Chahak M.

Drawing upon a comprehensive survey of almost 400 corporate DFIR professionals, the fourth annual State of Enterprise #DFIR report examines the evolving contributions and experiences of DFIR professionals within corporate environments. Get it today: https://ow.ly/ENaK50RkeWH

16

CMMC Level 2 Assessment Objective: Security Engineering PRACTICE: Organizations must employ architectural designs, software development techniques, and systems engineering principles that promote effective information security within organizational systems. ASSESSMENT: Examples of systems security engineering concepts and principles include: · Developing layered protections; establishing security policies, architecture, and controls as the foundation for design · Incorporating security requirements into the system development life cycle · Delineating physical and logical security boundaries · Ensuring that developers are trained on how to build secure software · Performing threat modeling to identify use cases, threat agents, attack vectors and patterns, design patterns, and compensating controls needed to mitigate risk Be prepared! Your assessor could ask to 🔍 EXAMINE security planning policy. 🗣 INTERVIEW personnel with responsibility for determining information system security requirements. 📝 TEST organizational processes for system security plan development, review, update, and approval. (CMMC Assessment Guide: Level 2 Version 2.11, page 209) #CMMC #DoD #cybersecurity #NIST #InformationSecurity

48

Over time there has been a shift in how organizations have handled security risk management owing to evolving security challenges influenced by emerging and evolving threats. For instance the risk of cyber-crime is growing rampant as organizations adopt modernized digitalized applications and software to navigate business operations. Similarly crimes associated with terrorism have evolved over time as organized crimes revolutionize themselves. This has called for a shift in the way organizations handle business where security has been perceived to be an important component of doing successful business and ought to be adopted in every business function as opposed to have it run in isolation. This shift is termed as the paradigm shift. Over time some experts have differed in approaches with some inferring that in order to protect a company and its assets the very first step is to perform a threat and vulnerability analysis, the outcome of the analysis leads to the implementation by security team of the physical protection systems. This approach is referred to the security approach. The security approach is specific, narrow focus on threats and vulnerabilities. It’s an exclusive approach in which activities have usually been confined to security professionals. On the other hand some experts have taken a contemporary approach that states that security planning starts with a detailed analysis of potential areas of loss, their probability, their impact scale should loss occur and affect business goals and assets. This approach is referred to the risk approach. The risk approach takes into account organizational context and objectives, assets and how they are used, it identifies threats to assets and the success of the mission. It quantifies the potential impact of those threats, identifies and addresses vulnerabilities, and establishes a framework to manage risks to as low as reasonably practicable. It’s an inclusive approach designed to involve the business risk management decision making with specialist advice provided by security professionals who lead or own the process. The risk approach has been ideal in security management and has been adopted by many organizations aiming to merge security risks and vulnerabilities to their cultures for mitigation ensuring they achieve desired business gains. The risk approach is advocated and adopted in ISO 31000 standard guidelines, where organization protection is characterized by the risk source. ISO 31000 aims to establish the risks that have the potential to impact on the organization’s goals and providing guidance on what can be done about them from their negative or positive effect point of view. Which begs the question for organizations and security professionals – Which approach are you currently adopting within your organization and does it match the current threat spectrum ? #securityriskmanagement #continouslearning #upskilling  

44

9 Comments

CMMC Level 2 Assessment Objective: Alternative Work Sites PRACTICE: Organizations must enforce safeguarding measures for containing controlled unclassified information (CUI) at alternative work sites. ASSESSMENT: Alternative work sites may include government facilities or the private residences of employees. Organizations must define and implement safeguards to account for protection of CUI beyond the enterprise perimeter. Safeguards may include physical protections, such as locked file drawers, as well as electronic protections such as encryption, audit logging, and proper access controls. Be prepared! Your assessor could ask to: 🔍 EXAMINE a list of safeguards required for alternative work sites 🗣 INTERVIEW personnel approving use of alternative work sites 📝 TEST organizational processes for security at alternative work sites (CMMC Assessment Guide: Level 2 Version 2.11, page 186) #CMMC #DoD #cybersecurity #NIST #InformationSecurity

