Cyber Defense eMagazine August 2019

More documents

Recommendations

Info

For all companies, a robust cyber security program stems from the top. Management must be fully-engaged in a cyber security initiative and support it 100%. Without executive buy-in, a cyber security program will not be successful. The C-suite -the CEO, COO, CFO, CISO and CSO – must become informed and proactive, not reactive, regarding cyber security. A culture of cyber security awareness, due diligence and responsibility must prevail. The internal IT team, as well as any external IT professionals used, should be aligned and in direct communication with a cyber security organization; one which specializes in cyber security and has a team of cyber security professionals who are experienced and current on the latest cyber threats and effective strategies for defending against them. Some of these organizations offer mentoring, training and certification programs for their clients’ IT teams and MSP staff which should be pursued. Additionally, all employees should be educated regarding their responsibilities to the cyber security initiative. This includes guiding them with policies relating to effective cyber security practices such as changing passwords regularly, being aware of what constitutes suspicious emails, turning off their computers and personal devices at the end of the day, and reminding them that personal devices used for work too must adhere to sound cyber security practices. By building a strong relationship with a cyber security firm based on trust, in the same way a company relies on its accounting and law firms, cyber security will rise to the level of a critical operation. In addition to cyber security training, key tactical measures that every sound cyber security program requires are: • Live Penetration Testing – Attempts to penetrate a network from the Internet and external IPs • Vulnerability Detection – A minimum of two scans per year on an internal network • Anti-Key Logging Software – Keystroke encryption software to prevent malware from stealing sensitive data • Identity Theft Protection Services – To mitigate risks and damage • Ongoing Cyber Security Bulletins and Urgent Alerts – To keep executives, IT staff and MSP staff informed on the latest threats and other timely information • Cyber Insurance – Liability insurance as well as cyber extortion insurance “The Inconvenience of Cyber Security” Cyber security is inconvenient; no question about it. It is, however, necessary and not something that should be left up to others. While organizations should avail themselves of the expertise and experience 156
of cyber security specialists, they too must be directly involved in their organization’s cyber security program, from the top down. Being diligent, informed and armed with the best practices and solutions is an organization’s best defense against cyber attacks and their dire consequences. About the Author Joseph E. Saracino, Jr. is the President & CEO of Cino Ltd. Family of Companies, a leading risk management organization, which includes Cino Security Solutions, a prominent cyber security firm. Joseph served in the United States Navy as a Naval Intelligence Officer and continues to be active as a Military Education Liaison, VA Certifying Official, as well as a Global Yellow Ribbon presenter to Active Duty troops and Reserve personnel. He also serves as a consultant to Homeland Security and Joint Military Task Force Commands. He is a member of numerous civic and industry associations, works with the New York City Mayor’s Office of Veteran Affairs, and is an active participant in the Suffolk County Police Department SHIELD Program which is countering terrorism and crime through information sharing in partnership with the New York Police Department and law enforcement agencies nationwide. LinkedIn: https://www.linkedin.com/in/joseph-saracino-664370b/ You can reach me at: jsaracino@cinoltd.com 157
Page 1 and 2:
Top 25 Women In Cybersecurity Know
Page 3 and 4:
CONTENTS (cont') Virtual Private Se
Page 5 and 6:
@CYBERDEFENSEMAG CYBER DEFENSE eMAG
Page 7 and 8:
SPONSOR OF THE MONTH… 7
Page 9 and 10:
9
Page 11 and 12:
11
Page 13 and 14:
*Here are the winners* Catherine A.
Page 15 and 16:
Anne Bonaparte, CEO at Appthority I
Page 17 and 18:
Hong Jia, Co-founder, Chief Securit
Page 19 and 20:
Dervla Mannion, Vice President Sale
Page 21 and 22:
Christine de Souza, Cyberspace Oper
Page 23 and 24:
23
Page 25 and 26:
5 Tips to Protect Your Personal Inf
Page 27 and 28:
About the Author Susan Alexandra is
Page 29 and 30:
usiness that cannot be ignored. The
Page 31 and 32:
About the Author Jim Souders is CEO
Page 33 and 34:
Addressing Modern Security Challeng
Page 35 and 36:
Bitglass 2019 Cloud Security Report
Page 37 and 38:
37
Page 39 and 40:
39
Page 41 and 42:
41
Page 43 and 44:
43
Page 45 and 46:
45
Page 47 and 48:
47
Page 49 and 50:
The intricacy of the jurisdictional
Page 51 and 52:
All Secure Chorus member technologi
Page 53 and 54:
called ‘Defense in Depth’ produ
Page 55 and 56:
About the Author Lalit Shinde, Head
Page 57 and 58:
€10 million or 2% annual global t
Page 59 and 60:
One of the Greatest Threats Facing
Page 61 and 62:
This approach could be installed as
Page 63 and 64:
Despite the statistics, it often ta
Page 65 and 66:
10 Steps to Kicking Off Your Inside
Page 67 and 68:
8. Spread the knowledge: Small- and
Page 69 and 70:
are not using machine learning in o
Page 71 and 72:
What Is DNS Hijacking And How Can Y
Page 73 and 74:
DNS hijacking attack types (6 main
Page 75 and 76:
The Top 4 Application Security Defe
Page 77 and 78:
1. Am I being attacked right now? 2
Page 79 and 80:
July Patch Tuesday Microsoft Resolv
Page 81 and 82:
How To Prevent Your Data Loss Using
Page 83 and 84:
How to protect your IT asset from t
Page 85 and 86:
The Iot Headache and How to Bolster
Page 87 and 88:
Cybersecurity & Your Company Identi
Page 89 and 90:
It’s not just about which permiss
Page 91 and 92:
they would deal with something bein
Page 93 and 94:
Five Ways a Software Defined Perime
Page 95 and 96:
With a fixed price per user regardl
Page 97 and 98:
- if the hackers deal with the prof
Page 99 and 100:
The Foundation Common to Most Secur
Page 101 and 102:
Fortunately, NIST and other securit
Page 103 and 104:
Dukes of CIS points to recently ena
Page 105 and 106: physical servers. The VPS service p
Page 107 and 108: About the Author Preeti has more th
Page 109 and 110: In summary, HIPAA exists to protect
Page 111 and 112: The Dangers of HTTPS: When Secure I
Page 113 and 114: Going for Gold - Why Hackers Are Lo
Page 115 and 116: On the subject of privilege, organi
Page 117 and 118: Federal IT leaders should take a ph
Page 119 and 120: Is Your Organization Driving the Ge
Page 121 and 122: Are You Taking Corporate Social Res
Page 123 and 124: About the Author Simon Marchand, CF
Page 125 and 126: What’s at Stake The cybercrime pr
Page 127 and 128: Facing the Reality of VPN Security
Page 129 and 130: security strategies to accommodate
Page 131 and 132: immediate chaos, and panic would en
Page 133 and 134: Privacy Regulations Are Popping Up
Page 135 and 136: ● create comprehensive record of
Page 137 and 138: Reducing the Occurrence and Impact
Page 139 and 140: in California, certain California l
Page 141 and 142: About the Author Billie Elliott McA
Page 143 and 144: Zero Day Attacks and not current Wo
Page 145 and 146: The Role of Certifications for a Cy
Page 147 and 148: In detail, CompTIA Security+ is a c
Page 149 and 150: To Pay or Not To Pay, That Is the Q
Page 151 and 152: About the Author Chris Bates is the
Page 153 and 154: today’s cyber security realities,
Page 155: Federal and state governments are r
Page 159 and 160: The attack mechanism can be summari
Page 161 and 162: Jenkins Disabled deserialization +
Page 163 and 164: 163
Page 165 and 166: 165
Page 167 and 168: 167
Page 169 and 170: 169
Page 171 and 172: 171
Page 173 and 174: 173
Page 175 and 176: 175
Page 177 and 178: 177
Page 179 and 180: 179
Page 181 and 182: 181
Page 183 and 184: 183
Page 185 and 186: 185
Page 187 and 188: 187
Page 189 and 190: 189
Page 191 and 192: 191
Page 193 and 194: 193
Page 195 and 196: Meet Our Publisher: Gary S. Miliefs
Page 197 and 198: Free Monthly Cyber Defense eMagazin
Page 199 and 200: 199
Page 201 and 202: 201
Page 203 and 204: 7 Years in The Making… Thank You
Page 205: 205
show all

Cyber Defense eMagazine August 2019

Create successful ePaper yourself

Delete template?

Save as template?