Call us now:
Definitely one to watch. As the CEO of Microsoft addresses the House Homeland Security Committee on the 13th June: A cascade of security failures: Assessing Microsoft Corporations cybersecurity shortfalls and the implications for Homeland Security. A 3 hours of intense discussion with U.S political leaders.
https://lnkd.in/e7DVYZSs
Held following a Homeland Cyber Safety Review Board (CSRB) report and the cascade of security failures at Microsoft following access by suspected Chinese government backed threat actor Storm Zero 558 and theft of 10,000 of U.S Government Emails from Microsoft exchange accounts. The CSRB stated the attack would have been prevented if Microsoft had cultivated a strong security culture, addressing basic cyber hygiene practices.
There are some warnings from the committee meeting.
1. The private sector cannot work alone to manage cybersecurity. It requires support from government.
2. The attack exploited basic vulnerabilities that could have been avoided through basic cyber hygiene.
3. Governments need to do more to support the private sector when facing nation state threat actors.
4. Nation states poses cyber tools that are likely more advanced than those of the private sector.
5. The U.S Governments expect companies implement basic cyber hygiene.
The committee highlights 3 key actions
1. Closing the cyber workforce gap is top of agenda. Investing in the cyber workforce to address the shortage of cyber resources.
2. To define the role of public and private sector entities in protecting against nation state actors.
3. To address the economic incentives that drive cybersecurity investment. Where the costs of neglecting cybersecurity are out wayed by the benefits of cyber security.
Faisal Khan all points that apply to other national governments.
@Thaddeus Dziekanowski Brian D. McCarthy
Veritas GRC U.S. Department of Homeland Security Microsoft
#cybersecurity #cyberriskmanagement
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7207302624394522625