47

CISA Releases Guidance on Single Sign-On (SSO) Adoption for Small and Medium-Sized Businesses: (SMBs)   In a significant move to bolster cybersecurity for small and medium-sized businesses (SMBs), the Cybersecurity and Infrastructure Security Agency (CISA) has released comprehensive guidance on Single Sign-On (SSO) adoption. This pivotal report, titled "Barriers to Single Sign-On (SSO) Adoption for Small and Medium-Sized Businesses: Identifying Challenges and Opportunities," delves into the various challenges SMBs face in implementing SSO and offers actionable insights on overcoming these obstacles to enhance security.   The guidance underscores the importance of SSO as a critical security measure, enabling users to authenticate once and gain access to multiple applications. However, it also acknowledges the barriers such as the "SSO tax," where essential security features are often bundled as premium services, making them less accessible for SMBs.   CISA's initiative aims to democratise cybersecurity by advocating for SSO to be included as a fundamental component of software packages, ensuring that robust security is a right for all businesses, not just a premium option. The agency also emphasises the need for clearer communication and support from vendors to facilitate smoother SSO integration for SMBs.   As a cybersecurity company committed to the safety and resilience of SMBs, we welcome CISA's guidance and encourage all software manufacturers and businesses to align with these recommendations. Together, we can create a more secure digital ecosystem for businesses of all sizes. For more details on the report and how it can impact your business, visit CISA's official website.   https://lnkd.in/e3HsTs9e

5

Are current remediation efforts enough? We measured the percent change in the number of open vulnerabilities each month for each firm. Taken together, these monthly measures reveal whether security exposures are piling up... Read the full report: https://lnkd.in/e4EAeQ6v

1

Hopefully you a process to frequently assess your organization's cyber risks. ⚠️ If you don't currently have process in place, and you should, here's 6 Types of Risk Assessment methodologies and their use case. 📝 Feel free to reach out if we can point you in the right direction🤝 #cybersecurity #nonprofit #riskassessment

1

CMMC Level 2 Assessment Objective: Vulnerability Remediation PRACTICE: Organizations must remediate vulnerabilities in accordance with risk assessments. ASSESSMENT: Not all vulnerabilities captured in a vulnerability scanner may pose the same level of risk to an organization. Organizations must prioritize mitigation efforts to close the most critical vulnerabilities first. They also must track all vulnerability remediation to ensure completion and track vulnerabilities that they have determined not to remediate. Be prepared! Your assessor could ask to: 🔍 EXAMINE risk assessment policy 🗣 INTERVIEW personnel with risk assessment, security assessment, and vulnerability scanning responsibilities 📝 TEST organizational processes for vulnerability scanning, analysis, remediation, and information sharing (CMMC Assessment Guide: Level 2 Version 2.11, page 194) #CMMC #DoD #cybersecurity #NIST #InformationSecurity

49

🚨 DFARS 252.204-7021 (the CMMC clause) is currently at the Office of Management and Budget (OMB) 🚨 The abstract states, "DoD is amending an interim rule to implement the CMMC framework 2.0 in order to protect against the theft of intellectual property and sensitive information from the Defense Industrial Base (DIB) sector. The CMMC framework, as defined in Title 32 of the Code of Federal Regulations (CFR), assesses compliance with applicable information security requirements. This rule provides the Department with assurances that a DIB contractor can adequately protect sensitive unclassified information at a level commensurate with the risk, accounting for information flow down to its subcontractors in a multi-tier supply chain." Once approved, the rule will be sent to the Federal Register for publication 👀 You can see the rule here: https://lnkd.in/eyP5dqre Shoutout to Eric Crusius for breaking this news! #cmmc #dod #cybersecurity

35

Build Trusted, Resilient, and Auditable Digital Outcomes by Adopting the NIST Cybersecurity Framework (NIST-CSF) and its corresponding NIST Cybersecurity Professional certification training program. Business decision-makers agree that cybersecurity risk is an organization’s top priority. As in any risk area, a comprehensive set of guidelines is critical to delivering effective outcomes. The NIST-CSF provides a common language for building cybersecurity risk operations and is designed to help organizations establish the business capabilities necessary to manage and mitigate cybersecurity risks. Cybersecurity practitioners shape your organization’s ability to safeguard information and protect business operations from malicious actors. But how do you ensure they have the skills to operationalize a solution capable of delivering Trusted, Resilient, and Auditable digital outcomes? The answer is in the NIST-CSF and its corresponding NIST Cybersecurity Professional accredited certification training programs. Register today for a NIST Cybersecurity Professional accredited certification training class or elearning program at https://lnkd.in/ggyN2zaN #nistcybersecurityframework #cyberrisk

