David Lewis, CISSP

Cybersecurity assessments of safety equipment and communications are extremely important. I’ve tried to align detailed requirements from ISA/IEC 62443 with the SANS ICS 5 Cybersecurity Critical Controls. Please let me know your thoughts and insights on this topic. https://lnkd.in/gyezspbv

29

3 Comments

Encrypted DNS Implementation Guidance - Published by CISA in May 2024. This document provides Federal Civilian Executive Branch (FCEB) agencies with actionable guidance for the implementation of encrypted DNS protocols and for enhancing the cybersecurity posture of their IT networks. It is intended to provide implementation guidance for federal agencies to meet federal requirements related to encryption of Domain Name System (DNS) traffic and enhance the cybersecurity posture of their IT networks, as set forth in Office of Management and Budget’s (OMB) Memorandum M-22-09.1

2

Great supply chain attack example & its wild. I'm seeing some of these alerts that led me down the rabbit hole. policytype="policy" srcport=51642 dstport=443 attack="malicious-url" direction="outgoing" user="JohnDoe" authserver="fsso collector" msg="URL blocked by malicious-url-list" profile="IPS" crscore=30 craction=8192 crlevel="high" hostname="cdn.polyfill.io" url="/" https://lnkd.in/gxTp3JhX

1

Major release published by DISA RE2! 📢 The latest DoD Cloud Computing Security Requirements Guide (CC SRG) has been released, officially marking the transition from NIST 800-53 Rev 4 to Rev 5 for DISA RE2! The CC SRG is now split into two distinct documents with new requirements for FedRAMP+ Impact Levels including extensive control changes. Check out the recent blog I wrote on the release for a deep dive. https://lnkd.in/ejfMW8BE

17

A business risk assessment will identify the challenges and opportunities inside your organization. We do all kinds of IT business assessments. Visit us at https://lnkd.in/duJ7mSF or call (901) 572-1355 to start the conversation! #draytonknowsit #It #technology

1

IT'S ALMOST TIME: CCP CLASS July 15-19th with Wise Technical Innovations Your talented instructors: Koren Wise, Chris Silvers, CISSP and Arnold Villeneuve Discount Code worth $150.00 --- GETREADY   Unlock the door to valuable CMMC Professional roles with our comprehensive training program. Designed for future assessors and professionals dedicated to enhancing cybersecurity measures, this course prepares you for the challenges and complexities of the CMMC framework.   🔍 What You'll Gain:   ✅ A true Understanding of the CMMC Program and NIST SP 800-171, as well as all source documents and tools.   ✅ Deep Dive into CMMC Assessment Processes including scoping, CMMC assessment process, reporting, and most importantly the 110 controls and 320 objectives.   ✅ Learn from Expert Instructors: Benefit from the knowledge of seasoned professionals with over 20 years of industry experience.   ✅ Hands-On Training: Participate in practical application exercises and real-world scenarios, including quizzes and practice tests.   ✅ Networking Opportunities: Connect with peers and industry experts to share knowledge and enhance your skills.   ✅ Join our renowned Blueprint Review, hailed as the key to exam success.   ✅ Virtual 5 Day "FLEX" Course.   ✅ Access daily class recordings for any missed sessions which are provided each evening. #CCP #CCA #CMMC #DIB #MSP #MSSP #informationsecurity #C3PAO

24

2 Comments

Take your cybersecurity program to the next level this month! Check out #OpticCyber's resources for maturing your cybersecurity program using the #NIST #CyberFramework! Check out our FREE profile template available at https://lnkd.in/exix4XM Need a little more help? Reach out to learn about our Advising Services to help you along your journey! #ManageTheRisk #KnowYourRisk #CyberRisk

4

Join our first episode one week today 📆 Are you looking for guidance to roll out a threat modeling program? Hear from two seasoned experts, John Taylor, CSSLP, CISSP, SAFe®SPC and 😷 Adam Shostack, about how to positively set the scene for your initiative… https://hubs.li/Q02Fc_6n0 #threatmodelingseries #threatmodeling #securebydesign

9

1 Comment

My book 📚 "Incident Response with Threat Intelligence" is also included in this promotion 🤓

65

7 Comments

6 ICS advisories for your review.

5

NIST NCCoE events are great forums bringing together industry, government, and academia to help protect critical infrastructure. It's great to see Faction taking the lead in decentralized private networking technology to conceal critical sensors, cameras, and other connected devices from adversaries!

1

Analyzing Phishing Email Headers: Protect Yourself from Online Scams Discover how to analyze phishing email headers in this informative video. Learn how to identify urgent or alarming language, generic greetings, suspicious links, and more. Stay safe from online scams and protect your personal information. #OnlineSafety #PhishingScams #EmailSecurity #CyberSecurity #ProtectYourself #StaySafeOnline #PhishingAwareness #OnlineScamPrevention #EmailFraud #InternetSafety

8

Here's a link to my RSAC presentation with Shawn Murray (President of ISSA) and Dr. Curtis Campbell (BoD, ISSA). Good session highlighting this year's, "Life and Times of Cybersecurity Professionals," research. https://lnkd.in/eiCh3gu4 #cybersecurity #infosec #RSAC #ESG #ISSA #CISO

10