Christopher Ott, E.E

When in doubt, you should absolutely 👏 file 👏 the 👏 SEV4 👏 In his SEV0 session, Derek Brown (Service & Network Platform Lead, Plaid) shows us the importance of treating investigations as separate from incidents and how to use SEV4s to track investigations proactively. 🎯 ( 👀 Plus, making investigations a habit helps even junior engineers become better at incident management.) Ready to stop, drop, and SEV4? Watch the full session here 👉 https://lnkd.in/g3daTBRw #SEV0

11

2 Comments

DoD Contractors: FCI vs CUI We discuss CMMC Compliance requirements, implementing NIST 800-171 110 controls to meet CMMC Level 1 and prepare for CMMC Level 2 assessment.

2

1 Comment

There are new cybersecurity requirements for defense contractors. Are You Ready? 
With the Department of Defense's latest rule on cybersecurity compliance (CMMC), companies working with the DoD must meet stricter standards to maintain contracts. The stakes are higher than ever for those in the defense supply chain. Compliance isn’t just about meeting the minimum—it’s about protecting your company from risks and staying ahead of the competition. Need help navigating these new regulations? Apogee Global RMS can guide your organization through the process, ensuring you meet the necessary standards while safeguarding critical data. Learn more at https://lnkd.in/epwFY82b. Special thanks to JD Supra for publishing insights on this topic. #Cybersecurity #CMMC #DefenseContractors #RiskManagement #Compliance #ApogeeGlobalRMS

2

1 Comment

“The installation and usage of Starlink, without the approval of higher headquarters, poses a serious risk to mission, operational security, and information security,” the investigation states. https://buff.ly/4dW70ba #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement

1

“The installation and usage of Starlink, without the approval of higher headquarters, poses a serious risk to mission, operational security, and information security,” the investigation states. https://buff.ly/4dW70ba #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement

2

“The installation and usage of Starlink, without the approval of higher headquarters, poses a serious risk to mission, operational security, and information security,” the investigation states. https://buff.ly/4dW70ba #crisis #crisismanagement #complexity #chaos #crisisleadership #crisisplan #crisismanagementplan #stress #governance #decisionmaking #riskmanagement #riskinformed #securitymanagement #securityriskmanagement #resilience #humanfactors #emergency #disaster #emergencyresponse #travelsecurity #travelsafety #travel #businesstravel #tourism #travelrisks #travelriskmanagement #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance #safety #safetyfirst #safetymanagement #safetyassessment #safetyrisks #safetyculture #safetyanalysis #personalsafety #workplacesafety #healthandsafety #hazard #danger #peril #threat #PPE #protectivesafety #workplacesafety #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement

3

Battery Terms Defined🔋 Ah, CCA, DOD, RC and SoC. Learn these acronyms to help you choose the right power source for your vehicle. #LeadingTheCharge #BatteryBasics #BatteryTerms

11

📣 CIRCIA Reports Require How Much Info?! Should #DFARS clause 252.204-7012 incident reporting requirements expand to match #CIRCIA reporting requirements? While this move would make things more efficient for defense contractors, we’re pretty sure folks are underestimating exactly how detailed a proposed CIRCIA incident report will be. Get all the details from this week's episode. 👇

8

We have a great conversation with Dragos, Inc. coming up! ⤵️ Join us on 25 July for a #webinar that will demonstrate how ICS4ICS (Incident Command System for Industrial Control System) can improve #cyber incident response efforts. Register here: https://lnkd.in/gQ3RKsaq

102

2 Comments

We are back from a fantastic long holiday weekend with a cybersecurity roundup. Let’s get into it:   1️⃣ The Department of Defense has finalized its (CMMC) Program, mandating cybersecurity evaluations for DoD contractors and subcontractors handling CUI. https://lnkd.in/gFhkFYkU 2️⃣ Hackers are exploiting a vulnerability, CVE-2024-23113, in Fortinet products, with a severity score of 9.8, enabling remote code execution without authentication. https://lnkd.in/ggafKn7e 3️⃣ North Korean hackers have developed a new Linux variant of the FASTCash malware targeting payment switch systems in financial institutions, facilitating unauthorized cash withdrawals. https://lnkd.in/gHfTfUEU   #cybersecurityawareness #cybersecure #digitaldefense #staysafeonline #technews

