The future of AI in cybersecurity is Left of Bang, using AI as a tool for cybersecurity risk management to proactively evaluate cybersecurity control design and effectiveness is the future of AI in cyber. @Thaddeus Dziekanowski Brian D. McCarthy Faisal…
Thank you for sharing, Bryan Foss. Whether it is basic information or not, it’s customer data. In this case, 430,000 records worth of customer data. There was a time when one looked at the UK and wondered why we never…
Let’s not forget supply chains run long and deep, and down to the local chippy. @Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Veritas GRC JLR #cybersecurity View Original Post
CMMC-covered DoD defence contractors have had since 2017 to comply with DFARS 252.204-7012, self-attesting compliance. Submitting their NIST 800-171 compliance scores to the DoD Supplier Performance Risk System (SPRS), mandated by DFARS 252.204-7019. We have seen several DFARS 252.204-7012 compliance…
Paywalled. The fact we have to deal with Ransomware at all……….. UK businesses ‘pay more ransoms to hackers than overseas peers’ View Original Post
Thank you, Bryan Foss, for the post. Harrods has confirmed a data breach of a third-party supplier, and losing customer data. In a cyber attack not linked to its May cyber attack. @Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Veritas…
Thank you for posting CYFIRMA. One cannot validate the report or the OSTI, but the report paints a viable picture and chronology of the JLR cyberattack. It seems several threat actors piled into JLR, with threat actors vying for recognition…
The effects of the JLR hack are being felt by those in its supply chain. It appears JLR had no insurance, and its cybersecurity did not contain the incident. The effect of which has affected its employees, those of its…
One does not know the technical extent of the cyber attack on JLR, other than what is reported. But one does know that risk transfer sits both left and right of bang, and for most companies, cyber insurance is the…
Germany’s Federal Office for Information Security (BSI) has been actively engaged in a campaign of cybersecurity education for several years. The BSI is a good example of how to communicate a consistent and strong whole-of-society approach to cybersecurity. @Thaddeus Dziekanowski…
