Alton Gibbs

The retirement of #PCIDSS v3.2.1 is now official, so your organization needs to be advancing in its transition to v4.0. This episode of Compliance Pointers will help you determine if you’re on the right path. https://hubs.ly/Q02wQbR50 #PCI

10

Look forward to having you join us for our Lunch & Learn webinar today on AI & Governance: Benefits, Risks, & the Survival of Your Business!

11

Hope you can join us for a robust discussion on an important topic!

9

It was just announced that #CompTIA was acquired by by H.I.G. Capital and #ThomaBravo. #H.I.G. Capital and Thoma Bravo have acquired CompTIA's brand and IT certification and training business and products. This acquisition aims to accelerate CompTIA's growth and expand its reach in the IT industry. The transaction resulted in the separation of CompTIA's #membership-based, #501(c)(6) nonprofit organization from the acquired business. It will undoubtedly add many millions of capital to the 501c3 which will enable it to do much more community good work and free up the training and certification division to grow without the limits of a #not-for-profits holding it back. I am a strong supporter of this move. Hats off to CompTIA president and CEO #ToddThibodeaux and the board of directors for their decision and #stewardship over the past couple of decades.  Todd said, “CompTIA and #TestOut share a passion and commitment to unlocking the potential of every student, instructor, career changer or tech professional reaching for the next rung.” CompTIA acquired TestOut, a provider of comprehensive IT training, courseware, online labs, and performance-based exams. This acquisition strengthens CompTIA's position in the #ITeducation market and expands its training and certification offerings. These stunning strategic moves clearly demonstrate CompTIA's commitment to providing high-quality IT training and certification solutions to individuals and organizations worldwide. As a long-time participant, cyber security advisor and member of CompTIA, I for one am excited for the potential and look forward to watching the next phases of this deal. https://lnkd.in/gRK85UPc

16

1 Comment

In 2023, the manufacturing industry was the third-most represented industry in Arctic Wolf® Incident Response (IR) ransomware engagements, and fourth-most represented in IR business email compromise (BEC) engagements. (Link in comments) The median cost of a manufacturing ransomware attack responded to by Arctic Wolf Incident Response is now $500,000 USD. Can you ( Mr or Ms. Manufacturer) sustain downtime, interruptions, reputational damage, client data loss and more? We help many of the top local manufacturers in the area protect and defend their business from cyber threats by "making them a hard target" - putting in the defenses that will keep most of the "bad guys" moving on the next victim who hasn't locked their doors and windows.

5

1 Comment

Recent third-party incidents have had a major impact on enterprises of all sizes and from all sectors. This is an important event to attend to learn how to mitigate this risk.

6

💲 Prepare NOW for the $200M K12 Cybersecurity Pilot Program 💲 In case you missed it, the FCC released the specifications and eligible services for the $200M K12 cybersecurity pilot program. We will have much more to share with you in the coming months as we approach the expected application window opening later this year. In advance of this opening, there are things you can do NOW to prepare for what the application will require. First, you can download the *DRAFT* version of the FCC Form 484 (https://lnkd.in/gbU_XDcX). This ONLINE ONLY form will be released later this year so that schools can apply to be part of the pilot program. This is the first part of the application, where applicants must provide general information about the school seeking support, including applicants’ experience with cybersecurity matters, whether they expect to implement cybersecurity recommended best practices and their current or expected use of free or low-cost federal resources.  Applicants will also be required to provide information about their proposed Pilot project, including a description of the goals and objectives to be achieved, the services and equipment to be purchased (and associated costs), and the cybersecurity risks the proposed Pilot project will prevent or address. But how can you gather this information? Vinson Protect CAN HELP! We have built a free audit tool (https://vinsonprotect.com) for you to use to audit your school’s preparation against various industry standards (including the K12 SIX Essential Cybersecurity Protections, Center for Internet Security's CISv8 Controls, and the ClassLink Cybersecurity Rubric) specifically called out in the pilot program announcement). This audit will help identify weaknesses and opportunities for improvement in your school preparedness program. It will give you a status report and security plan to help draft your proposal goals and objectives. Please let us know if you have any questions or want assistance getting started. #vinsonprotect #k12 #cybersecurity

28

1 Comment

In honor of Cybersecurity Awareness Month, Paul Laudanski, Director of Security Research at Onapsis discussed #security fundamentals with Digital Journal. With his deep expertise in threat intel and penetration testing, he offers insights for strengthening and protecting critical data. Check out the full article below! #CybersecurityMonth #Onapsis #CSAM

4

NCUA examiners have said that the ACET is no longer a requirement. They are now recommending that organizations choose an internal framework to align with such as NIST CSF 2.0, CIS, or other! They have stated the new NCUA ISE statements are for them to use as an examination tool and not for credit unions. I would recommend aligning with both an internal framework and the ISE by taking an evidence-based approach so you are prepped for your exam, and meet their requirements!

7

1 Comment

Once NIST SP 800-171 and SP 800-171A are published this month, federal agencies are on the clock to start using Revision 3 (outlined in the Office of Management and Budget (OMB) Circular No. A-130, “Managing Information as a Strategic Resource.” The policy states on page I-16: “For legacy information systems, agencies are expected to meet the requirements of, and be in compliance with, NIST standards and guidelines within one year of their respective publication dates unless otherwise directed by OMB. The one-year compliance date for revisions to NIST publications applies only to new or updated material in the publications. For information systems under development or for legacy systems undergoing significant changes, agencies are expected to meet the requirements of, and be in compliance with, NIST standards and guidelines immediately upon deployment of the systems.” Visibility of how your sensitive data is being handled through it's lifecycle will.be essential; even when it's sitting somewhere within your supply chain. Seclore Data Centric Security is a strong part of NIST and achieving zero trust. https://lnkd.in/efiMejPG #NIST800171 #SecurityRequirements #NIST800171A #AssessmentProcedures #CUI #OMBCircularA130

7

Looking forward to this discussion. A lot of firms have jumped in on the harmonization of testing across frameworks. But few have the experience of risk3sixty and LBMC Cybersecurity that focus not only on efficiency and saving our customers money but also the quality companies need who take security seriously. If you have committed to providing your customers a quality audit but want an easier way I hope you can join our discussion.

9

1 Comment