Nick Keenan

✅ Great news for OT/ICS cybersecurity community. Last week, Dragos, Inc., global leader in cybersecurity for operational technology (OT) environments, announced an expanded partnership with CrowdStrike to integrate OT threat intelligence from the Dragos Platform into the CrowdStrike Falcon® Next-Gen SIEM. ✳️ This is tremendous news as will enable SOC analysts to quickly pinpoint malicious behavior and have the context they need to reduce false positives, prioritize mitigations, and achieve faster response times on OT environments. This could make a big difference for cybersecurity teams! #otsecurity #icscybersecurity #security #ot #ics #criticalinfrastructure #cyberthreats #threatactors #ransomware

7

2 Comments

This quote sums up my take on healthcare cybersecurity: "You can have the best technology in the world, but if people aren't properly educated on security practices, it's all for nothing" The classic examples that I see every time I enter a clinic / doctor's office: completed forms with PHI left on the check-in counter top and medical results left face up in trash cans and/or in the fax machine tray. We read about the big breaches in the news, but there are little breaches daily due to a lack of security enablement. Don't get me started on password stickynotes. The next generation of cloud security is really exciting, but we have another problem to tackle first.. (Edit: Looks like the article was removed.. will re-add if it's reposted)

7

1 Comment

And just like that, the future of another comprehensive national privacy law is uncertain. How many years have we been waiting for Congress to pass one? Almost too many to count. https://lnkd.in/gvxs5izG #privacy #dataprivacy

2

Good talk to stay in the front of NIST CSF 2.0 and WISP.

10

⏰ Interesting findings from the 2024 Voice of the CISO report by Proofpoint Proofpoint surveyed 1600 CISOs from organizations with at least 1,000 employees across 16 countries ⏩ 70% of CISOs feel at risk of experiencing a cyber attack over the next 12 months (68% in 2923). It also indicates this concern is about 73% among board members. 🤔 IMO this concern may have increased due to several factors like AI risks uncertainty, SEC regulations, or cybersecurity budget restrictions. ⏩ The next interesting fact is that 43% of CISOs believe their organization is unprepared to cope with a targeted cyber attack in 2024. The countries with higher concern are: Korea, Germany and France. 🤯 This is surprising and may show the lack of confidence in their cybersecurity strategy or their security team preparedness. It should not be for lack of cybersecurity tools. The threat landscape is increasing in diversity as well as the complexity of the enterprise environments. ⏩ 74% of CISOs consider human error to be their organization’s biggest cyber vulnerability. It was 60% in 2023 and 56% in 2022. 🤯 This stat just left me in shock. The fact that CISOs still blame users for cyber attacks or incidents, makes me think something is wrong with their cybersecurity strategy. ♦️If they want to make a escape goat of a person that falls for a phishing email, or installs/downloads a malware, or gets the account and password compromised that is wrong. Where is the investment in tools and processes if someone installing a malware takes down the entire company? This blame game is the easy way out of their responsibility. ✅ They should implement tools, controls, and processes to better mitigate the risks when people make mistakes. #cybersecurity #security #cybersecuryawareness #ciso #cisoseries #cybertrends

1

Security is top priority at Microsoft which is what makes partnerships with leading partners like Forescout Technologies Inc. even more impactful to our customers. Register for this upcoming webinar to learn more about Forescout is delivering zero trust solutions to protect every device, managed or unmanaged from cyberthreats! https://lnkd.in/eT_8-K82 #MicrosoftRunsOnTrust #cybersecurity #partnersmakemorehappen

8

🔑 Simplify Access with AWS IAM Roles! IAM Roles enable secure, temporary access to AWS resources for users, apps, or services. No credentials to manage—just seamless permissions when you need them. Boost security and flexibility today! 🚀🔒 #IAM #Roles #Cloud #Computing

4

3 Comments

Rogue Cloud storage and SAAS - https://lnkd.in/eJu3aii3 These assets can be discovered through Palo Alto's SAAS Application Utilization Reports

