-premise network engineer. NetFlow and it's derivatives/copy-cats is also a great tool and can give a lot of insight on what traffic is flowing around your network. Once again, unless you have in-house IT support, work with an MSP/MSSP to assess what tools will work best, and can support them properly.
-
You're a small business owner who needs to keep tabs on network traffic. What are your options?
If you are a typical small business owner, you are best served by working with either a Managed Services Provider (MSP) or Manager Security Services Provider (MSSP) as they will be able to advise you of both what will work best for your environment, what will be easiest on your wallet, and provide you with expert support which will save you time and money. Many network analysis software systems are complex and take time to gain mastery. Some require special licensing agreements which can fall outside the budget for a small business to cover whereas an MSP/MSSP probably already has licensing available to accommodate the number of systems you need to monitor, and you only have to pay for what you use, not an inflated minimum seat count.
-
You're a small business owner who needs to keep tabs on network traffic. What are your options?
This begs the question - why do you feel you NEED network traffic analysis? Do you want to keep tabs on your employees to see if they really are performing work related tasks or are they skiving off watching cat videos on social media? Or, are you concerned that a threat actor may have compromised your network? Or, do you want to monitor your network traffic to see if the reason your VoIP phone sounds like you are talking from the bottom of a well is due to network saturation? Each of these scenarios requires a different type of software to provide meaningful results - also - will this be used just in the office or also in a work from home environment? Once you've determined the "Why" you then can start assessing the "How".
Activity
-
💡 How Technology Can Reduce Operational Costs Without Cutting Corners 🚀 Looking to cut costs? Smart businesses use technology to save money…
💡 How Technology Can Reduce Operational Costs Without Cutting Corners 🚀 Looking to cut costs? Smart businesses use technology to save money…
Shared by Michael Giovaninni CISSP
-
🤝 Vendor Sprawl Is Draining Your Budget: Here’s How to Consolidate 🚨 Too many software tools and IT vendors? You’re probably wasting money—and…
🤝 Vendor Sprawl Is Draining Your Budget: Here’s How to Consolidate 🚨 Too many software tools and IT vendors? You’re probably wasting money—and…
Shared by Michael Giovaninni CISSP
-
🚨 PCI-DSS v4.0 Compliance Deadline is Here – Is Your Healthcare Organization Ready? Stricter security requirements mean stronger encryption, MFA…
🚨 PCI-DSS v4.0 Compliance Deadline is Here – Is Your Healthcare Organization Ready? Stricter security requirements mean stronger encryption, MFA…
Shared by Michael Giovaninni CISSP
Experience
-
NetWerks Strategic Services, LLC
-
-
-
-
-
-
-
-
Education
-
Springfield Technical Community College
-
Activities and Societies: Electronics Technicians Association - International
Acted as Certification Administrator for ETA-I
Licenses & Certifications
Volunteer Experience
-
Volunteer Unit / District Leader
Boy Scouts of America
- Present 24 years 8 months
Children
Beginning in the fall of 2000, I have held various positions - Cub Scout Leader, Scoutmaster, and Venture Crew Advisor - In addition, I currently serve as District Boy Scout Roundtable Commissioner, and assist on the District Committee as interim District Chair. I have served on Training staffs in areas such as Youth Protection, Leader Specific as well as Venturing Kodiak and Wood Badge
-
Contemporary Christian Worship
Church in the Acres
- Present 21 years 1 month
Using the gifts given by an awesome God, I seek to reach out to people with a spiritual connection through music for His glory. Using a blend of music from contemporary artists such as Chris Tomlin, Jeremy Camp, Third Day, among others; as well as original music, we bring together the power of music, prayer and spritual leadership to guide others into a closer personal relationship with the Real Jesus.
