Chris Ikhiede MBA, CISSP, CISM

If you want to install the risk mindset, read these books: Links to the standards and publications can be found in my latest article. ________ Enjoy this? Join 7K+ in GRC Lab — my free newsletter to help you launch, grow and accelerate your career in GRC:

56

3 Comments

Join ISACA LA & Noname Security for a webinar on May 14 from 5 pm to 6:15 pm. Alan Cota will take you on a journey through the fascinating world of Application Programming Interfaces (APIs) and show you the risks and intricacies of securing APIs. You will learn the challenges of API Security and how to avoid some of the common pitfalls. We will also understand why existing in-line solutions like API gateways and Web Application Firewalls (WAFs) can't solve the problem alone. Save the date. We will update here and on our website when details are available. #ISACA #ISACALA #APISecurity

8

SABSA (Sherwood Applied Business Security Architecture) is a proven methodology for developing business-driven, risk and opportunity focused Security Architectures at both enterprise and solutions level that traceably support business objectives. It is also widely used for Information Assurance Architectures, Risk Management Frameworks, and to align and seamlessly integrate security and risk management into IT Architecture methods and frameworks. Where SABSA differs from other approaches, is that it defines a conceptual layered model which enables the provision of an holistic, strategic architectural approach as opposed to the more typically seen application of technology and process stand-alone and point solutions to tactical security objectives. For those familiar with, it also leverages the Zachman Framework and is compatible with TOGAF, ISO 27001, Agile and other methodologies. Read More Here 👇🏻 https://lnkd.in/gZ8Zdv3E #SecurityArchitechture #CyberGovernance

9

🎓 Become an #ISO27001 #LeadAuditor & Boost Your #CybersecurityCareer 📈 The demand for skilled #ISO27001 professionals is surging! 📌 Our certified program equips you to lead #ISMS #audits, ensuring #informationsecurity #compliance. 🖇 Enroll now & take your cybersecurity career to the next level! #informationsecurity #iso27001 #leadauditor #cybersecurity #isms #ismsaudit #cybersecurity #achieveyourgoals

2

COBIT Tools: Driving IT Governance Excellence ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ When I first encountered COBIT during a major IT governance overhaul, I was leading a team tasked with aligning a fintech platform’s operations to support a new strategic direction. The challenges were daunting: fragmented processes, unclear accountability, and a lack of metrics to gauge progress. Enter COBIT 2019; a transformative framework that gave us a structured way to define governance objectives and map them to our business goals. The COBIT Online Toolkits became our go-to resources for performing maturity assessments and optimizing performance. These tools turned chaos into clarity, empowering us to bridge the gap between strategy and execution. 💡 Assess your maturity: Understand your current IT governance capabilities. 💡 Evaluate risks: Identify and mitigate potential threats. 💡 Optimize performance: Continuously improve your IT processes. Today, I see organizations across banking and fintech achieving remarkable results by leveraging COBIT tools. For those navigating governance challenges, these resources are game-changers. 🚀 Have you explored COBIT 2019 in your governance journey? What were your key takeaways? Let’s discuss! #ITGovernance #COBIT2019 #OperationalExcellence #FintechLeadership #ServiceGovernance #RiskManagement

50

3 Comments

🚨 𝐈𝐦𝐩𝐨𝐫𝐭𝐚𝐧𝐭 𝐍𝐨𝐭𝐢𝐜𝐞: 𝐍𝐃𝐏𝐂 𝐑𝐞𝐠𝐢𝐬𝐭𝐫𝐚𝐭𝐢𝐨𝐧 𝐃𝐞𝐚𝐝𝐥𝐢𝐧𝐞 𝐄𝐱𝐭𝐞𝐧𝐝𝐞𝐝 𝐭𝐨 𝐒𝐞𝐩𝐭𝐞𝐦𝐛𝐞𝐫 30, 2024. The Nigeria Data Protection Commission (NDPC) has extended the registration deadline for data controllers and processors of major importance. This extension provides a crucial opportunity for organizations to ensure compliance with the Nigeria Data Protection Act, 2023. #DataProtection #DataPrivacy

