Cyber Defense eMagazine January Edition for 2022

More documents

Recommendations

Info

2. What Is Zero Trust? In 2021, Zero Trust has become an overused and under-defined term. To clarify, Forrester defines the term this way: “Zero Trust is not one product or platform; it’s a security framework built around the concept of ‘never trust, always verify’ and ‘assume breach.’” It's really a security philosophy. Given the confusion in the market, it can be hard for security teams to figure out which strategies will really help them achieve their security goals. There are five main pillars of any Zero Trust Architecture and being able to prioritize one pillar from another is critical. A prioritization of pillars will lead to a change in focus in the coming year. Federal agencies are realizing they need visibility first and then they need to stop cyberattacks from spreading once they are inside the network with a host-based micro-segmentation approach. In 2022, agencies will do a better job of prioritizing their Zero Trust approach to those strategies that can show actionable results quickly – often in the workload and application pillar. 3. Laser Focus Against Adversaries When it comes to threat defense, we are turning up the volume against our global adversaries in 2022. Artificial intelligence (AI) is increasing in sophistication, along with the complexity of cyberattacks – making breaches catastrophic. In a lot of ways, we are unaware of the multi-pronged approach that attackers are taking to target our high-value assets (HVA’s). These new attacks will be super creative and will often go undetected even though agencies and commands have endpoint detection and response (EDR) tools installed. EDR tools are not effective against attacks where we don’t know the method of attack. It is time to continue to defend forward as well as prioritize and execute on the plan. The reality is that no one can do everything perfectly, so we need to focus on one or two things at a time that make the biggest impact. Defending forward means you take the fight to the enemy, instead of waiting for them to come to you. We are going to see serious offensive operations to bring down attacker networks this year. There will be no more waiting for the attack to come to us, instead, we will seek out the attackers and take proactive security measures. The way we can do this is to shore up our own defenses with visibility and Zero Trust micro-segmentation. We need assurance that the attackers cannot move laterally while we are on the offensive. Cyber Defense eMagazine – January 2022 Edition 118 Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.
4. Cyber Funding Gets Granular In Federal Fiscal Year 2023 (which begins on 10/1/22), we’re going to start to see program dollars specifically designated for Zero Trust projects. There will be multiple Zero Trust ‘programs of record’ in the coming years, and another indication of the seriousness of this effort is the new Department of Defense (DoD) PMO (Program Management Office) for Zero Trust. Zero Trust is here to stay and in support of Zero Trust efforts, we will see a focus on specific initiatives such as network discovery and micro-segmentation. While none of us have a crystal ball, what we know is that we should expect (and prepare) for the unexpected – we know there will be many more cyberattacks in the coming year. While the Cyber EO laid an important foundation, its impact will only be as strong as the actions we take to shore up our cybersecurity posture over the next year. Agencies must carve out specific funding for Zero Trust, because the EO didn’t have any funding tied to it. A focus on improving visibility will help cybersecurity leaders take a proactive approach to defending critical networks to stop the spread, and thereby limit the impact of cyberattacks. About the Author Mark Sincevich the Federal Director at Illumio has 23 years of experience working with the DoD and Intelligence Community implementing technology solutions. Sincevich has a background in the command-and-control market where he specialized in Cyber Operations Centers, and in the cybersecurity space. Sincevich is a frequent author and speaker on cyber topics. He is a graduate of the University of Maryland, College Park and is a current member of the Civil Air Patrol (CAP). Mark can be reached online on LinkedIn and at our company website https://www.illumio.com/ Cyber Defense eMagazine – January 2022 Edition 119 Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
“Owning Your Identity” Through
Page 3 and 4:
WatchGuard Technologies’ 2022 Pre
Page 5 and 6:
@CYBERDEFENSEMAG CYBER DEFENSE eMAG
Page 7 and 8:
Cyber Defense eMagazine - January 2
Page 9 and 10:
MUST ATTEND REPLAY AVAILABLE ON-DEM
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Page 35 and 36:
Page 37 and 38:
Page 39 and 40:
But in spite of this threat, consum
Page 41 and 42:
How To Thwart Fraud with Phone Numb
Page 43 and 44:
mutable and dynamic by continually
Page 45 and 46:
Phishing: How To Improve Cybersecur
Page 47 and 48:
organizations gather data all in on
Page 49 and 50:
offers comprehensive firmware prote
Page 51 and 52:
Why Hackers Attack Mobile Devices a
Page 53 and 54:
the network. This is a good indicat
Page 55 and 56:
About the Author Nicole Allen, Mark
Page 57 and 58:
Know your customer As spam and phis
Page 59 and 60:
Microsoft Successfully Defended The
Page 61 and 62:
However, you can’t rely 100% on t
Page 63 and 64:
Why Americans Joined Europe in Not
Page 65 and 66:
Have a good backup policy. A good p
Page 67 and 68: Secure Apart from reporting, the af
Page 69 and 70: Taking a hard look at the current s
Page 71 and 72: There are plenty of organizations t
Page 73 and 74: 5. The impact of the talent shortag
Page 75 and 76: The industry is already embracing a
Page 77 and 78: WatchGuard Technologies’ 2022 Pre
Page 79 and 80: Users, especially professionals, ha
Page 81 and 82: What Are DeFi Flash Loans & How to
Page 83 and 84: DeFi hackers can easily exploit fla
Page 85 and 86: 3. Get audited Getting a smart cont
Page 87 and 88: Protecting Critical Infrastructure
Page 89 and 90: • They use penetration tools to g
Page 91 and 92: Three Key Facts About AI-Driven Net
Page 93 and 94: About the Author Eyal Elyashiv is t
Page 95 and 96: Tyler Farrar, CISO, Exabeam “What
Page 97 and 98: Protecting unstructured data will l
Page 99 and 100: change again before they’re done.
Page 101 and 102: Samantha Humphries, head of securit
Page 103 and 104: Due to their successes, adversaries
Page 105 and 106: Paul Farrington, chief product offi
Page 107 and 108: In 2022, it is going to become cruc
Page 109 and 110: Our Cyber Defenses Need to Be Battl
Page 111 and 112: the exploitation aspect, but if tes
Page 113 and 114: 12 Tips for Improving Access Contro
Page 115 and 116: weak passwords. Password management
Page 117: Four Cybersecurity Predictions Fede
Page 121 and 122: Of course, these recommendations ar
Page 123 and 124: Cybersecurity Tips to Help Your Org
Page 125 and 126: Organizations can achieve true cybe
Page 127 and 128: quarter. Put simply, any organizati
Page 129 and 130: Cyber Defense eMagazine - January 2
Page 149 and 150: Free Monthly Cyber Defense eMagazin
Page 155 and 156: THE Q1/Q2 GAME CHANGER… CYBERDEFE
show all

Cyber Defense eMagazine January Edition for 2022

Create successful ePaper yourself

Delete template?

Save as template?