4

2 Comments

A friend was asking about my experience and personal approach to CISO relationships and collaboration. After reviewing my email response, I thought it worth sharing here. A strong working relationship with your CISO is critical. Ensure they understand your team’s processes and capabilities. You want to be a key partner in executing their mission. As an engineering leader, you should: - Ensure that software development processes and products meet security standards. - Foster a security-first culture within your development team. - Integrate security best practices into the software development lifecycle (SDLC). - Conduct regular security assessments and address vulnerabilities proactively, providing regular updates to the CISO. - Discuss rapid delivery and security trade-offs with the CISO, involving them in risk mitigation. - Consider incident response needs when developing your product roadmap, coordinate this with the CISO.

37

1 Comment

At OspreyBio, we use the cloud for some services (and soon, the edge), but the majority of our critical infrastructure is hosted on-prem. There are several reasons for this, from cost to our stringent security standards. How many times has Microsoft had a leak in the past year alone? With the value of our data, we can't afford to assume that cloud providers are immune to attacks or that their encryption is uncrackable even before considering quantum computing. But the biggest reason for our approach is trust—or the lack of it—when it comes to using cloud services for AI training data. A simple change to a Terms of Service agreement, often sent out via a quick email, can leave data exposed, as we've seen many companies do. Trying to remove PII doesn’t mean anything for the type of data we have and this isn't a risk we're willing to take, especially given that OspreyBio operates in such a novel space where our data and systems are unique and irreplaceable. It makes me wonder: how many other companies are starting to come to the same conclusion? Are they moving away from the cloud for more affordable, on-prem solutions? Are they shrinking their genetic data for easier storage and control, while still training their own AI models on it? The tools and technologies are out there—open source and accessible—and you don't need a ChatGPT agent to get started. It’s not for every business, but it should be considered first before jumping headfirst into the cloud. 

7

Just saw this interesting article and thought to share it with my network with some thoughts as it is a good discussion. Cultivating a Security-Conscious Culture: Insights from Our Product Security Journey Independence and Collaboration: Establishing a separate Product Security Organization (PSO) from the Chief Information Security Officer (CISO) enhances focus and cyber agility. But remember, independence doesn’t mean isolation. Effective PSOs strike a balance between autonomy and collaboration. They actively engage with business units and development teams, going beyond mere policy enforcement. Key Considerations for a Robust PSO: Risk-Based Governance: Clear governance mechanisms aligned with regulatory compliance, risk appetite and business goals. Education and Advocacy: PSOs educate and enable teams, advocating for secure practices. Metrics and Measurement: Quantifiable metrics demonstrate impact (vulnerability reduction, time-to-patch, security awareness). Collaboration with CISO: Independence doesn’t preclude alignment with overall security strategy. Our Journey: Senior Leadership Support: Unwavering backing from senior leaders paved our path to transformative change. Continual Communication: Dialogue with peers, especially in R&D, Quality and Business , fuels our progress. Governance and Flexibility: Striking the right balance empowers innovation while maintaining security. Support for Business Peers: PSOs enable growth without hindering progress. Holistic Approach: Embedding security into our organization’s DNA—technical and cultural. CISO Relationship: Our rapport with the CISO aligns security initiatives with strategic goals. A Corporate PSO isn’t just a function; it’s a mindset—a commitment to fostering a security-conscious culture across the entire company. Feel free to share your thoughts or experiences in the comments!

4

Sharing a short video that explains the differences between wireless and wired CCTV cameras. Each type of camera has operating requirements that should be taken into consideration before choosing a wired or wireless camera for each specific location. #CCTV #SecurityCameras #VideoSurveillance

3

📉 Surprising stat: 67% of clinical leaders and 44% of operational leaders admit they don’t know when their last software audit took place. Outdated or unchecked software can lead to inefficiencies, security risks, and compliance issues. 🛠️ It’s time to prioritize regular audits and ensure our systems are optimized for today’s healthcare challenges. Source: symplr 2024 Compass Survey #HealthTech #HealthcareIT #SoftwareAudit #OperationalExcellence #DigitalHealth

