Kevin Mitnick In remembrance

It's here - CRQ Training! If you're a CISO, risk analyst or assessor interested in quantifying cyber risk don't miss this CRQ Mastery Workshop. Learn basic and advanced method. Hands-on exercises. Full toolkit and risk models. ISC2 and ISACA Chapters save and additional 20% for their members. 20 CPEs. More info and registration https://lnkd.in/ecVj8V5N #ISC2, #ISACA, #Training, CyberRiskQuantification, #CISO, #Cybersecurity

5

CMMC Level 2 Assessment Objective: Alternative Work Sites PRACTICE: Organizations must enforce safeguarding measures for containing controlled unclassified information (CUI) at alternative work sites. ASSESSMENT: Alternative work sites may include government facilities or the private residences of employees. Organizations must define and implement safeguards to account for protection of CUI beyond the enterprise perimeter. Safeguards may include physical protections, such as locked file drawers, as well as electronic protections such as encryption, audit logging, and proper access controls. Be prepared! Your assessor could ask to: 🔍 EXAMINE a list of safeguards required for alternative work sites 🗣 INTERVIEW personnel approving use of alternative work sites 📝 TEST organizational processes for security at alternative work sites (CMMC Assessment Guide: Level 2 Version 2.11, page 186) #CMMC #DoD #cybersecurity #NIST #InformationSecurity

47

Unlock actionable intelligence faster with GrayKey, empowering you to solve cases quickly, reduce crime in your community, and maximize your mobile forensics investment. With GrayKey, you gain... Technical Features: • Faster brute force access to iOS and leading Android devices, unlocking critical evidence. • Ability to access and extract data from devices, regardless of their state. • Access to credential stores like Keychain and Keystore, potentially decrypting previously inaccessible content. • Category-Based Extractions to target specific data efficiently. Evidentiary Results: • Protect your community with real-time information through swift extractions. • Bring closure to victims by obtaining in-depth data to help bring criminals to justice. • Solve more cases by accessing devices quickly and securing vital evidence sooner. • When time is critical, selectively extract the specific data needed to jumpstart your investigation. Discover how GrayKey can enhance your investigations today. www.claritasinsight.com #OnlineInvestigations #CyberSecurity #MobileForensics #CLARITAS

1

By the end of 2024, the MVP Enclave and 800-171 Compliance Program will have undergone four intense Joint Surveillance Voluntary Assessments within a 12-month period by four distinct DIBCAC teams with four separate small businesses. Building enclaves and 800-171 Compliance Programs correctly is a challenging task. Who is guiding your company towards early assessment and beyond? You deserve to move forward with confidence. You deserve to win in 2025. #DIB #InformationSecurity #CMMC #CCA #CCP #ENCLAVE #JSVA #GOVCON #HAMPTONROADSDIB

67

8 Comments

Key quotes from the new 48CFR Rule for #CMMC. This rule is the one that goes into new and renewing contracts and requires having a CMMC certificate or self-assessment upon contract award. They tightened up the language quite a bit. On quick scan, it looks well done. The first 40 pages give a lot of information about the DoD's thought process on CMMC, including some technical clarifications like whether joint ventures need to be individually certified, and whether talking about CUI over the phone is in scope.

31

Check out this podcast interview with me just after my TribalNet keynote in Vegas recently. I was asked a random question at the end about the first concert I attended that you might find interesting (and it's not just what's listed in the podcast description). #infosec #CISO #CIO #businessleaders #cybersecurity #podcast #keynotespeaker #backtobasics #rockconcerts #ISAC

5

ISC2's CISSP: Is the Certification Broken? David Malachow interviews Ira Winkler on the Professional CISO Show, discussing Ira's open letter to ISC2 and its implications for CISSP certification. A must-watch for cybersecurity professionals! #ProfessionalCISO ['#ProfessionalCISO', '#Cybersecurity', '#CISSP', '#InfoSec', '#ISC2', '#CybersecurityPodcast', '#InformationSecurity', '#DataSecurity', '#ITSecurity', '#CyberRisk']

17

EPSS support is now available in Tenable #Nessus, along with CVSS v4. These scoring systems complement Tenable Vulnerability Priority Rating (VPR) to help you identify and take action on the vulnerabilities that pose the greatest risk specific to your environment. 🔗 Learn more: https://lnkd.in/g2kgY9Tx

7

EPSS support is now available in Tenable #Nessus, along with CVSS v4. These scoring systems complement Tenable Vulnerability Priority Rating (VPR) to help you identify and take action on the vulnerabilities that pose the greatest risk specific to your environment. 🔗 Learn more: https://lnkd.in/g2kgY9Tx

