Takahiro Yamada, ISC2-CC

📢 Check Point Again a Frost Radar XDR Leader in 2024 In this report, Check Point was cited as a Growth and Innovation Leader in Extended Detection and Response (XDR). Check Point XDR/XPR Key Highlights: • Collaborative Threat Prevention • AI Copilot • Consolidated Threat Intelligence and Analytics • Infinity Playblocks Automation • Centralized IOC Management • Threat Intelligence & Event Correlation Download your free copy of the Frost Radar™ XDR Report to learn more about why Check Point is a Growth and Innovation leader in Extended Detection and Response 👉 https://lnkd.in/gecJVKrG Yael Cinamon

4

DISA Expands Thunderdome Zero Trust Program Deployment; Brian Hermann, Quoted. ExecutiveGov discusses the Defense Information Systems Agency's (DISA) expansion of the Thunderdome zero trust program. In 2023, the program was deployed to 15 sites and plans are underway to extend it to 60 more sites in 2024. The program involves four key components: 🔐 Customer security stacks 🔗 Software-defined wide area networking 📴 Secure access service edge capability, and 💯 Application security stacks. Brian Hermann, DISA's director of the cybersecurity and analytics directorate, emphasized the program's role in advancing zero trust architecture, which is crucial for organizational security. DISA has also finalized the contracting process to support the U.S. Coast Guard’s network security improvement efforts through Thunderdome. Versa Networks is at the forefront of enhancing cybersecurity with their pivotal role in DISA's Thunderdome project. Their cutting-edge solutions are setting new standards in securing our nation's digital infrastructure. For more details, you can read the full article here:-https://lnkd.in/eyXCTEe9 #DISA #Thunderdome #ZeroTrust #Cybersecurity #versanetworks #channelpartners

2

Join Us for a Key Discussion on Data Security in Atlanta GA! Approved registration required. 📅 Date: Thursday, September 12, 2024 🕔 Time: 5:00 PM - 8:00 PM 📍 Venue: Hal's the Steakhouse, Atlanta GA Thales Cloud Security invites you to an engaging discussion on the latest in data security and protection strategies. Whether you're looking to refine your compliance strategies or explore new innovations, this event has something for you. Topics of Discussion: 🔐 Key Objectives in Meeting PCI DSS Compliance 🔒 Aligning to NIST/CISA Guidance for Optimal ZTMM Data Pillar 🔏 Post-Quantum Risks to PKI & Data Privacy 🔑 BYOE (Bring Your Own Encryption) in Ransomware Mitigation 🤖 AI/Machine Learning Initiatives & Protecting Nonpublic Data ☁️ Protecting Sensitive Data in the Cloud Don't miss this opportunity to gain insights from industry experts and network with peers over a delicious dinner. Atlanta Thought Leadership: https://lnkd.in/edpx4VKi

26

The Final CMMC2.0 Rule is here! Set to be published in the Federal Register on October 15th. If your business needs guidance on navigating the complexities of CMMC, CorpInfoTech can help. #CMMC #CMMC2 #dfars #DoD #CUI https://hubs.li/Q02Tc0Gt0

3

UpDate: CMMC Program, effective December 16, 2024 The Department of Defense (DoD) has finalized its Cybersecurity Maturity Model Certification (CMMC) Program, effective December 16, 2024, after publishing a rule on October 15, 2024. This program mandates defense suppliers, contractors, and subcontractors to meet specified cybersecurity standards to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) during contract performance. The final rule introduces three CMMC levels, streamlined from the previous five, to assess contractors based on the type of sensitive government information they handle. Key components of the CMMC Program include: Implementation Phases: The program will roll out in four phases over three years, allowing time for training assessors and ensuring contractors can meet the new standards. Assessment Levels: + Level 1: Requires annual self-assessments and affirmations for contractors handling FCI. + Level 2: Involves compliance with comprehensive cybersecurity standards (NIST SP 800-172A) for those dealing with CUI, with assessments done either by contractors themselves or through a Certified Third-Party Assessment Organization (C3PAO). + Level 3: Applies to contractors dealing with high value assets, requiring stringent compliance and government certification every three years. Subcontractor Compliance: Subcontractors must also meet minimum CMMC status based on their contract involvement with FCI or CUI. Ongoing Compliance: Contractors need not undergo annual reassessments but must affirm compliance annually. https://lnkd.in/gBtm_R8F #CMMC