15

1 Comment

🇨🇳 RED ALERT: 𝑪𝒐𝒖𝒏𝒕𝒆𝒓𝒊𝒏𝒈 𝒕𝒉𝒆 𝑪𝒚𝒃𝒆𝒓𝒕𝒉𝒓𝒆𝒂𝒕 𝒇𝒓𝒐𝒎 𝑪𝒉𝒊𝒏𝒂 - 🏛️ United States House Committee on Oversight and Accountability Subcommittee on Cybersecurity, Information Technology, and Government Innovation. The panel discussion focused on cyber warfare threats, particularly those orchestrated by the 𝑷𝒆𝒐𝒑𝒍𝒆'𝒔 𝑹𝒆𝒑𝒖𝒃𝒍𝒊𝒄 𝒐𝒇 𝑪𝒉𝒊𝒏𝒂 (𝑷𝑹𝑪), against the United States' critical infrastructure. ✅𝗖𝗥𝗜𝗧𝗜𝗖𝗔𝗟 𝗥𝗘𝗖𝗢𝗠𝗠𝗘𝗡𝗗𝗔𝗧𝗜𝗢𝗡𝗦 📍𝗙𝗲𝗱𝗲𝗿𝗮𝗹 𝘀𝘂𝗽𝗽𝗼𝗿𝘁 𝘀𝗵𝗼𝘂𝗹𝗱 𝗯𝗲 𝗶𝗻𝗰𝗿𝗲𝗮𝘀𝗲𝗱 to develop and replace outdated technology in critical infrastructure with secure alternatives. 📍𝗣𝗿𝗼𝗺𝗼𝘁𝗲 𝗮𝗻𝗱 𝗶𝗺𝗽𝗹𝗲𝗺𝗲𝗻𝘁 President Biden's national cybersecurity strategy. 📍𝗔𝘀𝘀𝗶𝘀𝘁 𝗮𝗹𝗹𝗶𝗲𝘀 in resolving cyber incidents by engaging in *proactive international diplomacy.* 📍𝗜𝗻𝘃𝗲𝘀𝘁 𝗶𝗻 𝗔𝗜 𝗮𝗻𝗱 𝗾𝘂𝗮𝗻𝘁𝘂𝗺 𝗰𝗼𝗺𝗽𝘂𝘁𝗶𝗻𝗴 𝗿𝗲𝘀𝗲𝗮𝗿𝗰𝗵 to improve cyber defenses, recognizing the potential of these technologies to detect and mitigate attacks. 📍𝗣𝗿𝗼𝘃𝗶𝗱𝗲 𝗴𝘂𝗶𝗱𝗮𝗻𝗰𝗲 𝘁𝗼 𝗻𝗼𝗻-𝗳𝗲𝗱𝗲𝗿𝗮𝗹 𝗲𝗻𝘁𝗶𝘁𝗶𝗲𝘀, clarify protocols, and support victims of cybercrime instead of imposing punishment. 