Abby Strong

Enjoyed reading this post from CISA Director, Jen Easterly on the USDA's adoption of FIDO Protocols, referencing the CISA's publication from the 20th: "USDA’s success story should inspire all enterprises to migrate to FIDO authentication". Referencing the CISA publication: "Authentication technologies that do not involve FIDO or public key infrastructure (PKI)—a security framework based on public key cryptography—to support confidentiality and integrity will only continue to put organizations at risk by allowing malicious cyber actors initial access to their networks via credential phishing attacks."

1

📢 Check Point Again a Frost Radar XDR Leader in 2024 In this report, Check Point was cited as a Growth and Innovation Leader in Extended Detection and Response (XDR). Check Point XDR/XPR Key Highlights: • Collaborative Threat Prevention • AI Copilot • Consolidated Threat Intelligence and Analytics • Infinity Playblocks Automation • Centralized IOC Management • Threat Intelligence & Event Correlation Download your free copy of the Frost Radar™ XDR Report to learn more about why Check Point is a Growth and Innovation leader in Extended Detection and Response 👉 https://lnkd.in/gecJVKrG Yael Cinamon

4

As we get back from the craziness of RSAC, I'm getting ready for the next big event on the horizon. The CISO Village Summit by Team8 is back with 100 CISOs and security leaders joining me this June in California! The magic of the Summit is more than that of a regular conference; our 300-strong community is a place of genuine curiosity, innovation, and collaboration, offering a forum for professional and personal growth alongside the industry's best. Throughout this exclusive five-day event, don't miss the chance to engage in meaningful discussions with industry leaders on: * The changing threat landscape * AI’s impact on cybersecurity’s challenges and solutions * Socio-economics and geopolitical tensions filtering into cybersecurity policy * The complex CISO-CEO relationship * And more. Spots are limited and closing fast— so apply now to not miss out! https://lnkd.in/gKj-jvS5 Team8 #Team8CISOVillage #Cybersecurity

171

9 Comments

🔥 Tomorrow night at 6 pm PDT, join us at the OWASP Orange County #meetup where Mike Larkin, CTO and co-founder of Deepfactor will lead the 90-minute hands-on live #workshop "Vulnerability Reachability Analysis Using OSS Tools” and will dive into: ✅ What vulnerability reachability is and why it is important ✅ Two main ways of understanding reachability (static call graphs and runtime analysis) ✅ Two short exercises for the attendees to gain hands-on experience using both types of tools against real applications with real vulnerabilities We look forward to seeing you there. Check the link in the comments for sign-ups! #AppSec #Security #Deepfactor

13

2 Comments

Join Arctic Wolf Field CTO Christopher Fielder and Senior Product Marketing Manager Mike McCleary for an on-demand webinar that takes a deep dive into the just-released Arctic Wolf 2024 Security Operations Report. You’ll gain invaluable insights into the dynamic landscape of a large-scale modern security operations program and discover the key elements required for a world-class level of security operations that can reduce your cyber risk. Watch here: https://ow.ly/CriB50TFSgA #EndCyberRisk

12

Why make things more complicated than they need to be? We at Palo Alto Networks are convinced the only viable #strategy for the future is adopting #platforms. Listen to Nir Z. explaining why our #Strata Network Security Platform is the logical solution for complex network security and their management. It simplifies #operations, consistently enforces security policies, and protects against #advancedthreats all in one unified platform.  A #platform approach is not only scalable, simple, and effective, but it is also affordable! #SecuredbyPANW #WeVeGotNext #precisionAI Helmut Reisinger Florian Hartwig Sergej Epp Marc Mueller Damaris Soellner Angelika Kempf Martin Zeitler Andy Weiss Wojciech Golebiowski Benjamin Römhild

13

Just in time for October Cybersecurity Month - check out SeeMetrics newly updated boards for all people in the security org! From GRC to vuln management to product to CISO, each one can see real-time relevant metrics for what's needed. This month's webinar w/ CEO Shirley Salzman below:

2

Exciting news for CISOs in Bay Area! Introducing BayAreaCISO, a new chapter of Inspire Leadership Network, expanding the premier peer network for top cybersecurity leaders across the region. If you know a CISO in Bay Area please share the network with them. Learn more at: bayareaciso.org #CISO #CybersecurityLeadership #InspireLeadershipNetwork

11

Expel 🤝 modePUSH There's nothing more gut-wrenching for a company than experiencing a breach. Businesses of all sizes and industries face this threat every day, and despite the best defenses, falling victim is often easier than anyone wants to admit. modePUSH steps in during those critical post-breach moments, helping companies recover and rebuild. Now, with our partnership, Expel and modePUSH are working together to ensure that companies don’t have to make that call twice. Together, we help modePUSH customers not only recover but also strengthen their security posture to prevent future incidents. Discover how modePUSH + Expel can support your security strategy:

17

Thought we'd shared some of our best kept secrets for cybersecurity #sales and #marketing teams. 🎯 We got the DEETS. 💡Learn how to DELVE at www.delverisk.com

17

1 Comment

Thought we'd shared some of our best kept secrets for cybersecurity #sales and #marketing teams. 🎯 We got the DEETS. 💡Learn how to DELVE at www.delverisk.com

17

The greatest source of insight is the thought-leadership from customers. How the Turo team prioritizes safety, security and convenience is an inspiration. Thanks Michael Wilkins for sharing so others can get it right. #identity #identityverification #authentication https://lnkd.in/eK3jHuYd

17

They say that for a concept to be portable, it must be memorable. In that spirit, I wanted to offer a few suggestions for connecting to the intent of each of the ISO High-Level Structure (#HLS) elements. For those of you building your management system(s), or simply integrating a new MS (like #ISO42001) into your existing management system(s), please keep these quotes in mind. ➡️ Clause 4: Context of the Organization Understanding internal and external dynamics affecting goals and systems. 🖊️ “To know thyself is the beginning of wisdom.” – Socrates This speaks to the importance of self-awareness—an apt metaphor for understanding your organizational context. ➡️ Clause 5: Leadership Demonstrating commitment and setting direction for the management system. 🖊️“A leader is best when people barely know he exists, when his work is done, his aim fulfilled, they will say: we did it ourselves.” – Lao Tzu This captures the essence of leadership that inspires action and responsibility as a cultural norm. ➡️ Clause 6: Planning Determining risks, opportunities, and objectives for continual improvement. 🖊️“In preparing for battle I have always found that plans are useless, but planning is indispensable.” – Dwight D. Eisenhower It underscores the importance of the planning process, even (or especially) when conditions change. ➡️Clause 7: Support Providing resources, competence, awareness, and communication. 🖊️“Give me six hours to chop down a tree, and I will spend the first four sharpening the axe.” – Abraham Lincoln Your focus on preparation and equipping your resources aligns perfectly with this clause. ➡️Clause 8: Operation Executing and controlling processes to meet objectives. 🖊️“Well done is better than well said.” – Benjamin Franklin It emphasizes the importance of action and implementation over mere promises. People believe the behavior, not the words. ➡️Clause 9: Performance Evaluation Monitoring, measurement, analysis, and evaluation of performance. 🖊️“What gets measured gets managed.” – Peter Drucker This highlights the significance of consistent evaluation and feedback, both balancing and reinforcing. ➡️Clause 10: Improvement Continual improvement of the system and corrective action for nonconformance. 🖊️“The greatest glory in living lies not in never falling, but in rising every time we fall.” – Nelson Mandela This resonates with the spirit of continuous improvement and learning from mistakes. Failure isn't fatal unless we choose for it to be. I would genuinely love your feedback…what quote or quotes resonate most with you as you think about architecting your governance and management systems? A-LIGN #TheBusinessofCompliance #ComplianceAlignedtoYou

