Dean Beckley

I'm frequently asked 🙋‍♂️ by others on the cost of charging my EV9. Here is everything you need to know to calculate your EV🔋 versus Gas/ICE⛽️ comparison from a budget perspective. 💰 🎈 https://lnkd.in/e43UHNXP

27

13 Comments

Chairmen, Chairwomen, Directors on Boards and CEO's should all watch this United Health CEO's testimony from 5/1/24 on their Cybersecurity Incident. Ask: Do you have any certified CISSP or CISO qualified Board Members at the table, asking the hard questions and understanding the gaps? I would bet CEO Andrew Witty's board will change drastically with $22M ransom paid out of pocket and $872M in other costs and fees (plus inbound HIPAA fines). https://lnkd.in/gXsPtPxm

3

1 Comment

Thinking of implementing a SASE service option? The article includes a great list of things to consider and ask. . . #Cybersecurity

4

When an enterprise network goes down, you call in the incident response team and they do forensics. When your SCADA goes down, who do you call? Meet Lesley Carhart, technical director of incident response at Dragos, Inc., who focuses on products and services for the non standard part of cybersecurity. That means things like performing digital forensics on SCADA, industrial control systems, and critical infrastructure. There’s still some normal enterprise computing involved, but very often the stories told by practitioners are … well, just plain weird. https://lnkd.in/gVFBvtSg

19

2 Comments

If you aren't tired of my musings on the EPA's new alert on AWIA compliance, here's a new blog post with a little more depth on the topic. I am working in the wings to find ways to help bridge the public/private sector funding gap for drinking water cybersecurity, particularly finding ways to fund network segmentation and visibility in the OT environments. #AWIA American Water Works Association Kevin M. Morley, PhD Jacques Brados, CISSP, MBA #watercybersecurity #OTcybersecurity #SCADAcybersecurity Jim Broome Dragos, Inc. Claroty

11

They're not the only ones. I could see replicating something like historian data for business analytics in the cloud but certainly not putting any portion of functional and operational SCADA there. I have seen some use cases, predominantly in utility field area networks, for field to cloud with some sort of edge compute. In this case, additional steps are usually taken to attempt to implement either zero trust at the field edge or some sort of private cloud interface, which then replicates the analytics data into a public cloud. Those vendors pushing/selling foundationally cloud-based SCADA systems have a difficult path to navigate. #SCADASecurity #OTCybersecurity DirectDefense

3

John Mracek has exceptional insights and best practices to share at #Secure360. The cyber landscape is experiencing an increasing sophistication of threats along with rapid modernization of tech. Learn how model of shared accountability is ideal since no one can do it alone! #tech #cyber

32

1 Comment

When your CISO reports to the Board of Directors, do they bring a business leader with them or are they comfortable speaking for the business leaders from the profit centers? Too often the CISO understands risk as a concept, but struggles to understand the real business impact of cybersecurity. Yes, ransomware is bad, but why is it bad for your organization? Will your revenue drop by 10%, 50%, 100% when ransomware hits? Does your revenue take a hit for the entire recovery time, or does it start to return as the recovery proceeds? On the protection side, multi factor authentication is critical, but what are the impacts to profitability (probably reduced because of increased user friction) and impacts to shareholder value (probably increased because of reductions to long term organizational risk.) The scale and sensitivity of these impacts will differ between organizations, who in the organization can properly assess them? Ideally the CISO, but usually not. The breadth and complexity of the CISO job requires a unique set of skills (yes, you can envision Liam Neeson's voice as you read that) but there are not enough credible candidates -- it is a relatively new position, first appearing in 1995! Struggling for candidates organizations tend towards those with strong cybersecurity skills at the expense of relevant business skills. Where most executives get on-the-job training in the organization's business, CISOs are chronically overworked and struggle to break out of the cybersecurity silo. Good for cyber protection, not good for managing the business impacts of cyber. The reliance on technology and the potential risks of new technologies require the Board to understand cyber risks. Does your CISO have the time to truly educate the Board, or do they focus on a few KPIs each quarter -- failing to demystify cybersecurity at all. In times of cybersecurity crises, the Board needs to understand all of the business risks and impacts arising from the incident. Will the CISO's priority to be educating the Board during the crises, or resolving the crises? Having a strong cybersecurity leader on the Board helps establish effective strategies, and manage cybersecurity risks. The lack of cybersecurity leaders makes it difficult to find good candidates as CISO or Board members, but the risks to organizations and impending regulations mean it needs to be a priority. https://lnkd.in/g3e-Xqjw #cybersecurity #board #director #itsabouttrust

8

4 Comments

Computing power is getting powerful to crack 8 character complex password. A human can remember certain length random complex password. We need to start relying on technology to use longer length including pass phrases. Passwordless technology is good, but it increases human reliance on technology. This is the battle between human vs machine. Eventually, machine will win when it comes to solving complex problems.

