Jeff Williams

Prior versions of the CSF were built around five key functions — identify, protect, detect, respond, and recover — but version 2.0 adds a sixth: govern. Governance encompasses how organizations make and carry out informed decisions on cybersecurity strategy. The CSF’s governance component emphasizes that cybersecurity is a major source of enterprise risk that senior leaders should consider alongside finance and reputation. 🔥 🔥 IMHO ~ the govern function is the most significant change because of its emphasis on cybersecurity supply chain risk management. It has direct implications emphasizing on the responsibility of an organization protecting data well beyond the four walls of their organization. NIST 2.0 and “Zero Trust” both require Data Centric Security to deliver the full promise organizations are seeking when protecting their most sensitive data. #Zerotrust #datasecurity #NIST

16

1 Comment

What do you get when you combine micro-segmentation from Illumio and ZTNA Next from Netskope? A faster and easier path to #ZeroTrust. Learn more about our partnership and the benefits for enterprises in this article in SDxCentral.

4

Get an exclusive demo of DigiCert Software Trust Manager on May 30th. In this short demo, you'll learn how you can: • Secure store and control use of private code signing keys  • Centralize control throughout your software development lifecycle by defining and enforcing corporate code singing & security policies  • Gain visibility into disparate software teams, understanding who signed what software and when   • Reduce risk of complied software, including open-source vulnerabilities and malware  Secure your spot ⬇️

10

Given the new reality of today’s growing #threatlandscape and #complexity of #applications, the #pointproduct tool approach is ineffective. To optimize the performance of security architectures, increase the effectiveness of #cybersecurity teams, and, ultimately, advance defenses, #platformization is essential: a recent study by #IDC shows that, with a cybersecurity #platform, teams are 55% faster to address #cyberattacks and 58% quicker to #remediate security events – while organizations are in line with their business objectives, with a three-year #ROI of 203%.   More insights on our #platformization approach by Palo Alto Networks founder and CTO Nir Z. Helmut Reisinger Florian Hartwig Sergej Epp Marc Mueller Damaris Soellner Angelika Kempf Martin Zeitler Andy Weiss Wojciech Golebiowski

21

As attack surfaces continue to expand, managing cyber risk is becoming increasingly complex. Join Cloudflare and CrowdStrike to learn strategies and practical guidance on how to manage risk across more of your expanding attack surface. Register now: https://lnkd.in/ghmGSgnw

1

#AIGovernance is the hot topic of our age. #data and #AI are powerful combination but it may become liability very quickly. Join us on May 30th in person or virtually. #AIgovernance #datagovernance #privacymatters #NIST #IAPP

6

As we get back from the craziness of RSAC, I'm getting ready for the next big event on the horizon. The CISO Village Summit by Team8 is back with 100 CISOs and security leaders joining me this June in California! The magic of the Summit is more than that of a regular conference; our 300-strong community is a place of genuine curiosity, innovation, and collaboration, offering a forum for professional and personal growth alongside the industry's best. Throughout this exclusive five-day event, don't miss the chance to engage in meaningful discussions with industry leaders on: * The changing threat landscape * AI’s impact on cybersecurity’s challenges and solutions * Socio-economics and geopolitical tensions filtering into cybersecurity policy * The complex CISO-CEO relationship * And more. Spots are limited and closing fast— so apply now to not miss out! https://lnkd.in/gKj-jvS5 Team8 #Team8CISOVillage #Cybersecurity

171

9 Comments

Amplify detection capabilities with Recorded Future's Validated Sigma Rules, crafted by our research team to minimize false positives. Watch to see how to easily search, implement, and configure Sigma Rules without ever leaving Splunk.

2

Had an enlightening discussion with Shira Rubinoff✔ about the critical issue of digital impersonation and its various forms. I’m grateful for the opportunity to shed light on this imperative problem and explore strategies for combating it in today's landscape. Here are a few bonus scenarios that we hadn’t touched upon during the conversation: 🎓 Higher Education: ATO (Account Takeover) threats targeting intellectual property such as classified research papers and exams, coupled with potential ransomware attacks. 🌐 Charities: Direct money theft through fake donation channels, with donors receiving seemingly authentic thank-you email from bad actors. 📰 Media: Spreading of fake news, amplifying misinformation. 💼 Stock Exchanges: Manipulating share prices by displaying false stock information. #Cybersecurity #DigitalImpersonation #Onlinefraud

29

3 Comments

Rate limiting is an essential #cybersecurity technique that mitigates inventory denial, DDoS attacks, and other threats. See this Imperva guide to learn more about the technique and how it works.

5

The Future of Compliance is Now-

67

2 Comments

What doesn't DigiCert® Trust Lifecycle Manager do? This unified digital trust solution solution works for your entire IT organization, preventing outages, managing risk and enforcing policy — just to name a few.

15

1 Comment

Enterprises spend more on security but aren’t benefitting from the extra spend. Palo Alto Networks’ customers who buy security across 3 platforms spend more than 40x those that secure just one. Despite those dollars… “Adding incremental point products is not necessarily driving a better security outcome for them.” - Nikesh Arora, CEO of Palo Alto Networks The average enterprise uses upwards of 70 security products. Many of these products produce alerts identifying phishing emails or network access issues or odd device behavior. The security operations center (SOC) reviews these alerts. Estimates suggest the typical team receives between 5,000 & 11,000 alerts per day - every day. Worse still, every SOC team is short-staffed. No wonder these teams can’t keep up with the deluge. Fewer than 10% of alerts are ever reviewed. Many security breaches could have been detected earlier with broader coverage. Dropzone provides AI SOC analysts that never sleep. Leveraging the power of LLMs, Dropzone’s analysts collect alerts, fetch relevant information from other systems, and then triage alerts. These agents also inform copilots that empower security analysts to ask questions of their environment leveraging the insight of the AI analysts. RSA selected Dropzone a top 10 Finalist in the Innovation Sandbox. We’re thrilled to support Edward & the Dropzone team in fulfilling their mission. As Senior Principal Scientist, Edward architected the AI systems at ExtraHop, a network security company acquired for $900M. Our partner Andy wrote in greater depth about our vision for the company here : https://lnkd.in/dyUy6M_3. And if you’re curious to test it on your own, you can test drive it here : https://lnkd.in/djzXcwjs.

43

5 Comments

Tired of the hassle in managing secrets? Simplify your life with our Vaultless Secrets Management. Why settle for less and pay more for traditional Vaults? Sign up for a free demo and experience the difference of Zero Knowledge with Zero Hassle. #ZeroKnowledge #SecretsManagement

1