6

AC-02 is in the top 5 most important controls I'd recommend developing familiarity with 🚨 Let's continue our Neverending Story through NIST 800-53 with: AC-02 Access Control Account Management Simply stated: AC-02 governs: - Accounts and people (users, managers, roles, groups, etc.) - Access authorizations and privileges - Account management processes - Account monitoring and review - Account PII privacy ➡️ There are 12 control elements (A-L) within AC-02 🙂‍↕️ which each need to be fulfilled or inherited for overall AC-02 compliance How to simplify control implementation: - Consider how account management is conducted throughout the enterprise, application team, cloud service provider, data center, etc. - Map to Identity and Access Management tools and services - Leverage inheritance for external team services - Revisit onboarding and off-boarding processes How to automate control implementation & assessment: - Integrate configuration checks for access control mechanisms - Leverage Identity and Access Management capabilities - Configure logging and alerts for audits and monitoring - Automate account review checks ⬇️ Let me know what I missed ⬇️ #GRCEngineering #NIST #NIST80053 #Cybersecurity #ZeroTrust #GRC #AccessControl #PoliciesandProcedures #AI #AccountManagement

19

5 Comments

In this article for the IACP's Police Chief Magazine, PenLink's Johnmichael O'Hare and our own Trey Amick talk about how digital forensics and open-source intelligence (#OSINT) are playing crucial roles in modernizing police investigations: https://ow.ly/UH9O50SUg9q #DFIR

29

Tired of managing security testing across a scattered team? AttackIQ Mission Control centralizes control testing for faster remediation and improved ROI. 📅 Join Jose Barajas at 10 AM PT/12 PM CT/1 PM ET on July 18th to learn how AttackIQ Mission Control streamlines security operations for organizations. Discover how to seamlessly orchestrate testing across departments and locations, gain insights specific to your role with role-based dashboards, and simplify testing workflows for faster results. ➡ Register today and optimize your #SecurityOperations: https://bit.ly/3RZa5hw #LinkedInLive #Cybersecurity

13

Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile is in the public comment phase. If you have an interest in cyber IR and you haven't read rev. 3, it's well worth a look. https://lnkd.in/g8bQ_5Bp #dfir #nist Nearshore Cyber

9

I often hear the question "Where/What are our biggest security exposures?" Cyentia Institute recently had the opportunity to explore this question using data from hundreds of thousands of attack path assessments conducted through the XM Cyber Continuous Exposure Management (CEM) platform. The attached figure gives a categorical breakdown of what we observed based on all entities (digital assets), total security exposures, and exposures affecting critical assets. . The left-most chart represents the attack surface based on broad categories of digital entities discovered during attack path assessments. Active Directory constitutes just over half of entities identified across all environments. On-premises IT and network devices account for another 31% of entities and cloud environments house the remaining 17%. Not all entities, however, are exposed via attack paths. If we change the scope of the attack surface to include only vetted exposures (entities susceptible to attack techniques), things look different. The middle chart captures this perspective and Active Directory exposures dominate the attack surface. But not all of those exposures affect critical assets. To be truly effective, Exposure Management must encompass all environments and account for where critical assets are most at risk. If we once again rescope the attack surface to focus on exposures to critical assets, a very different picture emerges, which is captured in the rightmost chart. Cloud environments now encompass over half of all critical asset exposures, followed by AD at 33% and IT/Network devices at 11%. Does this sync with exposures across your attack surface? Which perspective/view/chart is your primary guide for managing exposures? The full report contains tons of additional insights on exposure management. Download here: https://lnkd.in/dPfqXG7y #cybersecurity #exposuremanagement #cyberrisk

48

8 Comments

Bit of a public service announcement. If you are thinking of posting an image of a postal letter or similiar item with a postal address and some codes that look a bit like QR codes (dot matrix codes, for example), and if you intend to redact the address, please redact those codes as well. These provide such things as the destination postal address and are easily readable. The full specification is also public - so no guesswork as to what is the post code. See this if you want the details for some UK formats - https://lnkd.in/eX4e8Cat

3

https://lnkd.in/gQ-kvMFK Maximizing Your Cybersecurity Skills with SANS Training Discover how SANS training can enhance your cybersecurity expertise in just weeks. Gain valuable knowledge from industry experts through digestible content and comprehensive resources. Don't miss out on this opportunity to upskill and obtain prestigious certifications. #CybersecurityTraining #SANSCertifications #IndustryExperts #UpskillYourself #CybersecuritySkills #ProfessionalDevelopment #ComprehensiveResources #CybersecurityExpertise #SANSInstitute #OnlineTraining

1

A new CIS/MS-ISAC report sheds light on #TribalSector #cyberthreats and concerns. What is keeping tribal cybersecurity leaders up at night? Link to the full report in our summary. https://bit.ly/4h7PGlr Center for Internet Security Cybersecurity and Infrastructure Security Agency #TribalOrganizations #TribalNet #Cybersecurity #CyberRisk #Ransomware #CybersecurityAwarenessMonth #CyberCrime #SocialEngineering #InformationSecurity #DataBreach #CyberMaturity #ThinkEXTEND

5