📍𝗖𝗼𝗻𝘀𝗶𝗱𝗲𝗿 𝗿𝗲𝗴𝘂𝗹𝗮𝘁𝗼𝗿𝘆 𝗮𝗻𝗱 𝗳𝗶𝗻𝗮𝗻𝗰𝗶𝗮𝗹 𝘀𝘁𝗿𝗮𝘁𝗲𝗴𝗶𝗲𝘀 to incentivize the removal of obsolete technologies and encourage updated and secure systems. ✅𝗞𝗘𝗬 𝗤𝗨𝗢𝗧𝗘𝗦 𝗙𝗥𝗢𝗠 𝗧𝗛𝗘 𝗛𝗘𝗔𝗥𝗜𝗡𝗚: "𝑇ℎ𝑒𝑠𝑒 𝑎𝑡𝑡𝑎𝑐𝑘𝑠 𝑜𝑛 𝑜𝑢𝑟 𝑐𝑟𝑖𝑡𝑖𝑐𝑎𝑙 𝑖𝑛𝑓𝑟𝑎𝑠𝑡𝑟𝑢𝑐𝑡𝑢𝑟𝑒 𝑎𝑟𝑒 𝑛𝑜𝑡 𝑗𝑢𝑠𝑡 𝑖𝑛𝑐𝑖𝑑𝑒𝑛𝑡𝑠 𝑜𝑓 𝑐𝑦𝑏𝑒𝑟𝑐𝑟𝑖𝑚𝑒 𝑜𝑟 𝑒𝑠𝑝𝑖𝑜𝑛𝑎𝑔𝑒; 𝑡ℎ𝑒𝑦 𝑎𝑟𝑒 𝑑𝑒𝑙𝑖𝑏𝑒𝑟𝑎𝑡𝑒 𝑎𝑛𝑑 𝑐𝑎𝑙𝑐𝑢𝑙𝑎𝑡𝑒𝑑 𝑠𝑡𝑟𝑎𝑡𝑒𝑔𝑖𝑒𝑠 𝑒𝑚𝑝𝑙𝑜𝑦𝑒𝑑 𝑏𝑦 𝑡ℎ𝑒 𝐶ℎ𝑖𝑛𝑒𝑠𝑒 𝑔𝑜𝑣𝑒𝑟𝑛𝑚𝑒𝑛𝑡 𝑎𝑖𝑚𝑒𝑑 𝑎𝑡 𝑑𝑒𝑠𝑡𝑎𝑏𝑖𝑙𝑖𝑧𝑖𝑛𝑔 𝑜𝑢𝑟 𝑐𝑜𝑛𝑓𝑖𝑑𝑒𝑛𝑐𝑒 𝑎𝑛𝑑 𝑤𝑖𝑙𝑙𝑖𝑛𝑔𝑛𝑒𝑠𝑠 𝑡𝑜 ℎ𝑒𝑙𝑝 𝑚𝑎𝑖𝑛𝑡𝑎𝑖𝑛 𝑡ℎ𝑒 𝑝𝑒𝑎𝑐𝑒𝑓𝑢𝑙 𝑤𝑜𝑟𝑙𝑑 𝑜𝑟𝑑𝑒𝑟." ~ Rob Joyce, Former Special Assistant to the President and The White House Cybersecurity Coordinator. "𝐼𝑡 𝑖𝑠 𝑒𝑠𝑡𝑖𝑚𝑎𝑡𝑒𝑑 𝑡ℎ𝑎𝑡 80% 𝑜𝑓 𝐴𝑚𝑒𝑟𝑖𝑐𝑎𝑛 𝑎𝑑𝑢𝑙𝑡𝑠 ℎ𝑎𝑣𝑒 ℎ𝑎𝑑 𝑎𝑙𝑙 𝑜𝑓 𝑡ℎ𝑒𝑖𝑟 𝑝𝑒𝑟𝑠𝑜𝑛𝑎𝑙 𝑑𝑎𝑡𝑎 𝑠𝑡𝑜𝑙𝑒𝑛 𝑏𝑦 𝑡ℎ𝑒 𝐶𝐶𝑃" ~ William Evanina, Former Director of the National Counterintelligence and Security Center. "𝑇ℎ𝑒𝑦 𝑜𝑓𝑡𝑒𝑛 𝑟𝑒𝑠𝑒𝑎𝑟𝑐ℎ 𝑎𝑛𝑑 𝑑𝑒𝑣𝑒𝑙𝑜𝑝 𝑒𝑥𝑝𝑙𝑜𝑖𝑡𝑠 𝑓𝑜𝑟 '𝑧𝑒𝑟𝑜 𝑑𝑎𝑦' 𝑣𝑢𝑙𝑛𝑒𝑟𝑎𝑏𝑖𝑙𝑖𝑡𝑖𝑒𝑠... 𝑂𝑣𝑒𝑟 𝑡ℎ𝑒 𝑝𝑎𝑠𝑡 𝑓𝑒𝑤 𝑦𝑒𝑎𝑟𝑠, 𝑤𝑒’𝑣𝑒 𝑜𝑏𝑠𝑒𝑟𝑣𝑒𝑑 𝑡𝑎𝑟𝑔𝑒𝑡𝑒𝑑 𝑧𝑒𝑟𝑜-𝑑𝑎𝑦 𝑒𝑥𝑝𝑙𝑜𝑖𝑡𝑎𝑡𝑖𝑜𝑛 𝑜𝑓 𝑣𝑢𝑙𝑛𝑒𝑟𝑎𝑏𝑖𝑙𝑖𝑡𝑖𝑒𝑠 𝑖𝑛 𝑉𝑃𝑁, 𝑓𝑖𝑟𝑒𝑤𝑎𝑙𝑙, 𝑒𝑚𝑎𝑖𝑙 𝑠𝑒𝑐𝑢𝑟𝑖𝑡𝑦 𝑔𝑎𝑡𝑒𝑤𝑎𝑦, ℎ𝑦𝑝𝑒𝑟𝑣𝑖𝑠𝑜𝑟𝑠, 𝑎𝑛𝑑 𝑜𝑡ℎ𝑒𝑟 𝑡𝑒𝑐ℎ𝑛𝑜𝑙𝑜𝑔𝑖𝑒𝑠 𝑡ℎ𝑎𝑡 𝑑𝑜 𝑛𝑜𝑡 𝑐𝑜𝑚𝑚𝑜𝑛𝑙𝑦 𝑠𝑢𝑝𝑝𝑜𝑟𝑡 𝑒𝑛𝑑𝑝𝑜𝑖𝑛𝑡 𝑑𝑒𝑡𝑒𝑐𝑡𝑖𝑜𝑛 𝑎𝑛𝑑 𝑟𝑒𝑠𝑝𝑜𝑛𝑠𝑒 𝑠𝑜𝑙𝑢𝑡𝑖𝑜𝑛𝑠." ~ Charles Carmakal, Chief Technology Officer Mandiant (part of Google Cloud)

