('blog',0,46,756,'en',0,'<p><font size=\"6\"><strong>T</strong></font>raditional security models have been <strong>challenged</strong> as millions across the world have transitioned to <strong>remote work models</strong> wherever possible.</p><p>As the global workforce progresses towards the next normal of hybrid workplaces, organizations have adopted remote work as a new standard – but at what cost to security?</p><p>“Never trust, always verify” is the foundation of Zero Trust.</p><p>The rapid and meteoric rise in remote-based work has dramatically increased the exposure to cybersecurity threats, with more targeted attacks on organizations from cyber aggressors and nation-state groups. In addition to remote work, the increased rise in the use of Internet of Things (IoT), operational technology (OT), and network-enabled smart devices introduced new areas of potential compromise to enterprise networks. Every connected endpoint to an organization’s network is a potential hackable entry point for a cyber aggressor.</p><p>With economic activity straining, budgets decreasing, and capital expenditures shrinking, cybersecurity spend has come under pressure. Despite these pressures, a new 2020 Kaspersky report ‘Investment adjustment: aligning IT budgets with changing security priorities’, “cybersecurity remains a priority for investment among businesses.” Despite overall IT budgets decreasing, enterprise cybersecurity spend is up from 26% to 29% in 2020. In addition, according to this study, 71% of organizations expect their cybersecurity budgets to grow further in the next three years.</p><p>Zero Trust provides a scoped, scalable, agile and affordable framework to address the loss of a defined corporate perimeter and the increased security risk to corporate systems and sensitive data.</p><p><strong>STRATEGIC BENEFITS</strong></p><ul><li>Enables digital business transformation</li><li>Protects customer data and your business</li><li>Increases business speed and agility</li><li>Allows scaling rapidly and securely</li><li>Reduces CAPEX and OPEX</li><li>Alleviates organizational friction</li><li>Reduces scope and cost of compliance</li><li>Solves the security skills shortage</li></ul><p><strong>EXECUTION BENEFITS</strong></p><ul><li>Decreases risk and improves visibility</li><li>Allows greater control in a cloud environment</li><li>Decreased need for VPNs</li><li>Reduces complexity of the security stack</li><li>Supports cohesive IT issue resolution</li><li>Achieves lower breach potential</li><li>Reduces time to breach detection</li><li>Aids compliance audit initiatives</li></ul><p>What is Zero Trust? The Zero Trust model assumes a breach and verifies each access request as though it originates from an open network, regardless of user, resource, and origination point. This model presumes every data access request is fully authenticated, authorized, and encrypted before it is granted.</p><p>Zero Trust directly addresses the challenges of scope, scale and flexibility in a dynamically changing world. It reduces an organization’s risk footprint and attack surface by assuming any user, any device logging in from any location is a potential threat. It doesn’t increase trust, it eliminates it.</p><p>In the past, security tried to protect systems, applications, databases, and users behind a rigidly defined perimeter. With the loss of a definable perimeter, the next normal is to never trust but always verify to ensure appropriate and defined access to users and systems in an ever-changing world.</p><p>Author:</p><p>Laszlo S. Gonc, CISSP, First Senior Fellow, DivIHN Cybersecurity Center of Excellence</p>','','full_html'),('blog',0,46,803,'en',0,'<p><font size=\"6\"><strong>T</strong></font>raditional security models have been <strong>challenged</strong> as millions across the world have transitioned to <strong>remote work models</strong> wherever possible.</p><p>As the global workforce progresses towards the next normal of hybrid workplaces, organizations have adopted remote work as a new standard – but at what cost to security?</p><p>“Never trust, always verify” is the foundation of Zero Trust.</p><p>The rapid and meteoric rise in remote-based work has dramatically increased the exposure to cybersecurity threats, with more targeted attacks on organizations from cyber aggressors and nation-state groups. In addition to remote work, the increased rise in the use of Internet of Things (IoT), operational technology (OT), and network-enabled smart devices introduced new areas of potential compromise to enterprise networks. Every connected endpoint to an organization’s network is a potential hackable entry point for a cyber aggressor.</p><p>With economic activity straining, budgets decreasing, and capital expenditures shrinking, cybersecurity spend has come under pressure. Despite these pressures, a new 2020 Kaspersky report ‘Investment adjustment: aligning IT budgets with changing security priorities’, “cybersecurity remains a priority for investment among businesses.” Despite overall IT budgets decreasing, enterprise cybersecurity spend is up from 26% to 29% in 2020. In addition, according to this study, 71% of organizations expect their cybersecurity budgets to grow further in the next three years.</p><p>Zero Trust provides a scoped, scalable, agile and affordable framework to address the loss of a defined corporate perimeter and the increased security risk to corporate systems and sensitive data.</p><p><strong>STRATEGIC BENEFITS</strong></p><ul><li>Enables digital business transformation</li><li>Protects customer data and your business</li><li>Increases business speed and agility</li><li>Allows scaling rapidly and securely</li><li>Reduces CAPEX and OPEX</li><li>Alleviates organizational friction</li><li>Reduces scope and cost of compliance</li><li>Solves the security skills shortage</li></ul><p><strong>EXECUTION BENEFITS</strong></p><ul><li>Decreases risk and improves visibility</li><li>Allows greater control in a cloud environment</li><li>Decreased need for VPNs</li><li>Reduces complexity of the security stack</li><li>Supports cohesive IT issue resolution</li><li>Achieves lower breach potential</li><li>Reduces time to breach detection</li><li>Aids compliance audit initiatives</li></ul><p>What is Zero Trust? The Zero Trust model assumes a breach and verifies each access request as though it originates from an open network, regardless of user, resource, and origination point. This model presumes every data access request is fully authenticated, authorized, and encrypted before it is granted.</p><p>Zero Trust directly addresses the challenges of scope, scale and flexibility in a dynamically changing world. It reduces an organization’s risk footprint and attack surface by assuming any user, any device logging in from any location is a potential threat. It doesn’t increase trust, it eliminates it.</p><p>In the past, security tried to protect systems, applications, databases, and users behind a rigidly defined perimeter. With the loss of a definable perimeter, the next normal is to never trust but always verify to ensure appropriate and defined access to users and systems in an ever-changing world.