Neda Pitt

Did you know NIST offers a free course on their Risk Management Framework? Here is a quick rundown of what the course is like and a brief summary of the NIST RMF.

1

⚠️ A cybersecurity advisory was issued recently regarding a vulnerability in Apache OFBiz®. The vulnerability could allow an attacker to execute remote code, potentially leading to a breach. Dox offers more details about the vulnerability and updates to prevent a breach at https://lnkd.in/eK4gWJvr. #Apache #OFBiz #Vulnerability #DoxElectronics #CybersecurityProfessionals

1

In March of 2022, the PCI council released version 4 of PCI DSS. Phase one of the new standards must be in place now, and phase two standards are due March 2025. Of the 13 new requirements, there are seven that will impact most merchants. https://bit.ly/3UGHGi1 #payments #pci

1

Establishing the objectives of your continuous audit program will guide the design and implementation of your program. Our CISO, Sean Atkinson, shares nine other steps you can take to ensure you have a robust program in place. https://bit.ly/44SH9vj #audit #risk #GRC #cybersecurity

1

Identity and access management (IAM) is a framework of tech and policies that let you manage how employees access company resources. For instance, Single Sign-on (SSO) is a subset of IAM. Traditional IAM and PAM tools are not designed to manage the unmanaged applications and devices that are now commonplace in how work gets done today. 1Password Extended Access Management ensures every identity is authentic, every application sign-on is secure, and every device is healthy. ✅ Get all the details: https://bit.ly/4cow9dr

53

1 Comment

What makes an effective Threat Hunting strategy? Check our guide on #ThreatHunting Maturity Model to evaluate your current hunting process and define what can be improved.

16

What makes an effective Threat Hunting strategy? Check our guide on #ThreatHunting Maturity Model to evaluate your current hunting process and define what can be improved.

11

Hopefully you a process to frequently assess your organization's cyber risks. ⚠️ If you don't currently have process in place, and you should, here's 6 Types of Risk Assessment methodologies and their use case. 📝 Feel free to reach out if we can point you in the right direction🤝 #cybersecurity #nonprofit #riskassessment

1

National Cyber Strategy Implementation: Regulatory Harmonization and Reciprocity https://buff.ly/3x1TzWX via Alex Sharpe on Thinkers360 #BusinessStrategy #Cybersecurity #RiskManagement

1

1 Comment

NIST CSF is very focused on risk management. If you don't know your risks, how can you know if your controls are properly designed? NIST provides a framework that focuses on the outcomes of what you should be doing. If you aren't totally sure about what you should be doing, start with this webinar by Todd Atnip, CISSP: https://lnkd.in/eR9yp2ew If you'd like a little more help or to talk through the process with someone who fully understands it, reach out to one of our experts today. We'd love to guide you through a risk assessment that creates a security program you can trust! #NIST #NISTCSF #risk #riskmanagement #riskassessment

25

1 Comment

The NIST (National Institute of Standards and Technology) Cybersecurity Framework is a widely recognized and widely used set of guidelines, best practices, and standards for managing and improving cybersecurity risk management processes. Learn about the five core functions here: https://bit.ly/3JIh0r1 #Cybersecurity #NIST #ITSecurity #DigitalTransformation #SecuritySolutions

3

In February of this year, the National Institute of Standards and Technology (NIST) published a major update to their Cybersecurity Framework (CSF) document. Amongst the various changes was an increased emphasis for organizations to strengthen IAM, PAM and cloud security practices. Check out our most recent blog post to learn more about the updates in NIST CSF 2.0 and the steps your team can take to adhere with these revised standards. https://lnkd.in/gnZC-Xya

8

This may be a little different post than normal but it comes from a moment this morning that hit home. It speaks to the question: "Who is Pelican3 Consulting?" Rob Blanchard, CISA, CDPSE and I (Paul Hugenberg III CPA, CISA, CRISC, CISSP, CMMC-RP) spend a lot of time thinking about this. What do we want to be? How do we get there? What is our proven process? Are we any different from our peer providers? This book is the basis for the sales and growth process my client is using. Our role is to enable them to outperform their needs, making IT a valuable tool. We should fully understand this Plan. IT through the lens of business is our proven process and our differentiator. So, we're reading their books and learning about their methods. We're invested in them. Anyone can do an audit, write a policy. How many partners do you work with that spend time diving into how you architect and run your business? This is who we are. This is who we want to be. This is how we get there. Welcome to Pelican3.

10

1 Comment

Struggling to understand the NIST CSF 2.0 framework? Download your copy of this guide to access an in-depth mapping of BeyondTrust solutions to the categories and sub-categories outlined in the NIST CSF 2.0 guidance, the CSF Reference Tool, and more! In this comprehensive free guide, you'll learn: 💡 The true impact of NIST CSF 2.0 across the cybersecurity landscape 💡 A breakdown of what's new and what’s changed in version 2.0 💡 How to increase your alignment to the framework Download now and strengthen your security posture. https://lnkd.in/eeSRpEmE #NIST #NISTFramework #Compliance #Cybersecurity #BeyondTrust

12

Struggling to understand the NIST CSF 2.0 framework? Download your copy of this guide to access an in-depth mapping of BeyondTrust solutions to the categories and sub-categories outlined in the NIST CSF 2.0 guidance, the CSF Reference Tool, and more! In this comprehensive free guide, you'll learn: 💡 The true impact of NIST CSF 2.0 across the cybersecurity landscape 💡 A breakdown of what's new and what’s changed in version 2.0 💡 How to increase your alignment to the framework Download now and strengthen your security posture. https://lnkd.in/eeSRpEmE #NIST #NISTFramework #Compliance #Cybersecurity #BeyondTrust

17

Episode 176 of CISO Stories featuring Michael C. Redmond, PhD, MBA, ISO Cyber Certifications, Deputy CISO of Louisville Metro Government Available now! Hosted by Todd Fitzgerald, Best-Selling Author of CISO Compass and VP, Cybersecurity Strategy, CyberRisk Alliance Data Governance is a key component in protecting the data from different points of view including information security confidentiality, integrity, and availability. There are several standards that have control requirements for Data Governance relating to PCI, HIPAA, and PII, data security and more. Two of the Internal Standards having Data Governance requirements are: GDPR, ISO/IEC 27001:2022 The internal policies pertaining to gathering data, processing data, storing date, and disposal of data storing data, and disposal of data are a concern of information security. These polices also affect but also asset management, It governs who can access what kinds of data and what kinds of data are under governance. https://lnkd.in/gBS9UVdJ #ciso #collaboration #grc #datagovernance

7

The #CISSP exam continues to evolve – Beginning today, all CISSP examinations worldwide will take place in Computerized Adaptive Testing (CAT) format.   Learn More: https://ow.ly/jhGS50RgtpW   #CISSP30

4