Jason Pyle’s Post

We’re thrilled to announce the start of our SheSec Recognition Contest to celebrate Women’s History Month and recognize all the incredible women who have contributed to cybersecurity, past and present. 🔐💻 👉 Here's how you can participate each week and show your support: 1. Leave a comment on our #SheSec posts every week by tagging a woman in cybersecurity that you believe deserves recognition for each week's theme. 2. Every individual comment you make will enter both you and your nominated woman into a raffle. 3. You have the chance to comment multiple times a week, recognizing multiple women for their accomplishments in the industry. 4. At the end of the month, our team will randomly select one nominee from the raffle. 5. If your nominated individual is chosen, both you and your nominee will receive a $50 Amazon gift card as a token of appreciation for their contributions in cybersecurity. Let's come together as a community to celebrate the accomplishments of women in cybersecurity. By showcasing their excellence, we can create a more inclusive and empowering industry. #SheSec #WomenInCyber #CelebratingExcellence #EmpoweringWomen #WomensHistoryMonth #WomeninSTEM

The FTC published a haiku to summarize three principles of sound data security in response to a 2020 data breach in the #nonprofit sector: 1. Keep data secure. 2. Safely dispose after use. 3. Tell people the truth. Pretty straightforward, and it's not hard to do the right thing. Is your data at risk? 3 questions you should ask your technology partners: https://lnkd.in/gdd6NqZ9

🔥(Email from "your boss" marked "urgent!")🔥 "Need a quick favor! Stuck in an all-day meeting - could you run down to the local pharmacy and get $500 in gift cards. Just send me the card numbers - we'll reimburse you for the costs..." While most of us know that the various versions of this are a scam, organizations and people still fall for it. These come in a variety of flavors: boss email; FBI, police, or IRS outstanding fines; Hospital procedures for a relative; traveling overseas and stuck; etc. If they didn't work, they (the scammers) wouldn't continue to send them. Unfortunately, we usually all have an idea of the "one person" who might be susceptible in our family or place of business. If you don't have an education program in place, the "one person" is a ticking time bomb. Cybersecurity takes only a few minutes a month (well, it should be more) and should be part of all our regular routines. We offer programs from simple monthly questionnaires to more robust in-person training. If you or your organization are interested, please let us know and we'll be happy to speak with you. CMIT Solutions of Morristown (973) 285-3327

Donors' data security is crucial for non-profits. To safeguard their information, consider these 3️⃣ tips: 1️⃣ Ensure strong 🔒passwords and encryption, 2️⃣ Regularly update software, and 3️⃣ Educate staff on phishing scams and data protection. #DataSecurity #Nonprofits #cybersecurity

Say goodbye to time-consuming processes and hello to streamlined #efficiency. Vendor Centric’s latest software platform allows you to: 📁 Centralize: Maintain detailed records of all your contractors, vendors, and subrecipients in one place. 🔄 Simplify: Easily manage competitive and non-competitive (sole source) solicitations. ⚙️ Automate: Optimize processes and approvals, eliminating the need for manual forms and emails. 🗂️ Organize: Effortlessly store documents, track key dates, and monitor deliverables. 🔒 Secure: Collect sensitive information through a secure portal, ensuring top-notch cybersecurity. Join leading nonprofits like Atlantic Council, Polaris, and Meridian International, who trust our solution for enhanced efficiency and compliance. Get a demo - https://zurl.co/qwse #VendorManagement #Nonprofits #Compliance

Thank you Chris Roberts for highlighting the cascade of noise in our inboxes from sales and marketing. This challenge resonates in my dialogues with decision-makers who face an onslaught of unsolicited messages. While tools like Focused Inbox have offered temporary solace, many have shifted to safelisting trusted contacts by name, ensuring continuity should roles change. Yet, this leaves a vast majority of communication in limbo, often unseen. With click rates languishing below 1%, it's a stark reminder that our messages are adrift in a sea of irrelevance, failing to reach our intended audience. We must pivot towards more genuine, value-driven connections to pierce through the veil of spam. We need to leverage a privacy first approach and relationship building, treating contacts like people versus a number. #Leadership #Communication #SpamOverload #OnPoint

Time for the latest Hirewell scam/phishing warning message. Over the past year, we've shut down 5+ phony domain names. The latest scam appears to be targeting workers outside of the US. I don't understand it completely - but they are requiring job seekers to upload personal data to get a job. #1 - never share your personal data. No company should be asking for your full SSN or bank info before an interview. #2 - always make sure these people are legit. Are they on Linkedin? Are they on the company website? All of our recruiters are. Same for any other legitimate company out there. #3 - NEVER respond to a gmail address about employment. Believe it or not, those are pretty easy to get. Always make sure the domain matches the company's (ours is hirewell.com. or hirewell.net). In this case - they are using hirewell.in (I've flagged GoDaddy to shut this down) - we'll see if they do anything about it. #4 - don't reply to people on What'sApp or Telegram (I've never been on it). Apparently they are using - @financial_department_hw and @hwprojectmanager And whoever this person is - she doesn't work for Hirewell. I promise we'd do our best to not have typos on our employee badges (if we had employee badges). Be careful out there - there are way too many people trying to steal your identity (or get you to buy them gift cards and send them the pins). And if you find Scarlett Tollison - tell her to get better photoshop skills.

Blackbaud has settled with the Federal Trade Commission after being charged with poor security and reckless data retention practices, leading to a May 2020 ransomware attack and a data #breach affecting millions of people. Blackbaud is a U.S.-based #company listed on NASDAQ with operations in multiple countries and a provider of #cloud-based donor data management software catering to nonprofit organizations, like charities, education organizations, and healthcare agencies. The FTC's complaint alleges that the company "failed to monitor attempts by hackers to breach its networks, segment data to prevent hackers from easily accessing its networks and databases, ensure data that is no longer needed is deleted, adequately implement multifactor authentication, and test, review and assess its security controls" and "allowed employees to use default, weak, or identical passwords for their accounts.". As part of the settlement, the FTC ordered the software provider to improve its security measures and ensure that it deletes any #customer data that is no longer needed from its systems. Blackbaud will also be barred from inaccurately portraying its data security and data retention protocols and will be required to #create an information security program designed to rectify the concerns outlined in FTC's complaint

Advent Calendar - Door number 2 ✌🏼🚪 Personal data is information that can be used to identify a specific person. But what does that really mean? Personal data is a very broad term, so it is further categorized into either general or sensitive personal data. ⛄️ General personal data includes personal identification details such as name, address, mobile number, etc. ☃️ Sensitive personal data can be classified into one of the following categories: race or ethnic origin, political, religious, or philosophical beliefs, health information, etc. It is important that your colleagues are aware and handle data properly. Your team’s knowledge and diligence are crucial for your information security. A good rule of thumb is to treat personal data like a Christmas gift you were asked to look after for a friend: Take care of it, return it when finished, and do not lend it out to others. 🤝

Join me and the NPC of the Berkshires for a lunch & learn about data privacy! #riskmanagement #privacyriskmanagement