Stan Golubchik

I often get asked “where do I start with TX-RAMP?” Companies know they need it - they’re told they do. But it’s not easy to know where to start. Here’s what you need to know 👇 1️⃣ File for your provisional certification. This will give you 18 months to get the full certification. 2️⃣ Download the TX-RAMP Security Plan Workbook. This serves as your questionnaire and list of necessary controls (117 for Level 1 certification, 223 for Level 2). 3️⃣ Build your program, one control at a time. Once your program is built, you can submit your workbook and other documents to the Texas DIR for their evaluation. No expensive, third party audits necessary! TX-RAMP Certification is a big project, even for companies that have an existing cybersecurity compliance program. There’s a reason they give you 18 months to go from provisional to full certification! Your certification lasts three years, but there are some ongoing reporting requirements to meet. You need to monitor, fix, and report vulnerabilities and breaches to the Texas DIR. More helpful info can be found in the guide below. https://lnkd.in/etitFTkY 

11

📢 Check Point Again a Frost Radar XDR Leader in 2024 In this report, Check Point was cited as a Growth and Innovation Leader in Extended Detection and Response (XDR). Check Point XDR/XPR Key Highlights: • Collaborative Threat Prevention • AI Copilot • Consolidated Threat Intelligence and Analytics • Infinity Playblocks Automation • Centralized IOC Management • Threat Intelligence & Event Correlation Download your free copy of the Frost Radar™ XDR Report to learn more about why Check Point is a Growth and Innovation leader in Extended Detection and Response 👉 https://lnkd.in/gecJVKrG Yael Cinamon

4

What are your biggest challenges in vulnerability management? How do you prioritize and address them? Stay ahead of cyber threats with Skybox Vulnerability Managementl! Our solution helps you discover, prioritize, and remediate vulnerabilities across your entire attack surface. By integrating with existing security tools, Skybox provides comprehensive visibility and actionable intelligence for proactive risk management. Discover more: https://lnkd.in/gXtF2dFk #Vulnerabilitymangement #Riskreduction #informationsecurity #Ciso

1

Enjoyed reading this post from CISA Director, Jen Easterly on the USDA's adoption of FIDO Protocols, referencing the CISA's publication from the 20th: "USDA’s success story should inspire all enterprises to migrate to FIDO authentication". Referencing the CISA publication: "Authentication technologies that do not involve FIDO or public key infrastructure (PKI)—a security framework based on public key cryptography—to support confidentiality and integrity will only continue to put organizations at risk by allowing malicious cyber actors initial access to their networks via credential phishing attacks."

1

Tala Faletoese and I will be at the Inaugural Oklahoma City Official Cybersecurity Summit, rated Top 5 InfoSec Conference, this Friday, June 14! Visit us at the #ThreatLocker table for the latest in end point protection. Learn how to protect your enterprise from malware, ransomware and zero-day attacks. #OfficialCybersecuritySummit #CSSOklahomaCity #Cybersecurity #OklahomaCity #Oklahoma

10

💡 Unlock the Potential of Your PKI with the PKI Maturity Model! Are you maximizing the benefits of your Public Key Infrastructure (PKI)? The PKI Maturity Model (PKI MM) isn't just a tool - it's your roadmap to elevating your PKI's performance and security standards. 🛠️ Tailored Guidance: PKI MM offers a comprehensive framework, integrating best practices and expert recommendations to refine your PKI's maturity. From identifying improvement areas to implementing robust security measures, it's your go-to resource. 🔍 Assess, Improve, Excel: Leverage PKI MM to conduct thorough assessments, pinpointing vulnerabilities, and enhancing efficiency. Elevate your PKI's maturity level, mitigate risks, and align seamlessly with industry benchmarks. 👥 Stand Out: As a service provider, showcase the caliber of your PKI offerings by leveraging PKI MM to demonstrate excellence to your clientele. Consultants and auditors, use it to drive tangible improvements and provide unparalleled guidance to your clients. 📊 Benchmark and Adapt: Gain invaluable insights by benchmarking your PKI against peers. Stay ahead of trends, refine practices, and ensure your PKI stays agile and resilient. 🌐 Flexible and Dynamic: Designed to cater to diverse organizational needs, PKI MM is adaptable across various PKI implementations - both internal and external. Learn more about PKI Maturity Model: https://pkic.org/pkimm/ #pki #pkimm #pkic #maturity #improvement #assessment #benchmark #guidance PKI Consortium Leigh Bailey

22

In 2023, the manufacturing industry was the third-most represented industry in Arctic Wolf® Incident Response (IR) ransomware engagements, and fourth-most represented in IR business email compromise (BEC) engagements. (Link in comments) The median cost of a manufacturing ransomware attack responded to by Arctic Wolf Incident Response is now $500,000 USD. Can you ( Mr or Ms. Manufacturer) sustain downtime, interruptions, reputational damage, client data loss and more? We help many of the top local manufacturers in the area protect and defend their business from cyber threats by "making them a hard target" - putting in the defenses that will keep most of the "bad guys" moving on the next victim who hasn't locked their doors and windows.