90

5 Comments

Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile is in the public comment phase. If you have an interest in cyber IR and you haven't read rev. 3, it's well worth a look. https://lnkd.in/g8bQ_5Bp #dfir #nist Nearshore Cyber

9

New comprehensive Homeland Security cyber incident reporting rules - Federal News Network: New comprehensive Homeland Security cyber incident reporting rules  Federal News Network #CyberSecurity #InfoSec #SecurityInsights

1

This Kiteworks article provides a comprehensive guide to navigating the complex landscape of sensitive content communication risk within the context of NIST CSF 2.0. It's crucial for organizations to understand and mitigate these risks effectively, especially considering the ever-evolving cybersecurity threats. Well worth a read for any organization serious about safeguarding sensitive information in today's digital age. NIST CSF 2.0: The Ultimate Guide to Managing Sensitive Content Communications Risk 👉 Learn more: https://gag.gl/BSKceP #cybersecurity #compliance #NIST #NISTCSF #CybersecurityFramework

12

1 Comment

As organizations leverage on existing best practices and innovations to tackle security threats, there is still some confusion when it comes to defining and applying security risk management (SRM) and security risk assessment ( SRA). Both SRM and SRA have distinct roles in the broader process of managing security risks within an organization. Here are the different characteristics of each: ➡️ Security risk Management (SRM) 1. Definition – SRM is the process of identifying, assessing, prioritizing, and responding to risks in a way that minimizes their impact on an organization's objectives. 2. Goal - The main purpose of SRM is to develop strategies and actions to address and mitigate identified risks. It involves implementing measures to reduce the likelihood of risks occurring or their impact if they do occur. As well as optimizing on opportunities attributed to some of the risks. 3. Activities – SRM activities include risk mitigation strategies such as risk transfer, risk avoidance, risk acceptance etc and monitoring and review of risk response mechanisms. It aims to control and optimize risks in line with an organization's risk appetite. 4. Output - The output of SRM is a set of risk treatment plans or actions that outline how risks will be managed or mitigated. It involves implementing controls and measures to address risks effectively to an acceptable level across the organization. 5. Cycle – SRM takes the form of an overall program consisting of a framework that aims to function across and include everyone in the whole organization. 6. Scheduling – SRM is ongoing with regular intervals of review to refresh data and evaluate the efficacy of the mitigation action plans. 7. Alignment – SRM is aligned to the organizational goals and objectives. ✅ Security risk Assessment (SRA) 1.Definition – SRA is the process of identifying, analyzing, and evaluating potential risks that may affect an organization's ability to achieve its objectives. 2. Goal - The main purpose of SRA is to understand the nature and extent of risks faced by an organization. It involves identifying potential risks, assessing their likelihood and impact, and prioritizing them based on their significance. 3. Activities – SRA involves activities such as risk identification, risk analysis, risk evaluation, and risk categorization. It helps organizations to understand the potential threats and opportunities they face. 4. Output - The output of SRA is a combination of collected data that lists identified risks along with their likelihood, impact, and priority. 5. Cycle – SRA takes the form of a single phase under the security risk management program. 6, Scheduling – SRA is conducted on a need to basis. Complimentary SRAs can also be carried out as long as they align to and are guided by the SRM program. 7. Alignment – SRA process is aligned to the SRM program in terms of its principles and framework. #securityriskmanagement #securityriskassessment

385

162 Comments

This Kiteworks article is a good read for cybersecurity professionals who want to learn more about a roadmap for Department of Defense (DoD) contractors to achieve compliance with the Cybersecurity Maturity Model Certification (CMMC) 2.0. The article outlines the steps and strategies contractors need to take to meet the updated CMMC requirements, emphasizing the importance of understanding the new framework and preparing for the certification process. Your Ultimate Guide for CMMC 2.0 Compliance Get the CMMC Roadmap: https://lnkd.in/evfK7SC8 #CMMC #compliance #cybersecurity #blog #NIST

16