Patrick J D Taylor

Curious about the implications of NIST CSF 2.0 for MSPs and MSSPs?  Cynomi CEO, David Primor, and William Birchett the founder of the vCISO Network break down the NIST update with 4 questions. Read the blog ↘️ https://hubs.la/Q02CnK_80 #Cybersecurity #NIST #RiskManagement #MSSP #Cynomi

17

In ICS Continuous Hardening, are we going task-to-task or strategizing smartly? Could focusing on risk, rather than task execution, revolutionize our approach to cybersecurity? 🌐 Nick Cappi's latest blog post aims to shift the focus to risk-based strategies in the realm of ICS. Nick discusses prioritizing risks and making strategic decisions based on these, instead of a one-size-fits-all approach. Read now: https://lnkd.in/dz6YbgK6 #ICS #ContinuousHardening #RiskBasedStrategies #Cybersecurity #RiskManagement

15

Did you catch our episode about the CISA Secure by Design Pledge? Chris, Matt and Izar discuss the question: Is it really moving the industry forward or just more corporate fluff? Click to listen! https://buff.ly/3wPBbR0 #TheSecurityTablePodcast"

2

1 Comment

Prepare for the Cybersecurity Assessment Tool (CAT) Sunset coming in 2025. Learn about its impact on financial institutions, alternative frameworks like NIST 2.0, and how to crosswalk existing controls. https://okt.to/ZfnCdM #Cybersecurity #Alert #CATSunset #RiskAdvisory

2

Understanding SOC reports is crucial for effective vendor risk management. Ryan Buckner, Principal and Chief Knowledge Officer at Schellman Compliance, LLC sheds light on the importance of SOC reports, the differences between various types, and how customers can effectively review them. Listen to the full episode, out now, only on LumiQ! https://lnkd.in/gPie5745

22

Click the link below and tune in to LumiQ’s podcast as our own Ryan Buckner sheds light on the importance of SOC reports, including: ✔ Best practices for reviewing SOC reports to enhance vendor risk management ✔ The key differences between Type 1 vs. Type 2 reports ✔ Potential action items for customers reviewing SOC reports 🎧 Don't miss this insightful conversation that can empower your vendor risk management strategy!

20

1 Comment

New episode of #ModernCyber out NOW! Join Jeremy Snyder and guest RICHARD HOLLIS to explore the cybersecurity industry's persistent challenges, including the "circle of failure" in strategies, product design, and consumer expectations. Watch the full episode here: https://lnkd.in/eW9nKsYM #FireTail #Podcast #APISecurity #Cybersecurity #AI

6

2 Comments

Ready to tackle the new cybersecurity standards? Join Wolfpack Information Risk and Arctic Wolf on July 25th for their webinar Learn how to perform initial gap analyses, identify risks, and develop effective remediation strategies. Experts from Wolfpack and Arctic Wolf will guide you through compliance adoption and the importance of penetration testing. Don’t wait—reserve your seat now and ensure your institution meets the June 2025 deadline: https://ow.ly/zoTm50R2Uqa #Cybersecurity #CyberResilience #Compliance #FSCA #SARB #FinancialInstitutions #Auditing #GapAnalysis #RiskManagement #Remediation #StakeholderEducation #BusinessBenefits #SecurityOperations #ThreatDetection #PenetrationTesting #RegulatoryCompliance #FinancialRegulations #CyberThreats #FinancialSector #Wolfpack #ArcticWolf Craig Rosewarne Jason Oehley The Marketing Hub Tara-Anne Yates

21

New to SOC 2 compliance? Tune in to episode 11 of Risk Grustlers to learn which rookie mistakes to avoid. From missing policies to manual compliance tasks, Todd Dekkinga, CISO of Zluri, shares all the SOC 2 gaffes to steer clear of. The episode is out now! 🎙️👇 https://lnkd.in/gRh4iNJg #SOC2Compliance #Startups #CyberSecurity #Podcast #RiskGrustlers

29

🚨 New Episode Alert 🚨 Today on the "Smells Like Identity Hygiene" podcast, we had the pleasure of chatting with Tim Bowen, a cybersecurity expert, product owner, and fellow data nerd 📊🧠. We dove deep into the importance of data in modern cybersecurity programs, from analyzing secrets and accounts to the critical role of compliance initiatives. 🛡️ Key Takeaways: Data drives security posture 🛡️ Compliance initiatives enforce real action ✅ Reporting and ownership help bridge the gap between knowing and doing 💡 Tim also shares his thoughts on the impact of AI in cybersecurity 🤖 and the evolving role of data in securing enterprise environments. Listen now to hear more about the insights that can help shape your security strategy! 🎙️ https://hubs.li/Q02SZjMN0 #IdentityHygiene #Cybersecurity #DataAnalytics #PAM #AI #TechTalk #Compliance

15

Check out the latest article by Principal at AG Partner, Alexis Lavi on Defensible Systems. Full article in the link below and don't forget to subscribe. GRC is at a crossroads. Lack of real-time updates, poor scalability, and high risk of error in current GRC processes are prompting a gradual shift to GRC solutions that reflect engineering efforts. What actions can be taken to transition a GRC function to meet the needs of a modern security organization? Read the full article at Defensible Systems! Link in comments.