5

1 Comment

Data leaks at financial institutions have permanent effects on your reputation 💳💻 Secureworks stands in the gap to help your #SecurityOperationsCenter quickly identify and respond to threats in your system Learn more:

3

🪧 SIEM ≠ MDR Welcome to part one of our three-part blog series where we share the difference between a SIEM system and MDR and how MDR can transform and augment your SIEM tool investment.

1

Another in my series “read between the lines: what the press release didn’t say but you need to know." It’s true that credential stuffing attacks are sometimes fueled by databases of stolen passwords that are purchased by an attacker. Other times they’re stolen from companies like Okta and Microsoft and AT&T, each of which have been victims of one or more major breaches within the past year. If it’s possible that some or all of your credentials were compromised in those incidents, you should invalidate your credentials immediately. You are under attack, now. I don’t just mean your personal password or authentication, I mean your entire database of passwords for your employees and customers. Industry leaders aren’t being completely candid with you about what’s happening.

1

1 Comment

🎥WATCH THE LATG CYBERCHAT REPLAY | IMPROVE YOUR SECURITY POSTURE! The LATG Cybersecurity Chat is designed to support organizations in developing and maintaining end-to-end cybersecurity strategies. This episode equips viewers to understand what's happening on the threat landscape and the value of LATG's Cyber Threat Assessment Program (CTAP). 🌟 Measuring the effectiveness of the security solutions in place has become increasingly difficult, and it is wise to regularly re-evaluate the effectiveness of your cyber security tools and solutions to ensure that they are working effectively and efficiently; a Cyber Threat Assessment Program (CTAP) can help you achieve this. Watch this episode to learn more: https://lnkd.in/dAjMHfD7 Ready to request a CTAP? Fill out the form on this page: https://lnkd.in/g3bEp5rj

5

Will AI curb cyberattacks or will it give rise to more? While there are many speculations, there is no definitive answer to this question yet. But one thing is for sure, there is drastic change coming up as AI implementations widen. Most CISOs and IT Security teams are expecting technology vendors to reduce complexity and make cyberattack prevention more simple. That's easier said than done. Chuck Brooks and Chandrashekhar are joining me on our upcoming talk on SecPod Webcasts, where we're going to talk about: - AI and its current impact on vulnerability management - How to stop future cyber attacks with AI - Leveraging AI with SecPod's CVEM framework to secure IT Reserve your slot: https://lnkd.in/gxAetjFq See you soon!

40

4 Comments

This recent ransomware attack on an Arkansas water treatment facility highlights a growing concern for critical infrastructure security. I shared some thoughts on what this breach means for the future of cybersecurity in the water sector and how we can better defend these essential services. Check out my full commentary and the detailed coverage below! 👇 #CyberSecurity #CriticalInfrastructure #Ransomware #WaterSecurity

31

1 Comment

TX-RAMP is becoming an increasingly important cybersecurity certification. Texas is leading the way in protecting its agencies from vendor risk by legally requiring cloud service providers to get the certification. Many SaaS, Edtech, and Healthtech companies are now on deadlines to get the certification. For larger companies with existing compliance programs, it’s not such a big deal. For midsize and smaller companies who don’t? It’s a significant lift. Smart and capable employees can get bogged down as they stretch to take on new compliance tasks. They’re capable of doing them, but figuring it all out takes time. We’re trying to make it easier for them with our new program, TX-RAMP Champ. TX-RAMP Champ makes it easier for companies to earn TX-RAMP by taking a lot of the guesswork out of the equation. We provide: 1️⃣ A complete TX-RAMP implementation plan. 2️⃣ High-quality documentation templates with required TX-RAMP components included. 3️⃣ Videos with step-by-step instructions on completing policies, templates, and other required documentation. 4️⃣ Personalized support to quickly clear roadblocks. We’ve designed this to help companies that don’t need a full-service Virtual CISO, but need a little bit of help completing their certification. Learn more at our fancy new TX-RAMP Champ webpage! #fciso https://lnkd.in/eiUNfg_E

27

9 Comments

Gartner predicts that by 2025, 45% of organizations will face a software supply chain attack. Are you prepared for this growing threat? Join me and Zayo Group’s Chief Security Officer, Shawn Edwards, as we dive into the alarming rise of supply chain attacks. We'll discuss what this means for your organization and share actionable strategies to help you mitigate these risks in our upcoming webinar. 🛡️ Don't wait until it’s too late — reserve your spot on the webinar today! https://lnkd.in/eJGMN9A8 #cybersecurity #supplychain #webinar

20

4 Comments

🌶️ Hot take 🌶️ Most SMBs should leverage an MSP. Now one second. Here are 3 reasons why you could benefit; 1. Better Products 2. Enhanced Security 3. Business Savings Here's the thing: ↳ MSPs invest a lot in their tools ↳ Not every company can do the same If you have a problem, most likely you are looking for the easiest solution to implement. MSPs are constantly meeting with vendor to explore better solutions or improve existing ones. If you are looking for the path of least resistance, an MSP is a huge enabler for your business. I may be biased though. ----- Riding rapids is risky business. Are you sure you have the right gear?

9

2 Comments