Crosshair Cyber的动态

Heading to FS-ISAC next week? Join me and my team at Booth#15 and don't forget to attend our session with Pentera's very own Jason Mar-Tang, CISSP, CCSP. Discover more on this topic with Jason Mar-Tang, CISSP, CCSP, Pentera's Field CISO, during his session titled ‘Security Validation as the Heart of Exposure Management.’ https://okt.to/nqV8dz FS-ISAC #FSISACSummit #fincyber #AutomatedSecurityValidation

Another step forward in our mission to become the benchmark in security testing ??

#CISOs face an overwhelming array of priorities. The recent "CISO Top 10" report from CyberRisk Collaborative offers invaluable guidance, addressing the most pressing issues through the insights of over 300 CISOs. One CISO highlighted, "These reports from CRC help us benchmark our activities with those of our peers... Often times when I see a topic on the list that is common to others, I know I can leverage the CRC network quickly." To view an article about this groundbreaking report, visit: https://lnkd.in/ggyzCrcs CC: CyberRisk Alliance, Chris Ancharski, Kristina Tanaka, Bill Brenner, Parham Eftekhari, Tom Ward, Connor Lechleitner, Purvik Shah

Good question! It depends. PE.L1-3.10.5 requires control and management of physical access devices. However, the control may be able to be marked as "Non-Applicable" if justified. For example, in highly controlled environments, the entire perimeter could be tightly controlled with multiple layers of security. Perhaps, that may include armed guards spaced so that they prevent physical access along with cameras and sensors to monitor the area. Also, this could be an internal gate inside a well fenced and locked area directly behind the photographer.

We came, we saw, we CMMCd! Great conference, full of informative sessions! Some of my favorites: James Goepel - Provided a wonderful deep dive of the CMMC with a legal aspect that was very enlightening. Stuart Itkin - Another great deep dive into 800-171 version three, the most interesting was the discussion about some of the new domains emerging from this newest version. Leia Kupris Shilobod, CCP, CISM - One of my absolute favorite sessions. She highlighted the prevalence of MSPs who are not versed in CMMC or not actually applying the required controls within their own technology stacks and processes. She provided great ways to perform due diligence on current or potential MSPs to ensure they are up to the task of supporting DIB companies. Kudos to Fernando Machado, CISSP, CISM, CCA, CCP and Matthew Titcombe for putting the sweat and tears to make this event happen! Their sessions are always engaging and very informative. ???????????? If you have questions about the CMMC and how it affects your organization reach out to Volar Consulting for a free 30 minute consultation. Our Certified CMMC Proffesionals can help navigate this information security compliance journey. #dib #cmmc #nationalsecurity #volarconsulting

Aaron Kirkpatrick, CISSP Venminder Third Party Risk Association (TPRA) - Third Party Risk Management - need I say more? Check out the upcoming #virtual #conference where he'll be focusing on #resilience and #thirdpartyriskmanagement. More details below. #risk #compliance #webinar

The results Pegasystems achieved with Cribl aren't unique. Our customers regularly share that they save between $3-5 for every $1 spent on Cribl. We have the data from hundreds of customers to back this up. More than the cost savings, which is impressive, is the toil reduction for IT and security teams. Customers also share that onboarding a new data source goes from weeks (or months) to minutes. They can get back to their actual jobs - like keeping revenue generating applications running - instead of fighting with data.

See today's ISACA Now Blog recapping a panel on lessons learned from July's CrowdStrike outage that I was privileged to moderate at the ISACA Conference Europe a few weeks ago. I think you will find the insights from panelists Ameet Jugnauth CRISC, CGEIT, Onatkut Varis, and Fabrizio Papi very helpful. #ISACA #CISA #CISM, #CISSP

Many organizations with OT infrastructure are struggling right now to sort out their cyber risk and resilience plan. Whether you manage manufacturing, critical infrastructure, building controls, hospital networks, or biotech, let's have a conversation about the types of initiatives that should be on your roadmap to protect your own business critical infrastructure into the future. There are many great options for visibility platforms, almost all of them require network segmentation restructuring. Let's talk about some of the best ways to accomplish that. #OTCybersecurity #SCADACybersecurity

The importance of #CISO skills/metrics for the board, demonstrating the business value and necessity of good #cybersecurity posture, as capabilities the CISO must master to be effective in securing the appropriate investment level. Join us as we discuss with Max Shier, CISO at Optiv, interactions with the board and leveraging metrics to show business value. https://bit.ly/3xqvb15 Show Notes: https://lnkd.in/eWcvM6cA