</p><p>Author:</p><p>Laszlo S. Gonc, CISSP, First Senior Fellow, DivIHN Cybersecurity Center of Excellence</p>','','full_html'),('featured_article',0,47,88,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><blockquote><p>“The majority of companies — <strong>77% of respondents</strong> — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p></blockquote><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only <strong>30% of respondents</strong> reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><h2>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</h2><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><h2>The NIST Incident Response Framework</h2><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are <strong>preparation</strong>; <strong>detection and analysis</strong>; <strong>containment, eradication and recovery</strong>; and <strong>post-incident activity</strong>. Here’s a look at each one in some detail.</p><ol><li><p><strong>Phase 1: Preparation.</strong></p><p>The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p></li><li><p><strong>Phase 2: Detection and Analysis.</strong></p><p>While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p></li><li><p><strong>Phase 3: Containment, Eradication and Recovery.</strong></p><p>Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p></li><li><p><strong>Phase 4: Post-incident activity.</strong></p><p>Post-incident activity centers on lessons learned to accomplish two things: improve the incident response capability and prevent the incident from recurring.</p></li></ol><h2>The ISO Incident Response Framework</h2><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p><strong>ISO/IEC 27035-1:2016</strong> outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><ol><li><strong>PART 1. Planning and Preparation.</strong><ul><li>Establish an information security incident management policy.</li><li>Create an incident response team.</li></ul></li><li><strong>PART 2. Detection and Reporting.</strong><ul><li>Set up the processes, procedures and technology required to detect and report the incident.</li></ul></li><li><strong>PART 3. Assessment and Decision.</strong><ul><li>Set up processes and procedures.</li><li>Establish incident descriptions and criteria.</li></ul></li><li><strong>PART 4. Response to Incidents.</strong><ul><li>Establish controls to prevent, respond and recover from incidents.</li></ul></li><li><strong>PART 5. Lessons Learned.</strong><ul><li>Learn from security incidents and improve overall computer security incident management.</li></ul></li></ol><h2>COMPARISON</h2><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><h2>SUMMARY</h2><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,89,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><blockquote><p>“The majority of companies — <strong>77% of respondents</strong> — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p></blockquote><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only <strong>30% of respondents</strong> reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><h2>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</h2><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><h2>The NIST Incident Response Framework</h2><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are <strong>preparation</strong>; <strong>detection and analysis</strong>; <strong>containment, eradication and recovery</strong>; and <strong>post-incident activity</strong>. Here’s a look at each one in some detail.</p><ol><li><p><strong>Phase 1: Preparation.</strong></p><p>The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p></li><li><p><strong>Phase 2: Detection and Analysis.</strong></p><p>While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p></li><li><p><strong>Phase 3: Containment, Eradication and Recovery.</strong></p><p>Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p></li><li><p><strong>Phase 4: Post-incident activity.</strong></p><p>Post-incident activity centers on lessons learned to accomplish two things: improve the incident response capability and prevent the incident from recurring.</p></li></ol><h2>The ISO Incident Response Framework</h2><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p><strong>ISO/IEC 27035-1:2016</strong> outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><ol><li><strong>PART 1. Planning and Preparation.</strong><ul><li>Establish an information security incident management policy.</li><li>Create an incident response team.</li></ul></li><li><strong>PART 2. Detection and Reporting.</strong><ul><li>Set up the processes, procedures and technology required to detect and report the incident.</li></ul></li><li><strong>PART 3. Assessment and Decision.</strong><ul><li>Set up processes and procedures.</li><li>Establish incident descriptions and criteria.</li></ul></li><li><strong>PART 4. Response to Incidents.</strong><ul><li>Establish controls to prevent, respond and recover from incidents.</li></ul></li><li><strong>PART 5. Lessons Learned.</strong><ul><li>Learn from security incidents and improve overall computer security incident management.</li></ul></li></ol><h2>COMPARISON</h2><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><h2>SUMMARY</h2><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,91,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><blockquote><p>“The majority of companies — <strong>77% of respondents</strong> — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p></blockquote><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only <strong>30% of respondents</strong> reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><h2>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</h2><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><h2>The NIST Incident Response Framework</h2><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are <strong>preparation</strong>; <strong>detection and analysis</strong>; <strong>containment, eradication and recovery</strong>; and <strong>post-incident activity</strong>. Here’s a look at each one in some detail.</p><ol><li><p><strong>Phase 1: Preparation.</strong></p><p>The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p></li><li><p><strong>Phase 2: Detection and Analysis.</strong></p><p>While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p></li><li><p><strong>Phase 3: Containment, Eradication and Recovery.</strong></p><p>Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p></li><li><p><strong>Phase 4: Post-incident activity.</strong></p><p>Post-incident activity centers on lessons learned to accomplish two things: improve the incident response capability and prevent the incident from recurring.</p></li></ol><h2>The ISO Incident Response Framework</h2><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p><strong>ISO/IEC 27035-1:2016</strong> outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><ol><li><strong>PART 1. Planning and Preparation.</strong><ul><li>Establish an information security incident management policy.</li><li>Create an incident response team.</li></ul></li><li><strong>PART 2. Detection and Reporting.</strong><ul><li>Set up the processes, procedures and technology required to detect and report the incident.</li></ul></li><li><strong>PART 3. Assessment and Decision.</strong><ul><li>Set up processes and procedures.</li><li>Establish incident descriptions and criteria.</li></ul></li><li><strong>PART 4. Response to Incidents.</strong><ul><li>Establish controls to prevent, respond and recover from incidents.</li></ul></li><li><strong>PART 5. Lessons Learned.</strong><ul><li>Learn from security incidents and improve overall computer security incident management.