18

I see TAs looping over wevtutil and deleting event logs on any.run and various reports. Why? Anyone wants to fill me in - please let me know. I get the action is defense evasion. Most orgs send logs to a SIEM. Are they catching and deleting the logs prior to the SIEM push? Let me know. #cybersecurity

1

Dissecting Popular IT Nerds with Phil Howard Episode # 298 with Cyber Mike! https://lnkd.in/gis7DD6q Are you properly engaging your employees with your cyber training? How can you improve your cyber training? This shouldn't just be a checkbox you checked!

3

Had an incredible experience today supporting the ITDRC team at a CISA/FEMA/DoHS preparedness workshop in Denver. If you're interested in joining me and volunteering your expertise during times of crisis, check out https://lnkd.in/dYVhMReM. By leveraging your IT experience and joining a team of skilled professionals, you can make a dramatic immediate difference for hundreds or thousands of people during a crisis by getting communities reconnected and providing first responders with the critical infrastructure needed to support their missions. There are many roles available from networking to logistics, planning and coordination, so even if you can't deploy on site for a disaster, there are still ways to help. And the more volunteers there are, the more flexible we can be in our response. In terms of what you can expect to get out of it, satisfaction from helping your fellow citizens, hands-on exposure to a variety of current comms technologies, experience operating in crisis modes, and exposure to a wide range of corporate, NGO and governmental agencies are all likely outcomes. So if you're looking for a way to make a difference during a crisis, please reach out to me or sign up directly at https://lnkd.in/dYVhMReM. Let's work together to provide our biggest impact when our communities need us the most. #volunteer #IT #disasterresponse #communityimpact #ITDRC

21

3 Comments

Did you know you can pair wireless Ethernet and functional safety protocols in your application? Find out how this pairing benefits applications involving mobile equipment.

4

If you don’t have an incident response plan, now is the time to develop one. Being prepared to tackle a cyber incident helps minimize damage and get your organization back up and running as quickly as possible. Need help developing a robust incident response plan? Feel free to reach out to us.

1

Interesting article highlighting the importance of the CISO position and why organizations should value the insight and knowledge qualified CISOs provide.

8

Organization’s struggle with documenting NIST SP 800-171’s 3.3.1 System Auditing, especially when they are using Commercial Off the Shelf (COTS) software or cloud services. Like all of the other As the CMMC Churns Understand the Requirements series, we will walk you through understand the key definitions, the Assessment Objectives, and demonstrate how we show conformity to 3.3.1 System Auditing using SharePoint lists and Azure Sentinel. This Understand the Requirements video will be critical when we get to 3.3.3, Review and Update Logged Events, a THOROUGHLY misunderstood requirement. =============================================== Peak InfoSec Homepage: https://peakinfosec.com As the CMMC Churns Episodes: https://lnkd.in/eVGYGs3g Contact Peak InfoSec for Support: https://lnkd.in/e8sM_2Z3 Email: cmmc@peakinfosec.us =============================================== #cuicon #cmmc #cmmc2 #32cfrpart2002 #32cfrpart170 #infosec #informationsecurity #compliance #cybersecurity #cui #fci #cmmcab #thecyberab #nist800171 #defenseindustry #defensecontractors #defensecontracting #grc #manufacturing #dfars #manufacturingindustry #dib #satellite #satellitecommunications #satellitesystems #managedserviceprovider #msp #managedsecurityservices #mssp #DoD #GovCon #governmentcontracting #SmallBusiness #contracts #contractors https://lnkd.in/entjZARv

11

If you get a call from me or one of my counterparts related to this, please take it seriously. If we provide you information that you have a system "beaconing" to a known-bad IP address don't think that just pulling that one system offline is sufficient. Threat actors often compromise the first system they can in your organization (i.e., someone fell for a phishing attack, you had an unpatched vulnerability, they brute-forced remote access). That first device they compromised is their gateway into your network, and that device is not their end goal. You must "hunt" your network to see where they've moved since the initial compromise.

38

1 Comment

1,212. ‍ The number of comments on my post for the NIST CSF 2.0 PowerBI template. All of your support and interest for my PowerBI work continues to amaze me - I ran out of connection requests in an hour trying to respond to everyone. ‍ One of my core tenants is building in public. Just start. Get it on paper. Get it in the world. ‍ The magic happens when all of you see it and provide feedback. I learn something new every time - and realize how much more work is ahead. ‍ So, what have I been working on? ‍ 1. I am re-designing the NIST CSF 2.0 PowerBI template to be 10x better than the demo 2. Launched a new website + migrated off Gumroad to Lemon Squeezy for template distribution 3. Kicking around an idea to help you all make PowerBI reports just like I do, for free... more news on that to come Best, Mitchell PS - see all weekly updates on my website.

94

8 Comments

For years, I championed the reporting structure of the CISO to the board. Building on insights from Bob Zukis, I now advocate for CISOs and Technical experts serving on boards. Recent congressional interviews with breached organizations underscore the insufficient focus on cybersecurity in the boardroom. Cyber attacks continue to disrupt organizations, significantly impacting shareholder profits. It's time to prioritize cybersecurity on par with finance and audit. #Cybersecurity #Boardroom #BusinessSecurity #CISO #business #systemicdigitalbusinessrisks

85

18 Comments