3

CMMC likely to be in effect for defense contracts the first half of 2025. IT Service Providers (MSP) will also be required to pass an assessment - CorpInfoTech will be audited four (4) weeks after CMMC is approved. Now is the time to get prepared for CMMC compliance. #CMMC #DOD #DFARS https://hubs.li/Q02NgwZ50

6

Looking to strengthen your organization's Vulnerability & Threat Management strategy? Skybox Security's Vulnerability & Threat Management Solution Buyer's Guide equips you to assess your VTM needs effectively and gain unmatched attack surface visibility, consolidated vulnerability data for clear decisions, and prioritized vulnerability management. Visit the post below and swipe to see 4 crucial questions to ask your VTM solution vendor. Download the guide for even deeper insights! ➡️ https://bit.ly/48dNBin #VulnerabilityManagement #Cybersecurity #BuyersGuide #InfoSec

1

Looking to successfully implement a #ZeroTrust Access strategy but not sure where to start? Get the Zero Trust Access For Dummies Guide for case studies and tips : https://ftnt.net/60485lI08

4

Join Bridget Wilson, CISSP, CMMC RP, Neil K. Jones, and me TODAY for the latest #CMMC updates you don’t want to miss! Got specific questions or topics you’re curious about? Let me know, and we’ll cover them. This session has actionable insights to help you navigate this pivotal moment in compliance and cybersecurity. Don’t miss out—let’s get informed and prepared together! #Cybersecurity #CMMCUpdates #StayAhead

16

2 Comments

The cloud-based K-12 software provider confirmed a compromised credential was used to access its PowerSource customer support portal. PowerSchool became aware of a “potential” cybersecurity incident on Dec. 28 involving the unauthorized access of some student and staff information through its PowerSource service, the company confirmed to K-12 Dive on Thursday. PowerSource is a customer support portal for district and school staff. A PowerSchool spokesperson said in an emailed statement that “the incident is contained and we do not anticipate the data being shared or made public.” The company said the incident was not a ransomware attack. When asked about the scope of this data breach, PowerSchool did not comment on the number of students, teachers or school districts impacted by the incident. A growing number of districts — including San Diego Unified School District and Massachusetts’ Lenox Public Schools — are publicly reporting they’ve been alerted by PowerSchool that their data was accessed by the threat actor. #cyberriskmanagement #thirdpartyriskmanagement #confidentialcomputing #GRC #cyberinsurance

4

Tenable Security Center 6.5 is here, and it’s packed with enhancements to elevate your #vulnerabilitymanagement strategy. Learn how these updates streamline workflows, enhance visibility, and help you stay ahead of evolving threats. Read the details: http://ow.ly/A9YX105R86n

14

This could be the source of your "aha" moment with CMMC. Trust me when I say that there's a lot of FUD and myths in the marketplace, and there's a lot of sleight of hand being performed by people who really are not the experts they pretend to be in the CMMC echo system. Here's a few quick screening questions to ask. 1. Is CUI classified information? 2. Did DoD develop the requirements for protecting my sensitive information? 3. If I don't meet a particular control, I can always get an extension of up to a year to do so, correct? 4. Do I just have to meet 80% of the assessment objectives in each control to be certified? 5. Do I pass the assessment and receive a CMMC Level 2 certification if I meet 75% of the requirements? If you encounter hesitation on any of these questions by any company you're asking to help you comply with CMMC, I would suggest you keep looking. Better yet, go the NCMBC web site and pay the admission. It's $130 per person, and you get food, entertainment and fellowship with other managers and subject matter experts as you plot your journey through the CMMC echo system. Hope to see you there. It's an in person event at McKimmon Center of North Carolina State University. (https://lnkd.in/eitYSGUf, McKimmon Conference and Training Center at NC State University, 1101 Gorman St, Raleigh, NC 27606 (919) 515-2277). Registration link is in Laura's post.

1

Discover how to maximize #ROI and minimize #TCO with these 3 essential steps! 💡

1