</li></ul></li></ol><h2>COMPARISON</h2><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><h2>SUMMARY</h2><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,94,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,127,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,254,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,255,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,445,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,448,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,515,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,531,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,593,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,595,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,596,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,597,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,598,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,599,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,606,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,833,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,834,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,835,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,47,840,'en',0,'<p>Awareness is growing that organizations of all sizes lack cybersecurity incident response preparedness. Companies regardless of size are not exempt from cybersecurity threats. Being prepared with an established plan of action to immediately execute following a security incident is crucial to limit incident costs and damages to the organization’s technical infrastructure, operations, and reputation.</p><p>“The majority of companies — 77% of respondents — don’t have a cybersecurity incident response plan applied across the enterprise,” according to a 2019 study conducted by the Ponemon Institute.</p><p>According to this study one of the primary reasons for this is the well-documented security skills shortage. It is particularly severe in incident response because it is a newer discipline for many companies. Survey respondents said they lack the headcount to create, maintain and test their incident response plans. Only 30% of respondents reported staffing for security is sufficient to achieve a high level of cyber resilience.</p><p><strong>INCIDENT RESPONSE (IR) FRAMEWORK VS PLAYBOOK</strong></p><p>An incident response framework provides a structure to support incident response operations. A framework typically provides guidance on what needs to be done, but not on how it is done. A framework is flexible enough to allow elements to be added or removed as necessary to satisfy a particular organization’s needs.</p><p>An incident response plan has a goal delivering effective incident response through a detailed set of steps. An incident response plan details the processes needed to deal with cybersecurity incidents, calls out the resources required, and outlines the communication and escalation paths required for plan operation.</p><p>Together the framework suggests logical elements that should be included in a plan. A plan includes those elements as well as elements of mission, services, people, process, technology and facilities. With this in mind, it helps to understand two (2) industry incident response frameworks to determine the best approach for your organization.</p><p><strong>The NIST Incident Response Framework</strong></p><p>The National Institute of Standards and Technology (NIST) is responsible for developing information security standards and guidelines, including minimum standards for federal information systems. The NIST “Computer Security Incident Handling Guide” includes an incident response framework in the form of an incident response lifecycle.</p><p>The four stages of the NIST incident response lifecycle are preparation; detection and analysis; containment, eradication and recovery; and post-incident activity. Here’s a look at each one in some detail.</p><p><strong>Phase 1: Preparation.</strong> The quality of incident response largely depends on incident response preparation. In this preparation phase of the lifecycle, all the components needed to respond effectively to a computer security incident are identified, created or acquired.</p><p><strong>Phase 2: Detection and Analysis.</strong> While the capability to detect incidents is set up as part of the preparation phase, incident detection starts the incident response process. Incidents cannot be responded to until detection occurs.</p><p><strong>Phase 3: Containment, Eradication and Recovery.</strong> Containment follows the detection and validation of a security incident. The goals of containment are simple – stop the problem from getting worse (i.e., limit the damage); and regain control of systems and network.</p><p><strong>Phase 4: Post-incident activity.</strong> Post-incident activity centers on lessons learned to accomplish two things: Improve the incident response capability and prevent the incident from recurring.</p><p><strong>The ISO Incident Response Framework</strong></p><p>The International Organization for Standardization (ISO) is an independent non-governmental international standards organization. The ISO standard details how individuals should “detect, report and assess information security incidents; respond to information security incidents … report information security vulnerabilities … learn from information security incidents and vulnerabilities, institute preventive controls, and make improvements to the overall approach to information security incident management.”</p><p>ISO/IEC 27035-1:2016 outlines the principles underlying information security incident management, which is structured into five (5) parts:</p><p><strong>PART 1. Planning and Preparation.</strong><br>Establish an information security incident management policy.<br>Create an incident response team.</p><p><strong>PART 2. Detection and Reporting.</strong><br>Set up the processes, procedures and technology required to detect and report the incident.</p><p><strong>PART 3. Assessment and Decision.</strong><br>Set up processes and procedures.<br>Establish incident descriptions and criteria.</p><p><strong>PART 4. Response to Incidents.</strong><br>Establish controls to prevent, respond and recover from incidents.</p><p><strong>PART 5. Lessons Learned.</strong><br>Learn from security incidents and improve overall computer security incident management.</p><p><strong>COMPARISON</strong></p><p>NIST and ISO 27035-1 are similar in approach to each other. However, there is an important and subtle difference. The NIST “Computer Security Incident Handling Guide” focuses on incident handling which deals with the prevention, detection and responding to incidents. ISO 27035-1 focuses on incident management, which is integrated broadly into other business management and risk reduction functions outside of the incident response organization.</p><p><strong>SUMMARY</strong></p><p>So which framework should you choose? Should you choose one framework in its entirety or should you choose part of one and combine it with parts of another framework in a kind of incident response a la carte? When considering whether to adopt a framework as is or build your own, these are some things to think about:</p><ul><li>Are your business operations within the US borders or global?</li><li>Are you publicly traded or privately held?</li><li>What are the requirements of your regulatory and compliance landscape? Are you highly regulated?</li><li>Do you have obligations under the Federal Information Systems Management Act (FISMA)?</li><li>What are your contractual obligations with your business and trading partners?</li></ul><p>There are certainly more questions to be assessed. Consider an appropriate framework that provides structure to guide the incident response plan. Building the incident response plan on the framework, not the framework itself, enables your organization to create the resilience needed to support your business.