3

🚨 4 days to the Nigeria Data Protection Commission's deadline for data controllers and processors to register with the commission. Who Needs to Register? According to the NDPC, you must register as a data controller or processor if you: ▪ Handle personal data of more than 200 people within a 6-month period. ▪ Offer IT services that involve storing or managing data on devices/infrastructure owned by others. ▪ Work in certain industries like finance, communications, healthcare, education, insurance, import/export, aviation, tourism, oil and gas, or electricity. ▪ Have a trusted relationship with individuals whose data you manage (e.g., a lawyer or financial advisor). ▪ Plan to handle the personal data of a large number of Nigerian residents. This means if your business or organisation fits into any of these categories, you need to register to stay compliant with data protection regulations. Failure to do so could result in fines, legal action, or restrictions on your ability to operate.

3

1 Comment

Continuous Learning Continuous Development- CLCD series. Cloud, cloud computing, and the many risks therein have remained a topical issue within the cyber security and cyber safety domains. Interestingly, so many organizations that claim that they have no presence in the cloud use many cloud resources like emails, HR solutions, social media handles, etc. So again, we have another amazing opportunity to continue to deepen our knowledge and understanding around the cloud environment. Thus, plan, register, attend, and actively participate. Where will you rather be? #FirstBank #YouFirst #dx5 #Cloud #Computing

77

2 Comments

It is imperative to recognize the significance of emerging technologies, particularly Artificial Intelligence (AI). Mr. Allan Boardman’s session is therefore highly recommended for individuals across various sectors. This crucial workshop is designed to equip participants with the knowledge necessary to evaluate the increasing application of AI, especially Generative AI. Furthermore, it offers valuable insights into the potential benefits of AI while emphasizing the importance of implementing appropriate safeguards.

7

Threat modeling is a cornerstone of effective cybersecurity strategy. As a CCSP and CISSP candidate, you'll need to master the art of systematically identifying and prioritizing potential threats to your organization's assets. This guide introduces four key threat modeling methodologies: STRIDE, DREAD, PASTA, and ATASM. While the CISSP exam doesn't require in-depth expertise in each, understanding their core principles is crucial for robust risk management. We'll explore how these methodologies can enhance your cybersecurity approach and strengthen your organization's defenses. Let's dive into the world of threat modeling and its practical applications in information security. Read the full article here ➡️ https://buff.ly/4dupu13

10

Join me for the webinar as we discuss common misinformation and our role as Internet users. It promises to be educative, engaging and helpful. Come let’s learn. #cybersecurity #studyhourwithracheal

14

The SANS Ransomware Solution Track 2024 is a comprehensive program designed to equip cybersecurity professionals with the latest strategies and tools to combat ransomware threats. This track includes in-depth sessions on identifying, preventing, and responding to ransomware attacks, leveraging expert insights and real-world case studies. Participants will gain practical knowledge on implementing effective defense mechanisms and recovery solutions, ensuring their organizations are resilient against this pervasive threat.

42

6 Comments

Know Fraud | How to defend yourself against social engineering attacks. https://iono.fm/e/1502968 December is fast approaching and the vultures are circling. Listen to this podcast for some tips on how to spot it, stop it and report it! Share post to spread fraud awareness.

1

A thought: Cybersecurity events are crucial platforms for security professionals to stay informed about the latest threats, trends, and solutions in the field. Offering CPE certificates can incentivize participation, helping delegates maintain their security certifications that often require annual CPE credits. By providing these credits, event organizers might enhance the professional value of their events and support the personal as well as professional growth of delegates. This dual benefit makes cybersecurity conferences a win-win opportunity for both security professionals and organizers. #Cybersecurity #CPE #SecurityProfessionals #ProfessionalGrowth #CybersecurityEvents

93

4 Comments

Ensuring that your supply chain partners adhere to your cybersecurity standards is essential. Conduct regular assessments and require them to follow stringent security practices. #Business #SupplyChainSecurity #RiskManagement #MrCISO #CyberSecurityNuggets

1

Implementing security controls at every stage of the business process ensures comprehensive protection. From development to deployment, embed security to mitigate risks effectively. #Business #SecurityControls #RiskMitigation #MrCISO #CyberSecurityNuggets

1