3

IT upgrades don't have to break your existing setup and be disruptive. The last thing you need is a major change stopping your providers and staff from being able to work. Learn 4 Ways IT Services for Healthcare Preserves Provider Workflows in our latest article on HealthSafeIT's website. https://lnkd.in/etTJRq_G #ITServicesForHealthcare #ITSupport #HealthcareIT #HealthIT #Workflow #Productivity HealthSafeIT is your solution for healthcare IT for single and multi-site locations. To learn more, check out https://healthsafeit.com

3

September is National Suicide Prevention Month in the US. I want to call attention to this and let people know about my own personal struggles. In January 2008, I attempted suicide. If not for the actions of Samir Goncalves (thank you, brother, I owe you my life), I would not be here today. Prior to today, only a handful of people knew this occurred. Most of my family does not even know about this (surprise!), and I have never shared this where an employer could see it. I have gone out of my way to hide this aspect of myself out of shame, fear of reprisal, and fear of judgement resulting in lost opportunities. This has been both to my detriment and to the detriment of others as my choice to hide was a de facto choice to maintain the status quo around mental health in the US while offering me few opportunities to improve my own mental health. Through my time in the Questrom School of Business, Boston University MBA program, I met a group of understanding people who helped me to come to terms with the humanity of my experience and encouraged me to be more transparent. The final push came from Brad Graver, MBA at SecureWorld who was there for me when I needed it. Thank you to George Kamide who gave me the opportunity to share my story on Bare Knuckles & Brass Tacks - check out the podcast below. Today, I choose to stop hiding. I choose to ignore the social stigma around mental health that demonizes admitting I need help. I choose to stop silently accepting the norm and instead to actively be part of the solution. It is with regret that I admit I should have spoken out sooner. It is with the deepest sincerity that I hope speaking out now is not too late for someone who might need to know it is okay to talk about mental health. I especially want to spread this message to my fellow Cyber professionals. Working in Cybersecurity is incredibly stressful. Attacks are 24x7x365. Alerts that need to be investigated *now* come in at 2 am on Saturday mornings just as often as 2 pm on Thursday afternoons. There is no "down-time" in Cybersecurity and we're often fielding alerts even while on vacation. The burnout is real. We are accountable if there is a successful attack and heads of cybersecurity are often scapegoats. It's no wonder there is a mental health crisis in Cybersecurity. Please talk to your employees, contractors, consultants, friends, family, acquaintances and all fellow humans about mental health. If you have experienced mental health problems, drive acceptance by letting others know. If you see someone with possible problems, be the one to help. You don't need the answers. I certainly don't have them. Just be there. I was lucky to have people who were there. Be that person. Sincere thanks to those mentioned above, my entire EMBA 33 cohort, and my wife Kelly Bowker who holds my hand to guide me through the darkness when I can't see the light. Please consider checking out 988lifeline.org and The Trevor Project.

157

24 Comments

Me looking at the Crowdstrike outages affecting those customers and getting flashbacks of #DAT5958 with McAfee. Pour a shot of espresso out for those who have long weeks ahead of them. And even if you aren't a CS customer, you have work to do too. What customers, vendors, banks, logistics, SaaS platforms, and other service partners do you have and rely on who use CS? Crowdstrike has about 17% of the market in endpoint protection (number from 2022).

25

18 Comments

Israeli cybersecurity firm Wiz has called off its $23 billion acquisition deal with Google-parent Alphabet. Wiz CEO Assaf Rappaport stated the company will focus on an IPO, aiming for $1 billion in annual recurring revenue. Some thoughts… 1. Strategic Shifts: Wiz’s pivot to an IPO underscores the dynamic strategies in tech. 2. Market Opportunities: Growing demand for cloud-based cybersecurity solutions. 3. Industry Movements: Google’s ongoing investments highlight the importance of cloud and security. #Cybersecurity #CloudComputing #ITnews #Innovation https://lnkd.in/euhnsNQS

6

Here's a good reminder of under-the-radar cloud security issues most likely to surprise the enterprise SOC from our friends at CSO Online.

3