</p>','','full_html'),('featured_article',0,48,95,'en',0,'<p><strong>Remote Tele-work &amp; Cyber Safety</strong></p><p>As business leaders, our priority and paramount concern is the health and safety of our employees, staff, contractors, customers, clients, and community. The response to COVID-19 has affected many of us – family, friends, and business partners locally and around the world. When it came to virus detection, our major worry until recently has been cyber-related, and how it might affect our technology services. We now have a different virus challenge.</p><p>The COVID-19 outbreak is an unstable dynamic situation and has the potential to be incredibly impactful and disruptive to our organizations – corporate, non-profits, and governments alike. As the majority of our work force transitions to working remotely, bad actors and cyber attackers have ramped up their malicious efforts to create and spread more fear, uncertainty and doubt (FUD), in addition to stealing your information and company data.</p><p><strong>Attacks And Scams</strong></p><p>Right now hackers and bad actors are targeting a variety of our essential services for living and working including:</p><ul><li>Banks, Credits Cards, Gift Cards and most sources of Money</li><li>Grocery Stores, Restaurants, and Food Delivery Services</li><li>Doctors, Hospitals and Pharmacists (Medicines)</li><li>Online Movie Services, Podcasts and other Entertainment</li><li>Pandemic Information Updates and Government Websites, and more</li></ul><p>They want your credentials, login IDs and credit card numbers to steal your personal information, money and company data. They are doing this using easily available tools – social media platforms, devices, apps, texting, instant messaging, emails – and anything else that can get a malicious link to you.</p><p>Cyber attackers do this through:</p><ul><li>fake emails – phishing scams</li><li>fake voice mails – vishing</li><li>fake ads and coupons</li><li>fake websites and landing pages</li><li>fake direct SMS texts to your phone</li><li>fake videos and images on social media</li><li>fake PDFs and documents</li><li>fake authority communications</li></ul><p>The bad actors offer:</p><ul><li>fake COVID-19 and pandemic info</li><li>fake financial aid and loans</li><li>fake grocery and food delivery sites</li><li>fake medicines and pharmacists</li><li>fake online doctors and medical tests</li><li>fake bank sites, fake credit card sites</li><li>fake movie and entertainment</li><li>fake unemployment sites</li><li>fake government sites</li></ul><p>When you use these services, it is best to type in the URL (website address) manually instead of following a click-through search, ad or delivered link. The malicious URLs are propagated using a variety of means including domain names only one character off, through embedded attachments, or even landing on a web page.</p><p><strong>Eight (8) DO’s and DON’T’s</strong></p><ol><li><strong>Use Secure VPN.</strong> Always use your secure VPN on your devices. This ensures you have a secure encrypted communication ‘tunnel’ while working. Bad actors can monitor your traffic. Public wi-fi hotspots should be avoided.</li><li><strong>Don’t Mix Devices.</strong> Conduct business on corporate devices to ensure cybersecurity hygiene for your corporate and client data.</li><li><strong>Regular Sign On.</strong> Ensure you log onto your corporate network regularly to get the most recent updates. With the evolving cyber threats, new attacks are coming out daily.</li><li><strong>Use Multi-factor Authentication (MFA).</strong> Enable and use your multi-factor authentication credentials. MFA adds an essential layer of protection for your credentials.</li><li><strong>Don’t Share Passwords.</strong> Even at home, don’t share your passwords. In addition, please don’t write down credentials and passwords on paper, sticky pads or other mediums where they can be seen or retrieved.</li><li><strong>Don’t Click Through.</strong> If it seems suspicious, don’t click through. Type in the URL or web address manually. Report it to your IT support if possible. Do NOT forward or send the malicious content.</li><li><strong>Verify If In Doubt.</strong> If you have a request from your supervisor, co-worker or subordinate for information or money that appears suspicious – STOP. Pick up the phone or use other safe means to verify the request. Business Email Compromise (BEC) is fast on the rise.</li><li><strong>Avoid New Apps.</strong> Hackers and scammers have flooded app stores with mobile apps (and websites) faking a variety of our essential services – banking, food delivery, government, entertainment. Be careful, be mindful.</li></ol><p><strong>Actionable Take-Aways During the Covid-19 Outbreak Leading Through This Crisis</strong></p><ol><li><strong>Clear and Frequent Communication:</strong><br>Lack of data creates a vacuum leading to ill-informed decisions, and unease throughout your organization. Ensure you and your peers communicate clearly and frequently with messaging that provides directed guidance and actionable take-aways.</li><li><strong>A Single Source of Truth:</strong><br>Avoid multiple sources and channels of information. Create a single portal that works for your organization – an app, a website, a hotline. Leverage existing data and risk assessments to support better decision making, enable transparency and communicate progress efficiently and effectively with employees, staff, and others.</li><li><strong>Provide Collaboration Tools:</strong><br>Whether you have established remote working capabilities or not, you need to provide secure solutions for your organization. Determine how your organization works and provide the necessary platforms identifying critical use cases. This includes general communications and secure access to instant messaging, file sharing, enterprise applications, and other systems of engagement.</li><li><strong>Cybersecurity Safety:</strong><br>Cyber aggressors are taking advantage of this global crisis by sending malicious emails and perpetrating other scams.</li></ol>','','full_html'),('featured_article',0,48,128,'en',0,'<p><strong>Remote Tele-work &amp; Cyber Safety</strong></p><p>As business leaders, our priority and paramount concern is the health and safety of our employees, staff, contractors, customers, clients, and community. The response to COVID-19 has affected many of us – family, friends, and business partners locally and around the world. When it came to virus detection, our major worry until recently has been cyber-related, and how it might affect our technology services. We now have a different virus challenge.</p><p>The COVID-19 outbreak is an unstable dynamic situation and has the potential to be incredibly impactful and disruptive to our organizations – corporate, non-profits, and governments alike. As the majority of our work force transitions to working remotely, bad actors and cyber attackers have ramped up their malicious efforts to create and spread more fear, uncertainty and doubt (FUD), in addition to stealing your information and company data.