Resilience

Still relying on heat maps to communicate risk? There's a better way. Despite their popularity, heat maps often hide important risk factors. Their oversimplified, static view of complex threats can result in misguided decisions. So, what's a better alternative? At Resilience, we believe in providing risk clarity, not color. Learn more from our Sr. Director of Cyber Resilience, Robert D. Brown III. Check out his latest blog post, “Heat Maps: Don’t Do ‘Em.” If you have a different opinion, let us hear from you. Leave your comments below! ?? https://lnkd.in/gkZEugXk

Is the energy sector ready for the changing risks that come with digital transformation? The Resilience Risk Operations Center (ROC) has issued an advisory on recent changes in the energy industry and the potential threats to our critical infrastructure. While energy companies transition from analog to digital systems, critical infrastructure like nuclear plants, control centers, substations, and pipelines are particularly attractive targets for both nation-state attacks and financially motivated crimes like ransomware and even cryptojacking. The same defenses against attacks against critical infrastructure are the same hardening techniques that any organization should be using to protect your organization: ? Strengthen foundational security measures, by implementing a Defense-in-Depth Strategy: network segmentation, access controls, and systems hardening to reduce attack surface. ? Harden endpoints - implement endpoint protection with an update and test strategy. ? Proactively manage vulnerabilities - identify vulnerabilities, prioritize testing and deployment of known issues.? ? Secure remote access - restrict remote access, implement MFA, and monitor remote access activity.?? ? Incidence response planning: don’t just have a plan with clear processes and a chain of command; test it with a live tabletop exercise every year.? ? Penetration testing - do not just dive in, but under limited and well-controlled parameters, test your defenses with the help of an experienced team What trends have you noticed? Share your knowledge with us in the comments section below. ?? #Cybersecurity #DigitalTransformation #ThreatIntelligence

Looking back on an incredible Web Summit 2024 in Lisbon, where discussions around AI took center stage. Dr. Ann Irvine, Resilience's Chief Data and Analytics Officer, shared her insights during the fireside chat titled "Double Agent: Weighing AI's Cyber Risk vs. Reward." Special thanks to Kit Eaton for facilitating this important dialogue. Their discussion revolved around AI's dual role in cybersecurity, showcasing it as both a powerful defense tool and a breeding ground for sophisticated cyber threats. Some key takeaways include: ? It's important to balance innovation with responsibility as we address the challenges of this “cyber arms race.” ? We should all be working to make cyber risk a little more boring. Less hype, more management. ? While AI is relevant, so much still comes down to humans - the attackers are humans, and we’re working to protect humans. Thank you to everyone who contributed to making this summit a valuable experience! If you enjoyed some of the talks, please share some of your key takeaways below. ?? #WebSummit #AI #Cybersecurity #Innovation

Do tabletop exercises actually help build cyber resilience for an organization? How? Take the lessons learned from one global biotech company. Its challenge was ensuring that each department—from IT to the C-suite—understood its role in a crisis and was ready to act. In our latest case study, we share the steps they took to build a cohesive, well-prepared response strategy: 1?? Enhanced Visibility Across Teams The IT and Security teams identified a crucial need for clearer visibility and defined roles during cyber incidents. They used breach and attack simulations on the Resilience Edge platform to confirm that more executive involvement is necessary for effective security preparedness. 2?? Bridging the Gap with Tabletop Exercises (TTX) To build alignment, we organized a tabletop exercise that brought together executives and IT/Security teams to simulate a real-time incident response. This exercise identified areas for improvement in our response plan and demonstrated the IT team’s expertise and readiness. 3?? Actionable Outcomes and Increased Executive Support TTX initiated important discussions that drove tangible change. Executive teams better understood their role in incident response, leading to increased support for cybersecurity initiatives and new budget allocations for ongoing security efforts. By uniting technical and executive perspectives, this company transformed its incident response approach and strengthened its overall resilience. Curious about how to work Tabletop Exercises into your own organization’s incident response plan? Check out the full case study to learn more. #IncidentResponse #Biotech #Cybersecurity #RiskManagement

Are you fully harnessing the potential of cyber insurance for your business? Cyber insurance is more than just a safety net—it's a crucial element of your business continuity plan. With coverage for both first-party and third-party losses, these policies enable your business to swiftly recover from cyber incidents. Embracing the nuances of these policies is vital for risk managers. Comprehensive coverage mitigates financial loss and bolsters long-term resilience. Explore how you can integrate cyber insurance into your risk management strategy and ensure your business is better protected: https://lnkd.in/gszhA6xJ #CyberInsurance #RiskManagement #BusinessContinuity #Cybersecurity