1

1 Comment

Are you curious about the user access review process from the auditor's perspective? Check out our latest blog post by guest writer Troy Fine, Director, SOC and ISO Assurance Services at Geels Norton. Troy shares his best practices to streamline the audit process and ensure accuracy and completeness. Read the full blog here: https://lnkd.in/ejKaWttc #ZillaSecurity #UserAccessReviews

24

The Cyber Solarium Commission’s recommendations spotlight opps for firms specializing in cybersecurity, infrastructure protection & policy advisory. As threats to critical infrastructure (CI) rise, there’s an urgent need for advanced, integrated solutions aligning w/ these evolving policy directives. CRG’s SME-Based Opps, INTERIM Advice & Differentiators - Opp - Systemically Important Entities (SIE) Security Compliance & Information Sharing: With CISA identifying CI organizations as SIEs, there's a demand for innovative compliance solutions. -Advice: Develop AI-driven tools to help SIEs monitor, report & comply w/ emerging federal cybersecurity standards. Offer real-time threat intel sharing platforms tailored for CI sectors. -Differentiator: Firms leveraging AI & integrated threat intel capabilities will position themselves as leaders in ensuring compliance & enhancing cybersecurity resilience. CRG facilitates rapid engagement with key industry players for solution integration. Opp - Continuity of the Economy (COTE) Strategy Development: The need for robust COTE plans creates opps for firms that can provide strategic advisory, simulation & crisis response solutions. -Advice: Design COTE frameworks incorporating real-time cyber risk assessment, disaster recovery & business continuity planning. Provide simulation exercises for agencies & private sector partners. -Differentiator: Offering comprehensive COTE strategies w/ scalable solutions will stand out in gov & private sectors. CRG ensures collaboration w/ fed agencies to refine & implement strategies effectively. Opp - Joint Collaborative Environment (JCE) Integration: CISA’s JCE presents a prime opp for firms providing advanced, secure information-sharing platforms & analytics. -Advice: Create secure, interoperable platforms that facilitate real-time data exchange between gov agencies, private entities, & Int'l partners. Incorporate advanced threat analytics & AI-driven insights. -Differentiator: Delivering seamless, multi-agency collaboration tools makes your solutions essential in the JCE framework. CRG positions clients for strategic partnerships & ensures platforms align with fed cyber objectives. Opp - Cyber Legislative Advisory Services: As Congress grapples w/ cyber policy, firms offering advisory services can help shape & guide legislative frameworks. -Advice: Establish a legislative engagement team to provide insights into cyber challenges, offering data-driven policy recommendations to congressional committees. -Differentiator: By offering informed, bipartisan policy guidance, your firm can influence the future of cybersecurity legislation. CRG connects clients w/ key stakeholders to amplify impact. Contact CRG today to lead in federal cybersecurity strategy & implementation! 👉 crgroupinc.com | [email protected] - Your Trusted Partner for Contract Success! #CRG #CyberSolarium #Cybersecurity #CISA #CI #ThreatIntel #SIE #JCE #AI

2

Exciting webinar alert! Join industry experts Steve Parker and Mark Cooper for a deep dive into encryption challenges in critical infrastructure. April 25th, 10am PDT. Register now: https://lnkd.in/gH482VCH #Webinar #EncryptionSecurity #CriticalInfrastructure

3

“There's a huge appetite for automation beyond just the SOC team. The SOC team actually benefits when, say, the IT organization is using the same platform as they are.” On the latest episode of the Riskybiz podcast with Patrick Gray, Matt Muller shares some of the ways leading organizations are shifting their approach to security orchestration and automation. Watch the full conversation: https://lnkd.in/eqqggTqq

59

Jeff Edwards, Co-Founder and Host of the SafeHouse Podcast, adds special co-host Alex W., Director of Cybersecurity, DFIR and SOC for a summer series of 12 podcasts about “10 Common Flaws in Incident Response Plans”.  Alex will have Cybersecurity and Incident Response Subject Matter Experts as Special Guests each week to discuss each of these flaws in depth. Don’t make these mistakes in your Incident Response Plans! Make this your summer podcast starting on June 13th! #cyber #cybersecurity #cyberprotection #cyberattack #businesscontinuity #operationalresilience

12

Preparation is key to minimizing the impact of inevitable cyber incidents. Learn how to build a strong cyber resilience strategy with insights from Jeffrey Bamberger, CISM, CISA's new blog. Get practical advice on enhancing your resilience and maintaining business continuity. Read now: https://lnkd.in/guqU4dY6 #Cybersecurity #Cyber #CyberResilience #Cyberthreats #Cyberattacks #NuHarborSecurity #NuHarbor

10