10

2 Comments

🖥️ 𝗠𝗶𝘀𝘀𝗲𝗱 𝗼𝘂𝗿 𝘄𝗲𝗯𝗶𝗻𝗮𝗿 𝘄𝗶𝘁𝗵 Evans & Chambers Technology 𝗮𝗻𝗱 Carahsoft 𝗲𝗮𝗿𝗹𝗶𝗲𝗿 𝘁𝗵𝗶𝘀 𝘄𝗲𝗲𝗸? 𝗡𝗼 𝗽𝗿𝗼𝗯𝗹𝗲𝗺. Catch-up with the recording of the 𝗭𝗲𝗿𝗼 𝗧𝗿𝘂𝘀𝘁 𝗳𝗼𝗿 𝗙𝗲𝗱𝗲𝗿𝗮𝗹 𝗦𝘂𝗰𝗰𝗲𝘀𝘀: 𝗔 𝗦𝘆𝘀𝘁𝗲𝗺𝘀 𝗜𝗻𝘁𝗲𝗴𝗿𝗮𝘁𝗼𝗿’𝘀 𝗚𝘂𝗶𝗱𝗲 webinar, and hear from Jonathan Holmes, Robert Jamil Evans, Honey Elias, and Kevin Esoda as they talk about federal ZT mandates, deployment strategies, and how to simplify ZT orchestration. Link in the comments! 👇 #ZeroTrust #ZeroTrustNetworking #ZTNA #Greymatterio

9

1 Comment

Are you coming to RSA Conference? If so, join us at SCW Coffee Shop! Bluestone Lane SOMA Coffee Shop 55 2nd St, San Francisco, CA 94103 On May 6th | 12:30PM PST. Join Secure Code Warrior CTO & Co-Founder, Dr. Matias Madou, Jeffrey Martin from Mendio, John B. Dickson from Lasithi Security, and Viswanath S Chirravuri from Thales Digital Identity and Security to learn about: Incredible techniques for winning over developers and helping them prioritize security The challenges in measuring security skill development, and how to overcome them Why a developer-centric ‘Trust Score’ could be the missing piece of the compliance puzzle for every top organization and can unlock the benchmarks needed to reach new levels of risk reduction in code. https://lnkd.in/gMzG2WuJ

12

Security Weekly Productions spoke with #Graylog CEO Andy Grolnick today at #RSAC.🎙 In this episode, Adrian Sanabria and Andy discuss achieving cyber resilience and strengthening security posture. 🔒💪 Organizations today are overwhelmed with the sheer magnitude of potential #cybersecurity threats and there is plenty of vendor buzz around #AI in Security products, but what is the reality? Threat detection and incident response (#TDIR) strategy and execution have never been more critical and are essential in maintaining cyber resilience and strengthening the security posture of every organization. TDIR aims to identify potential threats and respond before they can impact a business. A layered defense focuses on identifying threat activity, prioritizing investigations, and measuring risk. As a result, organizations can take the appropriate threat mitigation steps. These security strategies and protocols signify a step forward with a TDIR strategy where everyone from the CISO to the security analyst wins. Watch now and learn about: ✔ Prioritizing threats ✔ TDIR ✔ Automating remediation ➕ And more... https://lnkd.in/gG88jjqb #RSAC2024 #RSA #SIEM #threatdetection

26

Episode 173 of CISO Stories featuring Barak Engel Founder/CEO/Chief Geek at EAmmune Available now! Hosted by Todd Fitzgerald, Best-Selling Author of CISO Compass and VP, Cybersecurity Strategy, CyberRisk Alliance Security is both overcooked and underdeveloped at the same time, and we keep doubling down on insanity. Our own community is at great fault for pushing fear and ignoring service, leading to consistent, negative experiences for all other stakeholders in the organization - and ultimately the CISOs themselves. "Do more cyber" never had, does not, and never will lead to better outcomes, yet this is all everyone is talking about. The trifecta of fear (we fear it, we don't understand it, we know we must have it) is used effectively by vendors to drive an ever-increasing wedge into IT budgets, even as the actual utilization ratio of security tools is precipitously low (my estimate is 5%). Frustration abounds, the CISO job is a revolving door, and nobody's happy. Now the regulators are getting involved in all the wrong ways (see the recent SEC action against Tim Brown) - and it's entirely our fault. #ciso #collaboration #cybersecurity #leadership https://lnkd.in/e3HTdMua

3