Curious about the chain of events that unfold following a cyber crisis? Step into the action with our Cyber Resilience Tabletop Exercise (TTX), a live, gamified workshop in which brokers like you take on the role of cyber incident responders. Guided by Simon West and Graeme M. this hands-on session will equip you with valuable skills for real-world incident response scenarios. It’s a chance to: ?? Navigate the complexities of a cyber insurance policy during a crisis ?? Improve your communication with clients and stakeholders during stressful situations ?? Gain practical insights to support clients through challenging cyber events Mark your calendars: Tuesday, November 26, 2024 | Dublin, Ireland Ready to boost your resilience toolkit and connect with peers? Sign up today and get ready to strengthen your response skills in real-world scenarios: https://lnkd.in/gAp-WhG2 #IncidentResponse #CyberInsurance #RiskManagement #CyberRisk

How is the cyber insurance landscape evolving to address today’s complex risks? In a recent editorial for InsurTech Digital, Simon West, our Director of Customer Engagement, explores how advancements in AI, data analytics, and regulatory compliance are reshaping the cyber insurance industry. Here are some of his top insights: 1?? Modern IT's interconnectedness means one vulnerability can affect many. Insurers are shifting from static, questionnaire-based assessments to continuous, API-driven evaluations using real-time data, enabling dynamic policy adjustments. 2?? Adapting to new regulations like SEC guidelines and the NIS2 directive has increased scrutiny on "silent cyber" risks. Insurers are now required to provide clearer coverage and policy language that addresses emerging threats and evolving regulatory demands. 3?? As threats change, policy structures need to adapt. There's a growing trend towards specific policies that target risks such as AI-generated disinformation and autonomous vehicle hacks, rather than relying on broad, general coverage. 4?? Insurance should be more than just a policy. With the right provider, businesses can gain access to 24/7 claims support, forensic experts, and crisis communication teams—a comprehensive approach to cyber risk management. Take a deeper look into how technology and collaboration are transforming the future of cyber insurance. Continue reading: https://lnkd.in/gaRgqbPt #CyberInsurance #Insurtech #RiskManagement #Cybersecurity #AI

Faced with limited resources, outdated technology, and stringent investor compliance requirements, a transportation company with over 500 employees understood the need for a more strategic approach to security. They needed to enhance their cybersecurity visibility, empower their leadership with real-time insights, and streamline decision-making for proactive defense. To reach these goals, they partnered with Resilience to implement Breach and Attack Simulations (BAS) powered by AttackIQ. Here’s what they achieved: ?? Real-Time Insights for Strategic Decisions On-demand, agentless simulations enabled the company to see exactly how their servers, networks, and endpoints would respond to adversary behaviors. This visibility empowered leadership to make data-driven decisions on security investments. ?? Streamlined Compliance Resilience’s BAS reports provided actionable insights and clear performance metrics, helping the company meet both board and investor cybersecurity standards. ?? Confidence Across the Board Armed with comprehensive performance data, the company's board members and venture capital partners gained confidence in their ability to tackle modern cybersecurity threats, enabling faster, more informed decision-making. Check out the full case study to learn how Resilience’s Edge Solution is helping organizations like this transportation leader strengthen their defenses and stay one step ahead. ?? #DataDriven #Cyber #RiskManagement?

Ready to immerse yourself in the intriguing world of cyber threats? Join us for an exclusive "Hacker Salon" tailored for brokers eager to enhance their grasp of today’s digital risks, guided by the expertise of seasoned hackers. Join our Director of Customer Engagement, Simon West, as he delves into the tactics employed by cybercriminals, and discover how to better evaluate risks for your clients. In this dynamic session, you will: ? Experience a firsthand look at how cyber vulnerabilities are exploited ? Learn to pinpoint weaknesses that could jeopardize businesses ? Elevate your skills in crafting effective, resilient insurance solutions Mark your calendars: ??Thursday, November 21, 2024 ??London, England Don’t miss this chance to gain deeper insights into the cybersecurity landscape and connect with fellow cyber insurance professionals. Sign up today: https://lnkd.in/gRKDk-aP #Cybersecurity #CyberInsurance #RiskManagement #CyberRisk

We were proud to sponsor the 10th Annual VetsinTech #VeteransDay Gala last Friday at the Marines' Memorial Club in San Francisco. It was a memorable evening celebrating veterans, military spouses, and partners who have dedicated so much in service and are now paving their way into tech careers. The night was filled with inspiring stories, a wonderful awards dinner, and an energetic afterparty—all dedicated to supporting veterans’ successful transitions into the tech industry. Being a part of this incredible event and seeing the impact of VetsinTech’s work made us prouder than ever to support this important cause. Thank you to Michael McNerney for representing us at the event and to everyone who came out to celebrate and rally for veterans and their families. Together, we’re building a stronger, more inclusive tech community. #VetsinTech #Veterans #TechCareers?