</p><p><strong>Attacks And Scams</strong></p><p>Right now hackers and bad actors are targeting a variety of our essential services for living and working including:</p><ul><li>Banks, Credits Cards, Gift Cards and most sources of Money</li><li>Grocery Stores, Restaurants, and Food Delivery Services</li><li>Doctors, Hospitals and Pharmacists (Medicines)</li><li>Online Movie Services, Podcasts and other Entertainment</li><li>Pandemic Information Updates and Government Websites, and more</li></ul><p>They want your credentials, login IDs and credit card numbers to steal your personal information, money and company data. They are doing this using easily available tools – social media platforms, devices, apps, texting, instant messaging, emails – and anything else that can get a malicious link to you.</p><p>Cyber attackers do this through:</p><ul><li>fake emails – phishing scams</li><li>fake voice mails – vishing</li><li>fake ads and coupons</li><li>fake websites and landing pages</li><li>fake direct SMS texts to your phone</li><li>fake videos and images on social media</li><li>fake PDFs and documents</li><li>fake authority communications</li></ul><p>The bad actors offer:</p><ul><li>fake COVID-19 and pandemic info</li><li>fake financial aid and loans</li><li>fake grocery and food delivery sites</li><li>fake medicines and pharmacists</li><li>fake online doctors and medical tests</li><li>fake bank sites, fake credit card sites</li><li>fake movie and entertainment</li><li>fake unemployment sites</li><li>fake government sites</li></ul><p>When you use these services, it is best to type in the URL (website address) manually instead of following a click-through search, ad or delivered link. The malicious URLs are propagated using a variety of means including domain names only one character off, through embedded attachments, or even landing on a web page.</p><p><strong>Eight (8) DO’s and DON’T’s</strong></p><ol><li><strong>Use Secure VPN.</strong> Always use your secure VPN on your devices. This ensures you have a secure encrypted communication ‘tunnel’ while working. Bad actors can monitor your traffic. Public wi-fi hotspots should be avoided.</li><li><strong>Don’t Mix Devices.</strong> Conduct business on corporate devices to ensure cybersecurity hygiene for your corporate and client data.</li><li><strong>Regular Sign On.</strong> Ensure you log onto your corporate network regularly to get the most recent updates. With the evolving cyber threats, new attacks are coming out daily.</li><li><strong>Use Multi-factor Authentication (MFA).</strong> Enable and use your multi-factor authentication credentials. MFA adds an essential layer of protection for your credentials.</li><li><strong>Don’t Share Passwords.</strong> Even at home, don’t share your passwords. In addition, please don’t write down credentials and passwords on paper, sticky pads or other mediums where they can be seen or retrieved.</li><li><strong>Don’t Click Through.</strong> If it seems suspicious, don’t click through. Type in the URL or web address manually. Report it to your IT support if possible. Do NOT forward or send the malicious content.</li><li><strong>Verify If In Doubt.</strong> If you have a request from your supervisor, co-worker or subordinate for information or money that appears suspicious – STOP. Pick up the phone or use other safe means to verify the request. Business Email Compromise (BEC) is fast on the rise.</li><li><strong>Avoid New Apps.</strong> Hackers and scammers have flooded app stores with mobile apps (and websites) faking a variety of our essential services – banking, food delivery, government, entertainment. Be careful, be mindful.</li></ol><p><strong>Actionable Take-Aways During the Covid-19 Outbreak Leading Through This Crisis</strong></p><ol><li><strong>Clear and Frequent Communication:</strong><br>Lack of data creates a vacuum leading to ill-informed decisions, and unease throughout your organization. Ensure you and your peers communicate clearly and frequently with messaging that provides directed guidance and actionable take-aways.</li><li><strong>A Single Source of Truth:</strong><br>Avoid multiple sources and channels of information. Create a single portal that works for your organization – an app, a website, a hotline. Leverage existing data and risk assessments to support better decision making, enable transparency and communicate progress efficiently and effectively with employees, staff, and others.</li><li><strong>Provide Collaboration Tools:</strong><br>Whether you have established remote working capabilities or not, you need to provide secure solutions for your organization. Determine how your organization works and provide the necessary platforms identifying critical use cases. This includes general communications and secure access to instant messaging, file sharing, enterprise applications, and other systems of engagement.</li><li><strong>Cybersecurity Safety:</strong><br>Cyber aggressors are taking advantage of this global crisis by sending malicious emails and perpetrating other scams.</li></ol>','','full_html'),('featured_article',0,48,272,'en',0,'<p><strong>Remote Tele-work &amp; Cyber Safety</strong></p><p>As business leaders, our priority and paramount concern is the health and safety of our employees, staff, contractors, customers, clients, and community. The response to COVID-19 has affected many of us – family, friends, and business partners locally and around the world. When it came to virus detection, our major worry until recently has been cyber-related, and how it might affect our technology services. We now have a different virus challenge.</p><p>The COVID-19 outbreak is an unstable dynamic situation and has the potential to be incredibly impactful and disruptive to our organizations – corporate, non-profits, and governments alike. As the majority of our work force transitions to working remotely, bad actors and cyber attackers have ramped up their malicious efforts to create and spread more fear, uncertainty and doubt (FUD), in addition to stealing your information and company data.</p><p><strong>Attacks And Scams</strong></p><p>Right now hackers and bad actors are targeting a variety of our essential services for living and working including:</p><ul><li>Banks, Credits Cards, Gift Cards and most sources of Money</li><li>Grocery Stores, Restaurants, and Food Delivery Services</li><li>Doctors, Hospitals and Pharmacists (Medicines)</li><li>Online Movie Services, Podcasts and other Entertainment</li><li>Pandemic Information Updates and Government Websites, and more</li></ul><p>They want your credentials, login IDs and credit card numbers to steal your personal information, money and company data. They are doing this using easily available tools – social media platforms, devices, apps, texting, instant messaging, emails – and anything else that can get a malicious link to you.</p><p>Cyber attackers do this through:</p><ul><li>fake emails – phishing scams</li><li>fake voice mails – vishing</li><li>fake ads and coupons</li><li>fake websites and landing pages</li><li>fake direct SMS texts to your phone</li><li>fake videos and images on social media</li><li>fake PDFs and documents</li><li>fake authority communications</li></ul><p>The bad actors offer:</p><ul><li>fake COVID-19 and pandemic info</li><li>fake financial aid and loans</li><li>fake grocery and food delivery sites</li><li>fake medicines and pharmacists</li><li>fake online doctors and medical tests</li><li>fake bank sites, fake credit card sites</li><li>fake movie and entertainment</li><li>fake unemployment sites</li><li>fake government sites</li></ul><p>When you use these services, it is best to type in the URL (website address) manually instead of following a click-through search, ad or delivered link. The malicious URLs are propagated using a variety of means including domain names only one character off, through embedded attachments, or even landing on a web page.