Shawn Campbell Sr.

Thoughts on Just-In-Time procedures and NIST SP 800-171 / #CMMC compliance... At Kieri Solutions - Authorized C3PAO , we figured out that people follow procedures best when they 𝘢𝘳𝘦𝘯'𝘵 𝘱𝘳𝘰𝘤𝘦𝘥𝘶𝘳𝘦𝘴. ??? Let me explain. You're onboarding a new user. To be compliant with #CMMC, your onboarding team needs to go through a convoluted process involving getting details about the new user, verifying NDA, background checks, training, requesting permissions, justifying permissions, reviewing permissions, authorizing permissions, creating accounts, creating records of the accounts, creating records of the permissions for the accounts, assigning expiration dates for each account, setting up a laptop, authorizing the laptop...!!! It goes on and on. If your strategy is to tell your HR and IT team that they need to perfectly follow a 70 step process on page 19 of ye old 𝐈𝐓_𝐏𝐫𝐨𝐜𝐞𝐝𝐮𝐫𝐞𝐬_𝐌𝐚𝐧𝐮𝐚𝐥, 𝘺𝘰𝘶 𝘮𝘪𝘨𝘩𝘵 𝘢𝘴 𝘸𝘦𝘭𝘭 𝘱𝘢𝘤𝘬 𝘶𝘱 𝘺𝘰𝘶𝘳 𝘣𝘢𝘨𝘴 𝘳𝘪𝘨𝘩𝘵 𝘯𝘰𝘸. The error rate will be upwards of 80%, unless you nag and threaten 😡 everyone constantly, in which case you might get down to an error rate of 30% (and your team will quit). Instead, if you use a combination of a well-designed Access Request Form and an Account Management database, all your team needs to do is remember to start with the correct form. 📝 The form should have fields and just-in-time instructions for each step of the process between HR and your IT Department. All your team needs to do is fill out each field in the form and they will complete the background screening, training, permissions, justifications, etc. naturally without nagging. Then, a well designed Account Management database helps your team manage the accounts long-term by including checks ◻️ for commonly-forgotten steps (like user agreements), next-review dates, annual training refresher dates, mapping the user to their supervisor, granular "should-be" permissions for both digital systems and facilities, and historic authorization notes. The last step for perfect procedures is a regular review to look for and fix errors. But again, if you want to be successful, don't expect your team to remember your dusty policies and procedures book in the corner. Instead, use a scheduled task, a ticket, or a checklist with just-in-time instructions to make sure that the review gets done. Pro-tip: next-review-dates are an excellent way to spread this task across time, instead of trying to do it all in one lump. Are your compliance policies and processes working for you, or against you? There is a better way. Use thoughtful design in your compliance system to reduce errors and streamline functionality. Screenshot below is from the Kieri Compliance Documentation's Account Management Database, showing some of the magic of our full-featured 800-171 / CMMC Level 2 compliance program. I'll put the link in comments, for anyone that is interested.

54

5 Comments

OhioAMS is Integrated with OCSS! 🙌🤓 Our new OhioAMS section enables officers to submit referrals, automatically notifies the OhioAMS staff for processing, allows OhioAMS staff to add any additional notes and documents, and automatically uploads the referrals back to OCSS while alerting the officer of the update. Ready to use the OhioAMS section? Give us a call at (419)-755-6700 #ezJustice #ezSupervision #ProbationCaseManagement

2

NCUA examiners have said that the ACET is no longer a requirement. They are now recommending that organizations choose an internal framework to align with such as NIST CSF 2.0, CIS, or other! They have stated the new NCUA ISE statements are for them to use as an examination tool and not for credit unions. I would recommend aligning with both an internal framework and the ISE by taking an evidence-based approach so you are prepped for your exam, and meet their requirements!

7

1 Comment

Cyber criminals are constantly searching for gaps in your defenses, exploiting any vulnerability to launch their attacks. It’s essential to ensure your defenses are robust and capable of countering the latest attack methods and new malware versions. Delaying the adoption and deployment of new technologies can be a significant weakness for local governments, which attackers are quick to exploit. Security teams need to conduct comprehensive cybersecurity assessments and prioritize the implementation of advanced security technologies. This proactive approach is essential for both local government sectors and enterprises to close security gaps, stay ahead of evolving threats and ensure robust defense against cyber criminals. #CISO #informationsecurity #technology #innovation #management #Cyberattack #ransomeware CyTwist #security #localgovernment #SOC

12

5 Comments

"The .gov domain is exclusively available to U.S.-based government organizations, ensuring that any website with this domain is an official government site. This exclusivity is a fundamental reason for the switch, as it significantly reduces the risk of cyberattacks and phishing attempts. According to CISA, using a .gov domain helps the public quickly identify genuine government communications and websites, which is crucial in an era where cyber threats are increasingly sophisticated and pervasive​." I encourage all local governments to make the switch to a .gov domain improve your cybersecurity posture and to provide more assurance for those you interact with. When done correctly, it's easy and inexpensive. You should also ensure that SPF, DMARC and DKIM are configured for your email system. Residents should require this from their local government. Learn more from our press release and if you are a local government official, reach out with questions about why you should do it and/or how to do it. And special thanks to David Gautraud and the #NKOL team for making the transition seamless for us. #cybersecurity #cybercrime #infosec #spoofing #phishing #localgovernment #municipalgovernment

