Mike Carpenter

Prior versions of the CSF were built around five key functions — identify, protect, detect, respond, and recover — but version 2.0 adds a sixth: govern. Governance encompasses how organizations make and carry out informed decisions on cybersecurity strategy. The CSF’s governance component emphasizes that cybersecurity is a major source of enterprise risk that senior leaders should consider alongside finance and reputation. 🔥 🔥 IMHO ~ the govern function is the most significant change because of its emphasis on cybersecurity supply chain risk management. It has direct implications emphasizing on the responsibility of an organization protecting data well beyond the four walls of their organization. NIST 2.0 and “Zero Trust” both require Data Centric Security to deliver the full promise organizations are seeking when protecting their most sensitive data. #Zerotrust #datasecurity #NIST

16

1 Comment

This guide addresses the importance of vulnerability management in enhancing security operations by identifying assets, mitigating threats, and ensuring compliance. It aims to assist security and risk management leaders in comprehending vulnerability assessment (VA) technologies within a broader exposure management framework. #vulnerabilities #Flashpoint #vulnerabilitymanagement #secops

4

Okta signed the Cybersecurity and Infrastructure Security Agency’s Secure by Design pledge at #RSAC to take meaningful steps in adopting #secure by design principles in the coming year. I am excited that we are accompanying our peers in the industry to take the steps needed to prioritize application security. Identity-based #attacks have become a top method for cybercriminals, and according to the Open Worldwide Application Security Project, broken access control is the number one most common web application security risk. It’s putting companies building their applications at risk. This is a priority for Okta. There’s never been a more critical time for us to come together and implement secure design principles to keep the #identity #secure. Learn more about this pledge https://bit.ly/3UQNLbz. Tomorrow is also Okta Showcase! I am excited to join Todd McKinnon, Sagnik Nandy , and others to share the latest product innovations & commitments Okta is making to secure identity. You can tune in here: https://bit.ly/4cLldaI

184

The Future of Compliance is Now-

67

2 Comments

A SMB building a SaaS product can you build the 6 CISA's Secure by Design components into your product as part of a #securebydesign foundation. Part 1/3 below on 1 )Increase the use of MFA, and 2) Reduce use of default passwords CISA's Secure by Design pledge has 6 reviewed components: 1.       Increase the use of MFA for users 2.       Reduce the use of default passwords 3.       Reduce classes of vulnerabilities 4.       Provide security patching 5.       Have a Vulnerability Disclosure Program 6.       Provide logging for your customers.   In your design you should consider the use of MFA to be the default behavior of your application. CISA recommends that you follow a 'seat belt chimes' design pattern to remind users to enable MFA. As you design the product you should require that administrative users of your application enable MFA. Admins should also be able to require their users to have MFA as a part of the default experience. You can see an example of this in the Cloudflare console in my post on creating a hardened account. On Zatik.io/blog   Your MFA features should focus on current best practices of phishing resistant MFA, or app based 2FA. Supporting SMS 2FA is something but is an engineering dead end when trying to sell to enterprises.   When building a SaaS application, you must not have any default passwords. Users must be prompted to create a new random password at account creation. If an admin is creating an account for users, you must support the ability to require users change their passwords when they first log in.   Please reach out if you have questions on implementing CISA’s recommendations in your product roadmap.

2

1 Comment

It was really great to be a part of this and have a chance to meet so many of of the folk that are so critical to the success of cyber security products and solutions. Marketing isn't just fancy words; it's about explaining the value in a way that resonates with the audience. It's about pulling on the differentiation of a solution and connecting. It's about building trust in a brand and creating exposure so meaningful conversations have the opportunity to happen. Awesome to see so many of our customers there, and to meet some new folk that we can add value to as well! If we didn't get a chance to speak there; hit me up and I promise to add some meaningful value to the good work that your doing...and then we can talk about officially working together. 😁 😉 I actually think all CISOs are in marketing and sales...most of them just don't realize it. The sooner they do...the easier their job will be. #ciso #riskmanagement #informationsecurity #digitalmarketing

74

3 Comments

How are threat actors weaponizing generative AI, and how can AI help the good guys? You'll find out in this eBook from Microsoft Security and OpenAI. Download it here. 👇

1

Struggling to understand the NIST CSF 2.0 framework? Download your copy of this guide to access an in-depth mapping of BeyondTrust solutions to the categories and sub-categories outlined in the NIST CSF 2.0 guidance, the CSF Reference Tool, and more! In this comprehensive free guide, you'll learn: 💡 The true impact of NIST CSF 2.0 across the cybersecurity landscape 💡 A breakdown of what's new and what’s changed in version 2.0 💡 How to increase your alignment to the framework Download now and strengthen your security posture. https://lnkd.in/gswu89pR #NIST #NISTFramework #Compliance #Cybersecurity #BeyondTrust

9

Cyware recognised in the JMP Securities’ Cyber 66 as a top 66 privately-held cybersecurity companies poised for significant growth and impact in the industry. “One of the key strengths of Cyware’s platform is its ability to facilitate threat intelligence sharing and collaboration among organizations. At the heart of Cyware's success lies its Cyber Fusion platform that combines threat intelligence and next-generation security orchestration, automation, and response (SOAR) to deliver a unique level of visibility and automated threat response. Cyware’s solutions enable enterprises to move beyond their traditional security operations and collaborate through bi-directional threat intelligence sharing via trusted networks such as information-sharing communities (ISACs/ISAOs).” #cyber #secops #innovation https://lnkd.in/egU6a9si

22

Are you ready to navigate the CMMC maze with ease and confidence? My CMMC 2.1 Desktop Reference Guide lays it all out in plain language, so you don't have to decipher the code alone. Whether you're looking to secure lucrative contracts or outpace the competition, our guide is your key to understanding and implementing CMMC fast and efficiently. Protect your data, protect your business, and put yourself at the front line of cybersecurity compliance. If you are ready to sidestep potential federal pitfalls and boost your profits then head on over and download your free guide now and start your journey toward CMMC mastery. https://lnkd.in/g3TpFmzs #CMMC #guide #compliance

1

1 Comment

Did you know the average employee received over 180 malware or phishing emails in 2023? Not too surprising as Mimecast Cloud Integrated identified 3.4M risky emails that passed through Microsoft and into employee inboxes. Does your organization have the extra layer of protection you need to stay secure? Not sure? Start your free threat scan today and we’ll show you your company’s risk landscape and identify areas to improve defense.

28

If you are a serious cybersecurity professional you will know that “good enough” is not good enough. That’s why more and more companies are turning to Mimecast’s Cloud Integrated security suite.

6

Discover how ransomware targets SMBs and how to safeguard your business in 4 actionable steps. Get this infographic from eSentire. DM for help getting started.

1

Big partnership news! Mimecast + Code42 will help organizations better protect from insider threats. The integration of Mimecast for Incydr Flows provides improved detection of risky user activities and data leaks across email, web, cloud, and endpoints. See what the integration can do for your organization! Learn more here -

21

Cyber ​​Security is becoming a critical central layer in the protection of the Armed Forces and therefore the defence industry (DIB) as part of the defence's supply chain protection. And with the world wide digitization of defence... MIoT, C2, and SW..."connecting every shooter to every sensor" cyber security may not be the weak link. #Defence #Defenceindustry #Cybersecurity

12