Organizations
-
CompTIA
-
- Present
More activity by Michael
-
📧 The Hidden Threat in Your Inbox: Business Email Compromise (BEC) 🚨 A local micro-business who recently contacted us nearly lost thousands to a…
📧 The Hidden Threat in Your Inbox: Business Email Compromise (BEC) 🚨 A local micro-business who recently contacted us nearly lost thousands to a…
Shared by Michael Giovaninni CISSP
-
⌨️ Top Keyboard Shortcuts in Excel That Will Save You Hours 📊 Still Clicking Through Menus in Excel? There’s a Faster Way! Excel is powerful, but…
⌨️ Top Keyboard Shortcuts in Excel That Will Save You Hours 📊 Still Clicking Through Menus in Excel? There’s a Faster Way! Excel is powerful, but…
Shared by Michael Giovaninni CISSP
-
📂 Document Management Made Easy: Best Practices for Growing Businesses 📄 Lost files, version confusion, and security risks—sound familiar? As…
📂 Document Management Made Easy: Best Practices for Growing Businesses 📄 Lost files, version confusion, and security risks—sound familiar? As…
Shared by Michael Giovaninni CISSP
-
Thank you, pure and simple! I am grateful for the opportunity to be the keynote speaker for your CLIMB Online Conference for Leadership in Imaging…
Thank you, pure and simple! I am grateful for the opportunity to be the keynote speaker for your CLIMB Online Conference for Leadership in Imaging…
Liked by Michael Giovaninni CISSP
-
🛡️ Massachusetts Businesses: Do You Have a Legally Required Incident Response Plan? 🚨 If your business collects or stores personal information on…
🛡️ Massachusetts Businesses: Do You Have a Legally Required Incident Response Plan? 🚨 If your business collects or stores personal information on…
Shared by Michael Giovaninni CISSP
-
💣 Ransomware: It’s Not If, It’s When—Are You Ready? 🚨 A single ransomware attack can bring your business to a standstill—are you prepared to…
💣 Ransomware: It’s Not If, It’s When—Are You Ready? 🚨 A single ransomware attack can bring your business to a standstill—are you prepared to…
Shared by Michael Giovaninni CISSP
-
🚨 Business Email Compromise (BEC) is on the rise! Cybercriminals are hijacking email accounts, sending fake invoices, and stealing money—without…
🚨 Business Email Compromise (BEC) is on the rise! Cybercriminals are hijacking email accounts, sending fake invoices, and stealing money—without…
Shared by Michael Giovaninni CISSP
-
💾 OneDrive vs. Google Drive: Which One is Right for Your Business? ☁️ OneDrive, SharePoint, or Google Drive? Choosing the right cloud storage isn’t…
💾 OneDrive vs. Google Drive: Which One is Right for Your Business? ☁️ OneDrive, SharePoint, or Google Drive? Choosing the right cloud storage isn’t…
Shared by Michael Giovaninni CISSP
-
🌐 DNS Filtering: The Cybersecurity Tool You Didn’t Know You Needed 🚨 Ransomware, phishing sites, and malware attacks all have one thing in…
🌐 DNS Filtering: The Cybersecurity Tool You Didn’t Know You Needed 🚨 Ransomware, phishing sites, and malware attacks all have one thing in…
Shared by Michael Giovaninni CISSP
-
After participating in 5 CMMC assessments, the most valuable advice I can give to DoD Contractors is... reference the CMMC Assessment Guide for a…
After participating in 5 CMMC assessments, the most valuable advice I can give to DoD Contractors is... reference the CMMC Assessment Guide for a…
Liked by Michael Giovaninni CISSP
-
🚀 Is Your Business Growth Outpacing Your IT Infrastructure? 📈 Scaling fast? That’s great—until your technology starts slowing you down. Growing…
🚀 Is Your Business Growth Outpacing Your IT Infrastructure? 📈 Scaling fast? That’s great—until your technology starts slowing you down. Growing…
Shared by Michael Giovaninni CISSP
Explore more posts
-
Joshua Grimes
Hotel hosting "Hacking Convention" conducts daily "room inspections" to "increase guest safety". Should guests have been notified of these inspections prior to arrival? Did the event hosts have a responsibility to protect their guests' privacy? Yet another issue to consider as meeting security efforts remain a constant concern. https://lnkd.in/eZHBdQUH #MeetingsAndEvents #MeetingsLegal #MeetingProfs
6 Comments -
DRAYTON MAYERS
Customer trust is everything in today’s competitive market. If your business suffers a cyber breach, it’s not just data that’s at risk—it’s your reputation. Building trust with your customers starts with ensuring their information is secure, and a strong cybersecurity framework is key. Here are a few ways to reinforce that trust: ✅ Use encryption to protect sensitive customer data. ✅ Regularly update your security protocols to address emerging threats. ✅ Communicate with your customers transparently about the steps you take to protect their information. The stronger your cybersecurity, the stronger your customer relationships. Let’s discuss how we can help you maintain and grow that trust. 📞 Call (901) 572-1355 to learn more about how to make cybersecurity a top priority for your business. #CustomerTrust #ReputationManagement #CyberSecurity #DataPrivacy
1 Comment -
Mike Semel
Immediate Steps to Take After a Cyber Breach When a cyber breach hits, time is money—and every second you lose could cost your business thousands. So, what's the game plan? First, isolate the breach to prevent further damage. Next, protect your data by locking down sensitive systems and begin assessing the scope of the attack. Don't waste time—speed is everything here. If your business isn't prepared to respond within minutes, you're already behind. Does your company have a clear post-breach response plan? Let's get one in place before it's too late. #PostBreach #IncidentResponse #CyberSecurity