3

Training OSC's for CMMC! There a host of companies doing Security Awareness and Threat training. Then there are companies including CUI with the Security Awareness and Threat training. But... What about Role-Based training??? The Top 3 Prime I worked with had hundreds of applications, cloud environments and data centers that included a host of different roles. To appropriately train each role for their particular application, cloud and/or data center was going to cost them about $500,000. The CISO was not going for that and told me: "Figure it out!" Well, I did! I created one CUI Role-Based training program that can be used for any application, cloud and/or data center. I provided the CUI Role-Based training program that could be used for any role for any application, cloud and/or data center for any OSC that I work with. Also... Lifeline Data Centers also provides this CUI Role-Based training program that can be used for any application, cloud and/or data center. I heard that Cyber Tackle Box is incorporating my CUI Role-Based training program that can be used for any application, cloud and/or data center in their training package. This CUI Role-Based training program that can be used for any role for any application, cloud and/or data center is the only training program I have seen that succinctly addresses 3.2.2 "Ensure that personnel are trained to carry out their assigned information security-related duties and responsibilities." This includes: "Comprehensive role-based training addresses management, operational, and technical roles and responsibilities covering physical, personnel, and technical controls. Such training can include policies, procedures, tools, and artifacts for the security roles defined. Organizations also provide the training necessary for individuals to carry out their responsibilities related to operations and supply chain security within the context of organizational information security programs." Remember what SP800-171/CMMC v2 is about??? PROTECTING CUI Every control statement should be prefaced with: Protect CUI by.... For 3.2.2: Protect CUI by ensuring that personnel are trained to carry out their assigned information security-related duties and responsibilities. The security-related duties means "CUI Security-related duties." Reach out and set up an appointment on my Calendly to discuss: https://lnkd.in/gJWRphYE #CMMC #DEFENSE #CYBERSECURITY #DEFENSECONTRACTORS

14

In May 2024, NIST introduced revision 3 of SP 800-171, bringing key changes to the way organizations handle cybersecurity for controlled unclassified information, or CUI. This update affects contractors and suppliers working with the Department of Defense, particularly those following the Defense Federal Acquisition Regulations Supplement, or DFARS. But with the Department of Defense maintaining compliance with revision 2 for now, many organizations are wondering: what does revision 3 mean for them? #NIST #DFARS #FEDRAMP

7

1 Comment

Meet the Badger: the ultimate multi-purpose unit designed to tackle a variety of challenges! With multiple configurations tailored for public safety, incident command, disaster response, and more, the Badger ensures you’re always ready when it matters most. #IncidentCommand #PublicSafety #DisasterResponse #TheBadger

12

This National #SandwichDay, we’re serving up a reminder that setting up smart security shouldn’t be complicated 🙅 With Arcules, you get a solution that’s customizable, reliable, and as easy to order as your favorite sub 🥪🥯🥙 Ready to “stack” your security options? Check out how simple it can be! 👇 #NationalSandwichDay #VSaaS #EasyOrdering #SecuritySolutions

14

2 Comments

Interesting point of reflection...and we like to do math too 🤓 so, let's see: to spend 10000hrs doing something you'd need to work 10hrs/day, every day of the week (Mon-Fri), no holiday for... 3,8 years! I am sorry, we love our job and we put a lot of time in it... we just work in a company where family and personal growth are as important as the business we produce: we wouldn't encourage this crazy working schedule here at MSI-DFAT. So no we could not possibly master DFAT in less than 4 years! However, over 25 years we did clock more than 10000hrs designing, creating and running DFAT activities, so YES WE MASTER this technology also according to Gladwell's rule (which by the way is based on scientific work of Dr. Ericsson) - the others to think we master this field are of course the engineers and specialists in the space industry. Who else has spent 10000hrs doing DFAT? 🖐 👉 [email protected] to know more about acoustic testing ** 🔊 🛰️ 🚀 #inventors #experts #10000hrs #DFAT #DFAN #engineering #acoustic #spacetesting #acoustictest #worklifebalance #growth #management #HR

3

A new white paper from TCCA-Critical Communications explores what public safety agencies and operators need to consider to successfully deploy video services supporting mission-critical operations, especially where the scale of its usage is considered ‘massive’. This term describes situations where the amount of video could potentially saturate network resources, if not appropriately managed. The overall objective is to ensure that first responders and public safety agencies (and by implication other critical communication sectors) can use video effectively and for operational benefit. #TCCA #criticalcommunications #video #data #security #firstresponders #publicsafety #broadband #missioncritical

3