Nicholas Dybvig - CISSP

Keeping your organization safe from ransomware attacks is crucial for business survival. Discover how the CISA's pilot program is sending warnings to vulnerable businesses and learn how organizations can sign up.

11

1 Comment

If used properly this will be a great tool in educating people to more easily identify internal systems. I like this addition. Start a pool on how long before attackers are sending phishing emails with malicious .internal URLs? https://lnkd.in/gBHU8BXd

5

3 Comments

CISO reporting to 'The Board'...Scary? Yeah probably. It should be. Its real accountability, and an open challenge to your visions and strategies, and your ability to execute accordingly. As a CISO, I often get questions about how to present to 'The BoD' directly. Truth is, there's no single model - Every business is different, and every Board is different. But you know that already cuz you're in a position of leadership and discernment for a reason :) The right message always remains the same- How does your own leadership role, function, and focus contribute to the greater good of the organization? How does it help the business to determine where and how to accept and navigate risk? Not just avoid it. Sounds simplistic. But you may be surprised how many CISO messages don't answer that basic inquiry sufficiently. Your message, at this level, needs to clearly align to a broader forward-looking strategic narrative. If it doesn't, it doesn't resonate, and you haven't positively moved the needle. You never want to be the best checkers player in a chess match. I’m looking forward to demystifying this exact topic at the CISO ExecNet National Member Symposium July 23rd at the Willis Tower in Chicago with colleagues Eric Galis, Susanne Elizer Senoff, and Michael Calderin. #cisoexecnet #ciso #executiveleadership #boardreporting

132

7 Comments

The Cybersecurity Maturity Model Certification (CMMC) is designed to enforce protection of sensitive unclassified information for government contractors. But you don't have to start from square one. Learn about CMMC level 1 on the blog and discover how to set your organization up for success in cybersecurity. https://hubs.li/Q02KCvcD0 #cmmc #federalcontractor #compliancetips

16

1 Comment

📚 Unlock the secrets of CMMC with our eBook: "The Alphabet Soup of CMMC: Common Terms Defined And Your Recipe for Success." Get clarity on the essential terms, acronyms, and concepts shaping cybersecurity discussions. Whether you're new or seasoned, this guide has insights for everyone. 🔍 Decode the jargon, understand compliance, and fortify your security posture. But that's not all! We go beyond definitions, offering a roadmap for CMMC success. Learn how to blend compliance, security, and efficiency seamlessly. 💡 Download now for a comprehensive CMMC journey. Secure your business, streamline processes, and elevate your cybersecurity game. Don't miss out! #CMMC #Cybersecurity #eBook #DownloadNow https://lnkd.in/gTckemEF

3

The evolution from CASB to SSPM (SaaS Security Posture Management) has been a good one I believe. About a week ago I signed up to receive their SSPM materials here and received them yesterday. I found them to be a really clear training set on the differences between the two and strategies to justify their use. It's worth a look especially if you see these terms and want a good lesson in the differences: https://lnkd.in/g3X-wuwm #informationsecurity #cybersecurity #cloudsecurity

5

As most of these threats do, they aim to trick targets into running malicious code. It is crucial to train all employees and provide refresher training. These types of exploits catch us when we multitask and do not pay attention. If you need help with Security, Risk, or Compliance, SEI can help. Please reach out if you would like to brainstorm ideas.

2

Curious about XDR? It's not just another acronym–it's a security game-changer. XDR layers MDR and SIEM to provide enhanced visibility into your organization's security.

1

1 Comment

Curious about XDR? It's not just another acronym–it's a security game-changer. XDR layers MDR and SIEM to provide enhanced visibility into your organization's security.

1

Breaking into cybersecurity.... I saw a post today where it said there was a person charging people a fee to watch their webinar on how to break into cybersecurity. I thought that was sad and not helpful to the community. I saw several other people bashing that person as well. Here's my "TED" talk for free. If you want to break into cybersecurity you have to acquire the skills, even if it means doing it on your own time or taking on additional unpaid duties at work. I have seen plenty of people come through interviews and when I ask them to tell me what they have done around using offensive or defensive cybersecurity tools, they often give me the response of "I haven't been given those duties yet at work..." OK, but have you sought them out on your own time???? Last I checked Kali Linux was free, Virtual Box was free, etc. Have you built your own home lab? Have you asked at work for extra duties (without demanding you get paid for those duties first?). Sometimes the wheels of HR turn slowly and they want to pay you for what you have done not for what you are promising them you will do. Would you take on these new duties at work if it meant no additional pay? What if took HR 2-3 years to redefine job duties and adjust the pay? What if they never rewrote your job duties? Would it be worth it to you? If you say no, then it will probably be hard for you to break in to cybersecurity. If you have the mentality of "The company is using me to do these jobs without paying me!" then it will be harder for you to break in. How about having this mentality instead? I am using the company to improve my skills which will be worth more in the future, whether that is here or at another company. When you take on new skills, the reward is often improvement in yourself and your future abilities, not your bank account. The reward is often delayed. I coached sports for 15 years. The starters were always the ones who listened to the coaching staff, went the hardest at practice, and, most importantly, put in effort outside the practice. So look for opportunities to improve your cyber skills. Another tip. Don't do a skill once and then put that you are an expert in that skill on your resume. Really take the time to learn that skill.

83

17 Comments

One click is all it takes. Aikido simplifies SOC2, NIS2, and ISO 27001 vulnerability reporting for faster compliance.

26

Enhancing Healthcare Security: Continuous Assessment and Targeted Remediation: Insights from Veriti research leads us to one conclusion for healthcare, the need to adopt continuous exposure assessment and safe remediation across the sector.

1

☁️ Cloud HIPAA Security Assessment Sample Running your medical practice on AWS or Azure? See how we assess cloud infrastructure security and compliance. Our cloud assessment sample covers: - Identity & Access Management - Data Protection Controls - Cloud Security Architecture - Compliance Monitoring Aligned with: ✓ AWS & Azure Security Best Practices ✓ HIPAA Security Rule Requirements ✓ Cloud Risk Assessment Framework Download our sample cloud assessment: https://buff.ly/3VuZ5KF #CloudSecurity #HIPAA #HealthcareTech

1

📚 Knowledge-sharing is key to strengthening cybersecurity defenses. Explore our blog post detailing the ins and outs of NTLM relay attacks and empower your IT and security teams with actionable insights. Together, we can combat evolving cyber threats. https://lnkd.in/gi6guVQu

19