Elwin Wong

RSM US LLP is proud to sponsor the NetDiligence® 2024 Cyber Claims Study again this year. We sponsor this study because the insights this data brings to businesses about the current threat landscape is critical. From our work in the RSM Cyber Response Practice, and the data in the claims study it is clear that all businesses continue to face a significant cyber risk, due to the ever more complex digital systems that they operate. You need to truly understand digital system risk, to build a proper security & resiliency plan. RSM US LLP is here to help. #CyberResponse #CyberClaimsStudy #RSMUSLLP https://lnkd.in/g_SVeVSG

16

Recent industry incidents underscore the critical importance of robust Business Impact Analysis (BIA) and Third-Party Risk Management (TPRM). Join CISO Russell Teague for another #CybersecurityMonth session and discussion on building tailored BIA and TPRM strategies. Register now: https://hubs.ly/Q02MYnwS0 #HealthcareIT #CyberResilience #RiskManagement #keepinghealthcarehealthy

22

Great blog post how Threat Intelligence can enhance your Fraudstrategy. #Threatintelligente #fraud #Mobilemalware

4

SoCal CISO Community, please join me in welcoming your newest Governing Body member, Julie Harris, CISO at PulteGroup! Tomorrow at 2pm PST, you can find Julie and many other CISOs from your community convening for the final CISO Townhall of 2024. Join virtually tomorrow to discuss: -Enhancing cloud security and cost-effectiveness across diverse cloud environments through managed security services -Leveraging AI innovations while addressing global regulatory and data privacy standards to strengthen security strategy -Sharing best practices for implementing effective cloud security operations across a global footprint to ensure resilience and compliance Register now at My.Evanta.com! #socalciso #evantaciso #aisecurity #cloudsecurity

24

1 Comment

From the evolution of the cybercrime economy to the increase in encryption within ransomware attacks, recent changes in the #ThreatLandscape accelerate the need for dedicated security operations support for organizations of all sizes. In response, more teams turn to #MDR service providers to supplement and extend their inhouse security operations capabilities. Learn more here: https://gag.gl/MppPmt

6

SEC Charges R.R. Donnelley & Sons Co. $2.1 Million Fine for Cybersecurity-Related Controls Violations On June 18th, 2024, the U.S. Securities and Exchange Commission announced that RR Donnelley, a global provider of business communication and marketing services, agreed to pay over $2.1 million to settle disclosure and internal control failure charges relating to cybersecurity incidents and alerts in late 2021. This SEC settlement with RRD highlights critical issues around cybersecurity and internal controls. Key findings include inadequate controls over material non-public information (MNPI), heightened insider trading risks, and violations of the Securities Exchange Act of 1934. Key Allegations: - Inadequate controls to prevent MNPI misuse - Insider trading risks due to poor monitoring - Regulatory violations and insufficient disclosure controls Inadequate Cybersecurity Response: - Between Nov 29 and Dec 23, 2021, RRD's internal intrusion system issued numerous alerts. - Alerts were reviewed by a third-party MSSP and escalated to internal cybersecurity personnel. - Despite escalations, RRD failed to take timely action, leading to unauthorized data exfiltration of 70 GB, including personal and financial information of 29 clients. - Issues identified included lack of prioritization, workflow for alerts, and inadequate auditing of the MSSP's performance. - Only after an external company alerted the CISO did the firm respond effectively. How AdvisorDefense Can Assist Registered Investment Advisors (RIAs): We offer a comprehensive suite of services tailored to help RIAs meet SEC regulations and bolster their cybersecurity defenses. Our mission is to empower RIAs with the necessary tools and expertise to navigate the cybersecurity landscape, ensuring compliance with regulatory requirements and protecting client information. By partnering with AdvisorDefense, RIAs can enhance their cybersecurity posture, ensure compliance, and protect their clients from evolving cyber threats. Protect your clients. Maintain your reputation. Ensure compliance. Contact us to learn more about how we can support your firm. https://lnkd.in/eVKtr3_x #Cybersecurity #SEC #Compliance #RIAs #AdvisorDefense #CyberRiskManagement #FinancialServices #RegulatoryCompliance #CyberThreats #CyberSecurityAwareness #CyberSecuritySolutions

10

1 Comment

A summary of requirements from Reg S-P but also good all around practical guidance of how broker dealers ,or any entity, should be preparing for a cyber event and protecting customer information. Planning is critical to resiliency.

37

How are you dealing with 3rd party access to your organisation? My latest article on Forbes Technology Council is how to deal with this challenge.

2

1 Comment

The Security Exchange Commission's latest disclosure rules have significantly increased the pressure on CISOs and security leaders to strengthen their cybersecurity posture. Failure to comply could lead to severe consequences. Questions? We can help you navigate these new regulations with confidence. Contact us today to discuss a strategy for SEC-compliant cybersecurity ✔

1

This Kiteworks article is a great read for cybersecurity professions who are interested in learning about the 2024 Verizon Data Breach Investigations Report (DBIR) and how it underscores the escalating significance of third-party risk in cybersecurity. As organizations increasingly rely on external vendors and partners for various services, the exposure to potential data breaches and cyber threats through these third parties has surged. The report highlights that nearly 60% of breaches involve a third-party component, illustrating the critical need for robust risk management frameworks. Enterprises are urged to enhance their third-party risk assessment processes, implement stringent security controls, and ensure continuous monitoring to mitigate vulnerabilities. Insights on Sensitive Content from Verizon’s DBIR 2024 👉 Learn more: https://lnkd.in/emRXZKPi #cybersecurity #DBIR #databreach #VerizonDBIR

8