</p><p><strong>Eight (8) DO’s and DON’T’s</strong></p><ol><li><strong>Use Secure VPN.</strong> Always use your secure VPN on your devices. This ensures you have a secure encrypted communication ‘tunnel’ while working. Bad actors can monitor your traffic. Public wi-fi hotspots should be avoided.</li><li><strong>Don’t Mix Devices.</strong> Conduct business on corporate devices to ensure cybersecurity hygiene for your corporate and client data.</li><li><strong>Regular Sign On.</strong> Ensure you log onto your corporate network regularly to get the most recent updates. With the evolving cyber threats, new attacks are coming out daily.</li><li><strong>Use Multi-factor Authentication (MFA).</strong> Enable and use your multi-factor authentication credentials. MFA adds an essential layer of protection for your credentials.</li><li><strong>Don’t Share Passwords.</strong> Even at home, don’t share your passwords. In addition, please don’t write down credentials and passwords on paper, sticky pads or other mediums where they can be seen or retrieved.</li><li><strong>Don’t Click Through.</strong> If it seems suspicious, don’t click through. Type in the URL or web address manually. Report it to your IT support if possible. Do NOT forward or send the malicious content.</li><li><strong>Verify If In Doubt.</strong> If you have a request from your supervisor, co-worker or subordinate for information or money that appears suspicious – STOP. Pick up the phone or use other safe means to verify the request. Business Email Compromise (BEC) is fast on the rise.</li><li><strong>Avoid New Apps.</strong> Hackers and scammers have flooded app stores with mobile apps (and websites) faking a variety of our essential services – banking, food delivery, government, entertainment. Be careful, be mindful.</li></ol><p><strong>Actionable Take-Aways During the Covid-19 Outbreak Leading Through This Crisis</strong></p><ol><li><strong>Clear and Frequent Communication:</strong><br>Lack of data creates a vacuum leading to ill-informed decisions, and unease throughout your organization. Ensure you and your peers communicate clearly and frequently with messaging that provides directed guidance and actionable take-aways.</li><li><strong>A Single Source of Truth:</strong><br>Avoid multiple sources and channels of information. Create a single portal that works for your organization – an app, a website, a hotline. Leverage existing data and risk assessments to support better decision making, enable transparency and communicate progress efficiently and effectively with employees, staff, and others.</li><li><strong>Provide Collaboration Tools:</strong><br>Whether you have established remote working capabilities or not, you need to provide secure solutions for your organization. Determine how your organization works and provide the necessary platforms identifying critical use cases. This includes general communications and secure access to instant messaging, file sharing, enterprise applications, and other systems of engagement.</li><li><strong>Cybersecurity Safety:</strong><br>Cyber aggressors are taking advantage of this global crisis by sending malicious emails and perpetrating other scams.</li></ol>','','full_html'),('featured_article',0,48,450,'en',0,'<p><strong>Remote Tele-work &amp; Cyber Safety</strong></p><p>As business leaders, our priority and paramount concern is the health and safety of our employees, staff, contractors, customers, clients, and community. The response to COVID-19 has affected many of us – family, friends, and business partners locally and around the world. When it came to virus detection, our major worry until recently has been cyber-related, and how it might affect our technology services. We now have a different virus challenge.</p><p>The COVID-19 outbreak is an unstable dynamic situation and has the potential to be incredibly impactful and disruptive to our organizations – corporate, non-profits, and governments alike. As the majority of our work force transitions to working remotely, bad actors and cyber attackers have ramped up their malicious efforts to create and spread more fear, uncertainty and doubt (FUD), in addition to stealing your information and company data.</p><p><strong>Attacks And Scams</strong></p><p>Right now hackers and bad actors are targeting a variety of our essential services for living and working including:</p><ul><li>Banks, Credits Cards, Gift Cards and most sources of Money</li><li>Grocery Stores, Restaurants, and Food Delivery Services</li><li>Doctors, Hospitals and Pharmacists (Medicines)</li><li>Online Movie Services, Podcasts and other Entertainment</li><li>Pandemic Information Updates and Government Websites, and more</li></ul><p>They want your credentials, login IDs and credit card numbers to steal your personal information, money and company data. They are doing this using easily available tools – social media platforms, devices, apps, texting, instant messaging, emails – and anything else that can get a malicious link to you.</p><p>Cyber attackers do this through:</p><ul><li>fake emails – phishing scams</li><li>fake voice mails – vishing</li><li>fake ads and coupons</li><li>fake websites and landing pages</li><li>fake direct SMS texts to your phone</li><li>fake videos and images on social media</li><li>fake PDFs and documents</li><li>fake authority communications</li></ul><p>The bad actors offer:</p><ul><li>fake COVID-19 and pandemic info</li><li>fake financial aid and loans</li><li>fake grocery and food delivery sites</li><li>fake medicines and pharmacists</li><li>fake online doctors and medical tests</li><li>fake bank sites, fake credit card sites</li><li>fake movie and entertainment</li><li>fake unemployment sites</li><li>fake government sites</li></ul><p>When you use these services, it is best to type in the URL (website address) manually instead of following a click-through search, ad or delivered link. The malicious URLs are propagated using a variety of means including domain names only one character off, through embedded attachments, or even landing on a web page.</p><p><strong>Eight (8) DO’s and DON’T’s</strong></p><ol><li><strong>Use Secure VPN.</strong> Always use your secure VPN on your devices. This ensures you have a secure encrypted communication ‘tunnel’ while working. Bad actors can monitor your traffic. Public wi-fi hotspots should be avoided.</li><li><strong>Don’t Mix Devices.</strong> Conduct business on corporate devices to ensure cybersecurity hygiene for your corporate and client data.</li><li><strong>Regular Sign On.</strong> Ensure you log onto your corporate network regularly to get the most recent updates. With the evolving cyber threats, new attacks are coming out daily.</li><li><strong>Use Multi-factor Authentication (MFA).</strong> Enable and use your multi-factor authentication credentials. MFA adds an essential layer of protection for your credentials.</li><li><strong>Don’t Share Passwords.</strong> Even at home, don’t share your passwords. In addition, please don’t write down credentials and passwords on paper, sticky pads or other mediums where they can be seen or retrieved.</li><li><strong>Don’t Click Through.</strong> If it seems suspicious, don’t click through. Type in the URL or web address manually. Report it to your IT support if possible. Do NOT forward or send the malicious content.</li><li><strong>Verify If In Doubt.