2

Announcement from the DVMS Institute The DVMS NIST Cybersecurity Professional Foundation certification training course now comes with two books (see below). This will allow you to not only certify as a NIST Cybersecurity Professional at the Foundation level but also begin your journey into the world of a NIST Cybersecurity Professional Practitioner. 1. The Fundamentals to Adopting the NIST Cybersecurity Framework 2. A Practitioner Guide to Adapting the NIST Cybersecurity Framework Purchase today by visiting https://lnkd.in/ggyN2zaN #nistcybersecurityframework

8

As we work with more and more organizations who do business with the Department of Defense, the question of whether or not they handle Controlled Unclassified Information (CUI) is becoming more common. Here are some thoughts about how to know what you are working with and how the new CMMC guidelines should help in the future. https://lnkd.in/dfxDwz6b #CMMC #CUI #CMMCcompliance #FCI

3

Meet Danielle M. Gagnon and Andrew Kraut from our P0 Labs Team at Booth 35 at Health-ISAC Spring America's Summit! P0 Labs are some of the best out there when it comes to identifying cloud threat actors and their TTPs! Human and machine identities are both your Achilles heel and your canary in the coal mine for cloud threats. Learn how our threat-informed approach seamlessly stitches your identities with your fragmented IaaS, PaaS, SaaS, CI/CD environments, and security controls. Discover how we can immediately improve: - Time to detect and respond (minutes vs hours/ days/ weeks) - Containment completeness (100% vs partial) - Least privilege adherence (Most aren't actually doing this right) - Log alert volume reduction (by 500 to 1 on average) Learn how Permiso can help you evolve your security strategy and architecture towards coveted Just-In-Time (JIT) access, Infrastructure as Code (IaC), Policy as Code (PaC), and more. Stop by our booth to meet Danielle and Andrew. Can't make it to the Summit? DM me to connect virtually!

5

ControlCase’s SOC 2 Compliance and Attestation Webinar is now available on our YouTube channel. Check out the webinar to learn from well-known cybersecurity experts everything there is to know about SOC 2.   https://lnkd.in/dQ3Cu5Qx #ControlCase #Webinar #SOC2 #Cybersecurity

42

Analyzing Phishing Email Headers: Protect Yourself from Online Scams Discover how to analyze phishing email headers in this informative video. Learn how to identify urgent or alarming language, generic greetings, suspicious links, and more. Stay safe from online scams and protect your personal information. #OnlineSafety #PhishingScams #EmailSecurity #CyberSecurity #ProtectYourself #StaySafeOnline #PhishingAwareness #OnlineScamPrevention #EmailFraud #InternetSafety

8

Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile is in the public comment phase. If you have an interest in cyber IR and you haven't read rev. 3, it's well worth a look. https://lnkd.in/g8bQ_5Bp #dfir #nist Nearshore Cyber

9

Per The Record: Sens. Mark Warner (D-VA) and Thom Tillis (R-NC) are proposing legislation that would require changes in the National Vulnerability Database, the federal repository of information about flaws in computer software and hardware. The goal is “to improve the tracking and processing of security and safety incidents” related to #AI.

3

Experts Find Flaw in Replicate AI Service Exposing Customers' Models and Data: Cybersecurity researchers have discovered a critical security flaw in an artificial intelligence (AI)-as-a-service provider Replicate that could have allowed threat actors to gain access to proprietary AI models and sensitive information. "Exploitation of this vulnerability would have allowed unauthorized access to the AI prompts and results of all Replicate's platform customers," https://lnkd.in/gMJtnh6y

1

In 2024, boards should be taking cyber security seriously! It is an existential threat to many businesses, and needs to be met with appropriate focus and attention. However, there is a shortage of people with the experience, ability, and desire to take on the responsibility of a CISO role. We need to solve that. As an industry, we also need to provide the tools to make their job easier.

5

⚠ Cyberattack Forces Closure of Cleveland City Hall Cleveland Mayor Justin Bibb shared today that City Hall and select offices will remain closed for a second day due to a cyberattack over the weekend. Officials are still evaluating the attack's full scope but have confirmed that city data remains intact. However, the incident underscores the rising threat of cyberattacks against local governments. In response, Darktrace HEAL offers crucial support in fortifying cyber defenses and ensuring rapid recovery post-attack. With AI-driven analysis and dynamic response capabilities, HEAL enables organizations to proactively prepare for and respond to cyber incidents effectively. #Cybersecurity #Darktrace #Cleveland #CyberAttack #Resilience

13

CDR: Your Guardian Against Malware Spread Malwation CDR technology serves as your guardian, guaranteeing that no harmful files infiltrate your internal file sharing systems. Our technology meticulously sanitizes and reconstructs files in real-time, rendering them safe for sharing within your organization. https://lnkd.in/dJXj-d6E #Malware #CDR #FileSecurity Malwation

24