-
Billy Hotchkiss
Ransomware attacks are becoming a big problem for business owners - and it’s not something you’re going to want to deal with. If you become a target, cyber criminals can lock you out of your own files and then demand a ransom (usually paid in Bitcoin) to get your files back. If that’s not scary enough, wait until you hear how much they are demanding. The latest average ransomware demand is a huge $1.5 million. And no business is safe from being hit, including yours. So, how can you stop your business becoming a victim? First, protect yourself by making sure the security software and firewalls are up to date on all of your team’s devices. Also make sure you keep your software updated - cyber criminals love to find weaknesses in outdated software. Don’t forget your people either. A little training goes a long way. Make sure everyone knows how to spot suspicious emails and links, so they don’t open the door to attackers. One last thing: Always back up your important data. This way, if an attack does happen, you’ll still have your files without having to pay to get them back. Encrypting sensitive information is also a smart move - it keeps your data safe, even if it’s stolen. You should always have a strategy in place so that everyone knows what to do if your business comes under attack. Has your team got a solid strategy to defend against cyber attacks? We can help you build one. Get in touch. #Ransomware #CyberSecurity #ResilienceStrategy https://lnkd.in/e4VRY8EV
-
Stewart Fey, PCI QSA, CISSP, CISA
Did you miss the LBMC Cybersecurity webinar? -- "PCI 4.0: Q&A with QSAs" It's not too late to listen in. If you shoot me over a message, I'll be sure you receive a copy of the recording. Andy and I had a lot of great PCI 4.0 questions that apply to many organizations. #webinar #PCI40
-
Matthew Fisch, CISSP
An interesting update to NYS law is picking up where 2013 HIPAA left off: HEADLINE: > $1B in STATE GRANTS AVAILABLE TO SATISFY THIS Some of you might think this is redundant, but HIPAA is so old and the requirements so breezy its easy for organizations with no identifiable cybersecurity program to escape regulatory action. This rule aligns with HIPAA and uplifts the requirements. Here's the high level: - ~ CIS IG2 technical requirements - A CISO is mandatory -- but you can contract it out - Annual (or more frequent) risk assessments are mandatory. Identified risks must be managed or accepted. - You must maintain a risk register, and risks must be accepted - The hospital board is required to approve all policy and compensating modifications - Security logs must be retained for 6 years! FortMesa's platform and risk assessments can support MSPs in satisfying all of these requirements. Thanks to Leland Lehrman for noticing this is reaching final stages.
5 Comments -
DRAYTON MAYERS
When we think about cybersecurity threats, we often picture hackers from outside the company. However, insider threats are just as dangerous—and sometimes even harder to detect. Employees, contractors, or business partners who have access to your systems can potentially cause significant harm, intentionally or unintentionally. To safeguard your business, make sure you: 1️⃣ Limit access to sensitive data based on need-to-know principles. 2️⃣ Implement strict access controls and monitoring. 3️⃣ Regularly update and educate your employees on cybersecurity best practices. Taking the right steps now can reduce the risk of insider threats and protect your business from hidden dangers. 📞 Call (901) 572-1355 or message us to learn how we can help you build a stronger defense strategy against insider threats. #InsiderThreats #BusinessSecurity #DataProtection #CyberDefense
1 Comment -
Jeff Dennis
𝗖𝗮𝗻 𝘆𝗼𝘂 𝗯𝘂𝗶𝗹𝗱 𝘁𝗿𝘂𝘀𝘁 𝘁𝗵𝗿𝗼𝘂𝗴𝗵 𝘀𝘁𝗿𝗼𝗻𝗴 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗽𝗼𝘀𝘁𝘂𝗿𝗲 𝗮𝗻𝗱 𝗰𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 𝗺𝗲𝗮𝘀𝘂𝗿𝗲𝘀? 👍 The short answer is Y͟E͟S͟. Security posture and compliance aren't just about checking boxes. They’re strategic assets. Companies that prioritize cybersecurity and compliance send a clear message to their clients: "You can trust us." 🤔 How does this build trust? Client Confidence: When clients know that you have robust security measures in place, they feel secure doing business with you. They trust that their data is safe and that your company is prepared for evolving threats. Regulatory Peace of Mind: Adhering to industry-specific compliance standards (like the FTC Safeguards Rule, HIPAA, or CMMC) demonstrates that you take data protection seriously, reducing the risk of costly breaches and fines. Market Differentiation: Strong security posture can be a differentiator. In competitive industries, companies that emphasize security and compliance are considered more reliable and forward-thinking. It becomes a part of your brand identity, helping you stand out from competitors who may treat security as an afterthought. Security posture isn't just an expense—it’s an investment in your company's reputation, customer loyalty, and long-term success. Hi, I’m Jeff. I help protect manufacturers, auto dealers, and medical offices from cyber threats by enhancing security posture and ensuring compliance. 𝘓𝘦𝘵’𝘴 𝘵𝘢𝘭𝘬 𝘢𝘣𝘰𝘶𝘵 𝘩𝘰𝘸 𝘵𝘰 𝘮𝘢𝘬𝘦 𝘴𝘦𝘤𝘶𝘳𝘪𝘵𝘺 𝘺𝘰𝘶𝘳 𝘣𝘶𝘴𝘪𝘯𝘦𝘴𝘴 𝘢𝘥𝘷𝘢𝘯𝘵𝘢𝘨𝘦.