</strong> If you have a request from your supervisor, co-worker or subordinate for information or money that appears suspicious – STOP. Pick up the phone or use other safe means to verify the request. Business Email Compromise (BEC) is fast on the rise.</li><li><strong>Avoid New Apps.</strong> Hackers and scammers have flooded app stores with mobile apps (and websites) faking a variety of our essential services – banking, food delivery, government, entertainment. Be careful, be mindful.</li></ol><p><strong>Actionable Take-Aways During the Covid-19 Outbreak Leading Through This Crisis</strong></p><ol><li><strong>Clear and Frequent Communication:</strong><br>Lack of data creates a vacuum leading to ill-informed decisions, and unease throughout your organization. Ensure you and your peers communicate clearly and frequently with messaging that provides directed guidance and actionable take-aways.</li><li><strong>A Single Source of Truth:</strong><br>Avoid multiple sources and channels of information. Create a single portal that works for your organization – an app, a website, a hotline. Leverage existing data and risk assessments to support better decision making, enable transparency and communicate progress efficiently and effectively with employees, staff, and others.</li><li><strong>Provide Collaboration Tools:</strong><br>Whether you have established remote working capabilities or not, you need to provide secure solutions for your organization. Determine how your organization works and provide the necessary platforms identifying critical use cases. This includes general communications and secure access to instant messaging, file sharing, enterprise applications, and other systems of engagement.</li><li><strong>Cybersecurity Safety:</strong><br>Cyber aggressors are taking advantage of this global crisis by sending malicious emails and perpetrating other scams.</li></ol>','','full_html'),('featured_article',0,48,517,'en',0,'<p><strong>Remote Tele-work &amp; Cyber Safety</strong></p><p>As business leaders, our priority and paramount concern is the health and safety of our employees, staff, contractors, customers, clients, and community. The response to COVID-19 has affected many of us – family, friends, and business partners locally and around the world. When it came to virus detection, our major worry until recently has been cyber-related, and how it might affect our technology services. We now have a different virus challenge.</p><p>The COVID-19 outbreak is an unstable dynamic situation and has the potential to be incredibly impactful and disruptive to our organizations – corporate, non-profits, and governments alike. As the majority of our work force transitions to working remotely, bad actors and cyber attackers have ramped up their malicious efforts to create and spread more fear, uncertainty and doubt (FUD), in addition to stealing your information and company data.</p><p><strong>Attacks And Scams</strong></p><p>Right now hackers and bad actors are targeting a variety of our essential services for living and working including:</p><ul><li>Banks, Credits Cards, Gift Cards and most sources of Money</li><li>Grocery Stores, Restaurants, and Food Delivery Services</li><li>Doctors, Hospitals and Pharmacists (Medicines)</li><li>Online Movie Services, Podcasts and other Entertainment</li><li>Pandemic Information Updates and Government Websites, and more</li></ul><p>They want your credentials, login IDs and credit card numbers to steal your personal information, money and company data. They are doing this using easily available tools – social media platforms, devices, apps, texting, instant messaging, emails – and anything else that can get a malicious link to you.</p><p>Cyber attackers do this through:</p><ul><li>fake emails – phishing scams</li><li>fake voice mails – vishing</li><li>fake ads and coupons</li><li>fake websites and landing pages</li><li>fake direct SMS texts to your phone</li><li>fake videos and images on social media</li><li>fake PDFs and documents</li><li>fake authority communications</li></ul><p>The bad actors offer:</p><ul><li>fake COVID-19 and pandemic info</li><li>fake financial aid and loans</li><li>fake grocery and food delivery sites</li><li>fake medicines and pharmacists</li><li>fake online doctors and medical tests</li><li>fake bank sites, fake credit card sites</li><li>fake movie and entertainment</li><li>fake unemployment sites</li><li>fake government sites</li></ul><p>When you use these services, it is best to type in the URL (website address) manually instead of following a click-through search, ad or delivered link. The malicious URLs are propagated using a variety of means including domain names only one character off, through embedded attachments, or even landing on a web page.</p><p><strong>Eight (8) DO’s and DON’T’s</strong></p><ol><li><strong>Use Secure VPN.</strong> Always use your secure VPN on your devices. This ensures you have a secure encrypted communication ‘tunnel’ while working. Bad actors can monitor your traffic. Public wi-fi hotspots should be avoided.</li><li><strong>Don’t Mix Devices.</strong> Conduct business on corporate devices to ensure cybersecurity hygiene for your corporate and client data.</li><li><strong>Regular Sign On.</strong> Ensure you log onto your corporate network regularly to get the most recent updates. With the evolving cyber threats, new attacks are coming out daily.</li><li><strong>Use Multi-factor Authentication (MFA).</strong> Enable and use your multi-factor authentication credentials. MFA adds an essential layer of protection for your credentials.</li><li><strong>Don’t Share Passwords.</strong> Even at home, don’t share your passwords. In addition, please don’t write down credentials and passwords on paper, sticky pads or other mediums where they can be seen or retrieved.</li><li><strong>Don’t Click Through.</strong> If it seems suspicious, don’t click through. Type in the URL or web address manually. Report it to your IT support if possible. Do NOT forward or send the malicious content.</li><li><strong>Verify If In Doubt.</strong> If you have a request from your supervisor, co-worker or subordinate for information or money that appears suspicious – STOP. Pick up the phone or use other safe means to verify the request. Business Email Compromise (BEC) is fast on the rise.</li><li><strong>Avoid New Apps.</strong> Hackers and scammers have flooded app stores with mobile apps (and websites) faking a variety of our essential services – banking, food delivery, government, entertainment. Be careful, be mindful.</li></ol><p><strong>Actionable Take-Aways During the Covid-19 Outbreak Leading Through This Crisis</strong></p><ol><li><strong>Clear and Frequent Communication:</strong><br>Lack of data creates a vacuum leading to ill-informed decisions, and unease throughout your organization. Ensure you and your peers communicate clearly and frequently with messaging that provides directed guidance and actionable take-aways.</li><li><strong>A Single Source of Truth:</strong><br>Avoid multiple sources and channels of information. Create a single portal that works for your organization – an app, a website, a hotline. Leverage existing data and risk assessments to support better decision making, enable transparency and communicate progress efficiently and effectively with employees, staff, and others.</li><li><strong>Provide Collaboration Tools:</strong><br>Whether you have established remote working capabilities or not, you need to provide secure solutions for your organization. Determine how your organization works and provide the necessary platforms identifying critical use cases. This includes general communications and secure access to instant messaging, file sharing, enterprise applications, and other systems of engagement.