Jim A.

As the FFIEC Cybersecurity Assessment Tool (CAT) approaches its sunset, financial institutions must navigate the transition to alternative cybersecurity frameworks. This webinar will provide you with updates and guidance needed to ensure a smooth transition and maintain robust cybersecurity practices. Register ➡️ https://loom.ly/AR9KVOk

6

The continued lack of harmonization amongst breach disclosure requirements continues to baffle me. I understand and support the intent to bring awareness to consumers, investors, and the like but the absence of coordination will have the opposite effect in that it will stifle cyber risk management. While I don't have a solution to amend current requirements ensure you are reading proposed requirements and voice your concerns during comment periods. I recently did with CIRCIA and a summary of my concern is, "this Act (Cyber Incident Reporting for Critical Infrastructure) should be harmonized with existing efforts with additional rationale provided as to why different reporting structures, timelines, and requirements will lead to enhanced cyber risk management." I'm doubtful that rationale will be provided as to why undue burden of requiring differing requirements "will allow CISA to rapidly deploy resources and render assistance to victims…" when those same victims are not only dealing with a cyber incident but navigating the tangled spider web of breach disclosure requirements. Speak up and make your voice heard so we all can create a more secure cyberspace of tomorrow!

7

Jen Easterly, head of the @Cybersecurity and Infrastructure Security Agency (CISA), was recently quoted as saying cybersecurity breaches are "a software quality problem." CISA also has asked technology companies to adopt principles for improving security. Do you have concerns about potential flaws in your systems and programs? Reach out today and I can put you in contact with our specialists, who can help you determine how best to move forward. Story by CyberScoop #Cybersecurity https://bit.ly/3WAfZao

13

Our #massdatagov recently commented on the Cybersecurity and Infrastructure Security Agency #CIRCIA #cybersecurity reporting requirements NPRM including suggestions around reporting requirements for incidents at third party organizations #security #MHDCregulatory Read our comment here: https://ow.ly/JRRW50SiqLG

3

Speaking of DORA, (as I was yesterday - see appendix below), the latest EBA updates are worth checking out, even if DORA isn't your concern. https://lnkd.in/eh6dnPeH All about what they're doing, how they did the dry run and who they're going to have to run with it all. Welcome Marc - https://lnkd.in/eQ4r4mqn Fascinating. Appendix 1: https://lnkd.in/eyAjmsBK

12

Earlier this week, the SEC finalized amendments to Regulation S-P that will require RIAs to create incident response plans, disclose cybersecurity incidents & maintain oversight of third-party service providers. We've recapped the most significant requirements below. #wealthmanagement #fintech #RIA

20

It's important for #CPA firms to periodically review the effectiveness of their security program as detailed in their Written Information Security Plan (WISP). Here are risk management tips from CAMICO regarding how often firms should be reviewing and updating their WISP to safeguard client data from potential breaches and cyberattacks: https://lnkd.in/gYdCf-zg

4

Register for our upcoming webinar, Deep Dive Into TLOxp® for Licensed Investigators, to learn useful tips and tricks to uncover robust information and data needed to help you successfully close cases. Don’t miss this informative session. Register today: https://gag.gl/Fnhsls #Investigators #LicensedInvestigators #Webinar

3

Addressing the SEC’s New #Cybersecurity Risk Management, Strategy, #Governance and Incident Disclosure Requirements #security #business #management #leaders #leadership #reporting #compliance #regulation #regulators #CISO #CIO #CTO #CEO

3

Addressing the SEC’s New #Cybersecurity Risk Management, Strategy, #Governance and Incident Disclosure Requirements #security #business #management #leaders #leadership #reporting #compliance #regulation #regulators #CISO #CIO #CTO #CEO

1

Organizations must restructure the fundamentals of how they handle uncertainty. Explore these strategies in Future of Risk just released. #RiskManagement https://bit.ly/4gK5gUb

2

New interpretations will help public companies apply the SEC's rules on cybersecurity risk management and incident disclosure. https://buff.ly/4f06XvT #SEC #Form8K #cyberrisk #cyberdisclosures

2

Hopefully you a process to frequently assess your organization's cyber risks. ⚠️ If you don't currently have process in place, and you should, here's 6 Types of Risk Assessment methodologies and their use case. 📝 Feel free to reach out if we can point you in the right direction🤝 #cybersecurity #nonprofit #riskassessment

1

JPCert Details on Event Tracing Over EventLog for Windows Forensics The EventLogs have long been the go-to source for incident investigators in the realm of Windows operating system forensics. However, these logs often fall short when it comes to detecting suspicious behavior, necessitating the use of additional audit logs or tools like Sysmon. Enter Event Tracing for Windows (ETW), a powerful yet often overlooked feature that offers a more comprehensive approach to Windows forensics. ETW is a robust system designed to manage events generated by the kernel and processes. Initially created for application debugging, it has evolved into a crucial component for collecting and managing EventLogs. Stay Connected to Sidharth Sharma, CPA, CISA, CISM, CFE, CDPSE for content related to Cyber Security. #CyberSecurity #JPMC #Technology #InfoSec #DataProtection #DataPrivacy #ThreatIntelligence #CyberThreats #NetworkSecurity #CyberDefense #SecurityAwareness #ITSecurity #SecuritySolutions #CyberResilience #DigitalSecurity #SecurityBestPractices #CyberRisk #SecurityOperations 

3

As identity management becomes a more critical component of cybersecurity, there is a growing need for identity teams to align more closely with the CISO. The integration of these teams ensures a unified approach to managing access controls and mitigating identity-related threats, which are increasingly being exploited. Centralizing leadership under the CISO allows for more streamlined communication and faster decision-making when responding to serious risks. #CybersecurityLeadership #IdentityManagement #CISO

20

2 Comments