Joseph Lindsay

Two years have passed since the infamous cyber-attack on Colonial Pipeline, a moment that brought the vulnerability of our highly connected society to the forefront and underscored the critical importance of cyber defense. The recent article from CISA sheds light on the strides made in collective cyber defense since that event. Key takeaways include: - The establishment of stopransomware.gov, providing actionable and timely cybersecurity information. - The launch of the Joint Ransomware Task Force and the Joint Cyber Defense Collaborative, emphasizing cohesive collaboration across government and industry. - Notable efforts to strengthen security practices in critical infrastructure, complemented by the expansion of capabilities such as "CyberSentry." - The imperative to prioritize cybersecurity at the highest levels and to normalize cyber risks for the general public. The article also highlights the pressing need to be prepared for potential future cyber-attacks, emphasizing the importance of prioritizing cybersecurity and building resilience into our infrastructure and society. Your thoughts and feelings on this topic are valuable. How do you perceive the progress in collective cyber defense, and what measures do you believe are essential for securing our digital future? https://lnkd.in/gxFjXXFg

2

https://lnkd.in/eV77tGVi "LLMs, with their advanced ability to comprehend and generate text, have become a near stand-in for generative AI in the collective mindshare. Along with code-generating copilots and text-to-image generators, which leverage a combination of LLMs and diffusion processing, LLMs are at the core of most generative AI experimentation in business today." #GenerativeAI #LLM #LargeLanguageModels #AI #ArtificialIntelligence

1

The enclosed indicates that in part the SEC case against SolarWind and it's CISO can move forward,'allowing the claims based on allegations of contemporaneous knowledge of falsity of public statements to go forward'. The SolarWinds case was tried under regulations pertaining to the incident in 2019. All things being equal, one wonders how such as case would be tried under securities law from December 2023 and the SEC cyber rule? Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Faisal Khan Veritas GRC Senebria SolarWinds U.S. Securities and Exchange Commission #cybersecurity #cyberriskmanagement

6

I'll share some thoughts on this as there is some confusion. "The federal government has spent $22 billion in recent years on technology from the top 100 national-security startups, a paltry portion of overall contract spending and less than half of what venture capitalists have invested in those same companies." While VCs are obviously concerned about revenue, the reporter ignores the most important issue. Valuations in young private companies are something like one part guesswork, one part aspiration, two parts salesmanship, and three parts milestones, with a fair amount of fraud mixed in particularly in bubbles, but even in more mature growth companies a 10x multiple is conservative. That $22 billion in DOD contracts probably represents something like $300-400 billion in valuations claimed by the ventures and VCs, if not more. Even if the realized valuation is less than that for DOD contractor ventures, it would still represent an attractive ROI over a decade. If total invested is $50 billion and the realized value for VCs is $150 billion over 10 years, it's still 3x, and within that there would be likely be several 10X ++. That's not much different than the rest of the markets VCs invest in. My guess is it's more on track to be 5x or more for the entire portfolio, which is much better than most investments, though needs to be due to the risk involved. The more troubling statistic is that only 1% of total DOD contracts are going to VC-backed startups. That is a terrible failing grade for the DOD with regard to favoritism for incumbents, and explains most of the problem about unhealthy relationships and insufficient innovation. Given the size of the DOD budget, it may not be quite as bad as it seems as they can and should act as their own investors as a proactive customer, and they do some of that, but the reality is that the bureaucracy is so expensive to navigate that it usually requires significant capital. In fact, the most successful DOD startups in recent years were founded or co-founded by billionaires, which pretty well tells the entire story. Quote: “Startups are either purposely being kept out, or the DOD has just not figured out how to take advantage of them,” said Tara Murphy Dougherty, chief executive of defense software company Govini. Venture-backed companies have consistently received around 1% of total Defense Department award spending annually going back through 2018, despite throngs of new companies joining the defense-tech field, according to Govini data. https://lnkd.in/gK7emEqT

2

3 Comments

Focusing on AI frameworks need attention within our security communities. " AI jailbreaking is the art of formulating clever prompts to coax AI chatbots into bypassing human-built guardrails, potentially leading them into areas they are meant to avoid." ..data corruption , AI software embedded downloads....not sure leaders picture helps the cause

2

CIO, AI, and Board Alert!! The veto of California's SB 1047, a proposed AI safety bill, has sparked a crucial conversation about the future of artificial intelligence governance. The oversight of Technology and Compliance is a core Board Responsibility. As I always say about the importance of business and governments working together for the value creation. This bill was not just another piece of legislation; it represented a significant step toward establishing clear and predictable safety standards for AI. Advocates (Research Community) argued it would provide a framework to mitigate risks, while opponents (Big Tech) claimed it could stifle innovation. As we navigate this complex AI landscape, boards must oversee AI Strategy and AI Risk so that management takes proactive measures to ensure compliance and safety in their AI initiatives. Here are some immediate steps to consider: 1. Risk Assessment: Evaluate your AI Use Cases and the associated AI models for potential risks that could lead to critical harm. Understanding these risks is the first step in responsible AI deployment. 2. Safety Protocols: Develop and implement robust safety protocols that address bias and cybersecurity risks. Oversight of AI model behavior is essential to maintain trust and accountability. 3. Compliance Planning: Prepare for both pre-deployment and post-deployment compliance. This includes annual audits, reporting requirements, and thorough risk assessments. 4. Enforcement Preparedness: Be aware that non-compliance can lead to significant penalties. Understanding the implications of these regulations is vital for sustainable operations. Globally, there is a growing consensus on the importance of transparency, accountability, and ethical AI practices. However, nuances in governance approaches, such as China's emphasis on sovereignty, remind us that the conversation is far from one-size-fits-all. As we look to the future, let’s champion a balanced approach that fosters innovation while ensuring safety. What are your thoughts on the implications of California Governor Gavin Newsom's veto? How can we collectively push for responsible AI governance? I invite you to share your insights in the comments. #CEO #KSgems #BoardOversight #Compliance #AI #Ethics #TechOversight #CIO #CTO #CISO #Risk Manuj Aggarwal CNBC James Callan Kara Reinhardt

3

Enforcement is one of the 3 reasons businesses implement privacy and data security programs. How compliant is your business with privacy notice, consumer request and non-deeceptive practice privacy practices? #dataprivacy #cybersecurity #ccpa #privacy

1

1 Comment