Allen Gurney, CSM, PMP, ITIL, IGP

As cybersecurity threats escalate, the U.S. Department of Health and Human Services (HHS) has introduced robust performance goals to enhance the protection of healthcare systems. In this week’s Epiq Angle, discover how tabletop exercises are pivotal in aligning with these new standards by improving threat detection, enhancing team readiness, and ensuring comprehensive compliance. #HealthcareCybersecurity #HHS #RiskManagement #CyberReadiness #HealthcareInnovation Read the full blog here: https://lnkd.in/gSSdTsdD

1

A prominent water utility provider needed to manage an increasing volume of public records requests efficiently and in compliance with the Freedom of Information Act (FOIA). In today’s case study spotlight, learn how this organization used Epiq Discovery to reduce the time needed to process requests and the marked improvement they realized in their operations. Read the full story here: https://lnkd.in/gXcdKRng #FOIA #eDiscovery #operationalimprovements #casestudy

1

A hot take that should absolutely not be a hot take: We've baked bad InfoSec advice into a lot of common sayings by ignoring nuance and hard-learned lessons. Management may be best positioned to meet dogma with intentional uncertainty, but leaders should encourage everyone in the InfoSec organization to challenge those sayings wherever we hear them. "Pay your dues" implies that we've been doing things well, it just takes experience to see why. Instead, we should ask "what has our experience taught us?" "Follow the best practices" ignores the importance supporting differentiation in all phases of your organization. Instead, we should ask "how can we tune best practices to our use cases?" "The weakest link is the human element" forgets that people are only weak links if they are poorly equipped and that well-equipped people are the strongest link in any control scheme. Instead, we should ask "how can we set our people up for success?" "Too small to be targeted" fails to acknowledge the reality that anyone/anything can be exploited to generate value for an adversary. Instead, we should ask "what is our exposed attack surface?" "Trust, but verify" creates the impression that we should trust first and verify as an additional step. Instead, we should ask "do our systems verify explicitly to the right degree?"

11

1 Comment

If you're NOT directly affected by the Crowdstrike defect, you should be neck deep in recovery processes and BCP to confirm your org is ready to handle a similar disruption. If you pushed a valid update that put thousands of endpoints under your management into reboot loops, how would you correct the issue without sending a person to each machine? What configs and infrastructure need to be in place to enable those capabilities today? Documenting in a risk register that "we transferred that risk to our vendor" won't get business operations running again. If your change management process takes months to push through an Operating System configuration change under ideal circumstances, you need to understand the breakdowns, redundancies, and - most importantly - why your leadership teams haven't already identified and rectified this strategically important gap. This is your wakeup call. Don't ask for reassurances or allow your delegates to "get back to you on it". Embrace the uncertainty and plot a course. If you're in charge, go talk to the actual engineers and administrators and ask to see evidence that your org is ready to handle similar scenarios. Your employees, customers, board, and shareholders are trusting you to enhance the resilience of the organization. This is an easy win, either your operating model has accounted for the risk and you can demonstrate as much, or you've identified the deficiency and are implementing improvements.

30

Our society and business world are continually changing, affecting how you conduct eDiscovery today and in the future. Get insight into six trends affecting #eDiscovery in 2024. https://vrt.as/49OyMnD

1

With a global rise in ransomware attacks, one missed EDR alert could become a ransomware infection. Your IT team may be spread thin, but they don't have to fight alone. Download our ebook to see how MDR helps resource constrained organizations do more with less.

2

I can not agree more. To add to the conversation, often the reason for a breach is not so much related to technical competence of the CISO, but related more to budget cycles, bandwidth, political buy in and competing priorities for finite resources. Some of these do come down to the CISO’s ability to communicate effectively with the rest of the business, but sometimes the simple truth is that there is only so much an individual or team can do with the support and resources available.

29

2 Comments

And just like that, the future of another comprehensive national privacy law is uncertain. How many years have we been waiting for Congress to pass one? Almost too many to count. https://lnkd.in/gvxs5izG #privacy #dataprivacy

2

Finding enough cybersecurity professionals can be a challenge with today's labor shortage. So how can you get more out of your cybersecurity team? With Microsoft Copilot for Security and other AI-enabled Microsoft Security solutions. Watch this video to learn more.

1

We're starting to see more security leaders and their teams ask about 'Continuous Threat Exposure Management,' or CTEM, and for good reason—this proactive security approach is meant to reorganize your existing cybersecurity activities into a more holistic, continuous processes, saving time, money, and other resources along the way. Our team did a great job outlining some of the challenges and benefits of implementing a CTEM program (and how BAS can save you from some of the headache in the process). You can check out the webinar on demand here: https://lnkd.in/eN2sgKsi

7

1 Comment

Benefits of Learning to Leverage Autotask Headline: How do you increase MSP efficiency, improve customer satisfaction, and drive revenue growth? Learn to fully leverage Autotask. What are the benefits of learning to fully leverage your Autotask software? -Increase efficiency -Improve customer satisfaction -Drive revenue growth -Create a stress-free environment for techs Within a year, many MSPs that we work with will see: - Profits increase by 31,200K USD per Tech per Year - 50% reduction in Churn - 18% increase in T&M billable hours When MSP services work right, there’s no limit to how they can grow your business. So the question to ask yourself is: How would your business grow if you were free from service delivery issues? We want to see your MSP thrive. Share in the comments: what is one word to describe how you’d feel to have PSA software that works for you? (Free? Empowered? Motivated? Relieved?) The first step to learning how you can Fully Leverage your Autotask PSA is to download our #1 eBook Unshackled here:

2