2 Comments -
Bryce Austin, CISM
The healthcare sector is being specifically targeted by cybercriminals. When ERs can't get the blood they need to treat patients, we have a life safety situation. Ransomware defenses are all about Cybersecurity 101 basics + offline backups. It's just that easy. #cybersecurity #cyberaware #cybersecuritytips #ransomware #healthcarecybersecurity
-
Eric Hurd
Using WordPress for your business’s website? Listen up… \n\nA major flaw has been discovered in a popular WordPress plugin called Really Simple Security (formerly Really Simple SSL), which could let cyber criminals take full control of your website.\n\nLet’s break this down. \n\nWordPress is a platform that powers millions of websites. It’s popular with businesses, because it’s easy to use and customizable. \n\nPlugins are add-ons that extend your site’s functionality – think adding a contact form or extra security features. \n\nReally Simple Security is a plugin that’s designed to protect websites, offering tools like login protection and two-factor authentication (2FA).\n\nSo, what’s the issue? \n\nA vulnerability in this plugin’s 2FA feature allows scammers to get around the authentication process. This could give them admin access to your site. Which could lead to a massive security breach, like your site being taken over or sensitive business data being stolen.\n\nThankfully, the plugin developer has released a fix (version 9.1.2), and WordPress is pushing updates. Many websites still run older versions though, and that leaves them exposed. \n\nIf you use the Really Simple Security plugin on your website, please make sure you’re running the latest version immediately. \n\nWhile we’re on the subject, when did you last check all your apps and systems? If you need help making sure everything’s up to date, get in touch. #UpdateTime #WordPress #SecurityAlert https://lnkd.in/gyRJamzc
-
Kelly Siegel
Here’s some free cybersecurity advice: the top 3 vulnerabilities attackers exploit are email, human errors, and unpatched systems. Email: Be cautious with links and attachments. Human Errors: Educate your team on security best practices. Unpatched Systems: Keep all software updated. Want to learn more? Listen in for detailed tips or head over to TrustNTM.com/GrandSlam to schedule time with me. I'm not in sales; I'm the owner and here to help you stay safe from cyber threats. Let's keep the bad guys at bay. #CyberSecurity #StaySafe #TrustNTM #FreeAdvice #RansomwarePrevention
-
Yigal Behar
While Microsoft has implemented security measures to protect its users, it can be breached like any other software or system. I once helped a customer who experienced a situation with their Office 365 email system. Attackers got into an employee’s email account and sent a fake $30,000 invoice for consulting services. The email looked so legit, it made it through the normal approval process. Thankfully, the company owner spotted the fraud before signing the check. They didn’t recognize the services and started asking questions. That’s when we discovered someone had accessed the email account and used the web portal to send the fraudulent email with a PDF attachment. I suspected the attackers got the email account credentials. While the company had two-factor authentication (2FA) set up, they were using SMS for the codes. Attackers can sometimes intercept SMS codes. My solution? Switch to the Microsoft Authenticator app for 2FA. It’s more secure than SMS and harder for attackers to bypass. What 2FA method are you using? Let me know if you’ve switched to an app like Authenticator—I’d love to hear how it’s working for you!
Explore collaborative articles
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
Explore More