</li><li><strong>Cybersecurity Safety:</strong><br>Cyber aggressors are taking advantage of this global crisis by sending malicious emails and perpetrating other scams.</li></ol>','','full_html'),('featured_article',0,48,533,'en',0,'<p><strong>Remote Tele-work &amp; Cyber Safety</strong></p><p>As business leaders, our priority and paramount concern is the health and safety of our employees, staff, contractors, customers, clients, and community. The response to COVID-19 has affected many of us – family, friends, and business partners locally and around the world. When it came to virus detection, our major worry until recently has been cyber-related, and how it might affect our technology services. We now have a different virus challenge.</p><p>The COVID-19 outbreak is an unstable dynamic situation and has the potential to be incredibly impactful and disruptive to our organizations – corporate, non-profits, and governments alike. As the majority of our work force transitions to working remotely, bad actors and cyber attackers have ramped up their malicious efforts to create and spread more fear, uncertainty and doubt (FUD), in addition to stealing your information and company data.</p><p><strong>Attacks And Scams</strong></p><p>Right now hackers and bad actors are targeting a variety of our essential services for living and working including:</p><ul><li>Banks, Credits Cards, Gift Cards and most sources of Money</li><li>Grocery Stores, Restaurants, and Food Delivery Services</li><li>Doctors, Hospitals and Pharmacists (Medicines)</li><li>Online Movie Services, Podcasts and other Entertainment</li><li>Pandemic Information Updates and Government Websites, and more</li></ul><p>They want your credentials, login IDs and credit card numbers to steal your personal information, money and company data. They are doing this using easily available tools – social media platforms, devices, apps, texting, instant messaging, emails – and anything else that can get a malicious link to you.</p><p>Cyber attackers do this through:</p><ul><li>fake emails – phishing scams</li><li>fake voice mails – vishing</li><li>fake ads and coupons</li><li>fake websites and landing pages</li><li>fake direct SMS texts to your phone</li><li>fake videos and images on social media</li><li>fake PDFs and documents</li><li>fake authority communications</li></ul><p>The bad actors offer:</p><ul><li>fake COVID-19 and pandemic info</li><li>fake financial aid and loans</li><li>fake grocery and food delivery sites</li><li>fake medicines and pharmacists</li><li>fake online doctors and medical tests</li><li>fake bank sites, fake credit card sites</li><li>fake movie and entertainment</li><li>fake unemployment sites</li><li>fake government sites</li></ul><p>When you use these services, it is best to type in the URL (website address) manually instead of following a click-through search, ad or delivered link. The malicious URLs are propagated using a variety of means including domain names only one character off, through embedded attachments, or even landing on a web page.</p><p><strong>Eight (8) DO’s and DON’T’s</strong></p><ol><li><strong>Use Secure VPN.</strong> Always use your secure VPN on your devices. This ensures you have a secure encrypted communication ‘tunnel’ while working. Bad actors can monitor your traffic. Public wi-fi hotspots should be avoided.</li><li><strong>Don’t Mix Devices.</strong> Conduct business on corporate devices to ensure cybersecurity hygiene for your corporate and client data.</li><li><strong>Regular Sign On.</strong> Ensure you log onto your corporate network regularly to get the most recent updates. With the evolving cyber threats, new attacks are coming out daily.</li><li><strong>Use Multi-factor Authentication (MFA).</strong> Enable and use your multi-factor authentication credentials. MFA adds an essential layer of protection for your credentials.</li><li><strong>Don’t Share Passwords.</strong> Even at home, don’t share your passwords. In addition, please don’t write down credentials and passwords on paper, sticky pads or other mediums where they can be seen or retrieved.</li><li><strong>Don’t Click Through.</strong> If it seems suspicious, don’t click through. Type in the URL or web address manually. Report it to your IT support if possible. Do NOT forward or send the malicious content.</li><li><strong>Verify If In Doubt.</strong> If you have a request from your supervisor, co-worker or subordinate for information or money that appears suspicious – STOP. Pick up the phone or use other safe means to verify the request. Business Email Compromise (BEC) is fast on the rise.</li><li><strong>Avoid New Apps.</strong> Hackers and scammers have flooded app stores with mobile apps (and websites) faking a variety of our essential services – banking, food delivery, government, entertainment. Be careful, be mindful.</li></ol><p><strong>Actionable Take-Aways During the Covid-19 Outbreak Leading Through This Crisis</strong></p><ol><li><strong>Clear and Frequent Communication:</strong><br>Lack of data creates a vacuum leading to ill-informed decisions, and unease throughout your organization. Ensure you and your peers communicate clearly and frequently with messaging that provides directed guidance and actionable take-aways.</li><li><strong>A Single Source of Truth:</strong><br>Avoid multiple sources and channels of information. Create a single portal that works for your organization – an app, a website, a hotline. Leverage existing data and risk assessments to support better decision making, enable transparency and communicate progress efficiently and effectively with employees, staff, and others.</li><li><strong>Provide Collaboration Tools:</strong><br>Whether you have established remote working capabilities or not, you need to provide secure solutions for your organization. Determine how your organization works and provide the necessary platforms identifying critical use cases. This includes general communications and secure access to instant messaging, file sharing, enterprise applications, and other systems of engagement.</li><li><strong>Cybersecurity Safety:</strong><br>Cyber aggressors are taking advantage of this global crisis by sending malicious emails and perpetrating other scams.</li></ol>','','full_html'),('featured_article',0,48,608,'en',0,'<p><strong>Remote Tele-work &amp; Cyber Safety</strong></p><p>As business leaders, our priority and paramount concern is the health and safety of our employees, staff, contractors, customers, clients, and community. The response to COVID-19 has affected many of us – family, friends, and business partners locally and around the world. When it came to virus detection, our major worry until recently has been cyber-related, and how it might affect our technology services. We now have a different virus challenge.</p><p>The COVID-19 outbreak is an unstable dynamic situation and has the potential to be incredibly impactful and disruptive to our organizations – corporate, non-profits, and governments alike. As the majority of our work force transitions to working remotely, bad actors and cyber attackers have ramped up their malicious efforts to create and spread more fear, uncertainty and doubt (FUD), in addition to stealing your information and company data.</p><p><strong>Attacks And Scams</strong></p><p>Right now hackers and bad actors are targeting a variety of our essential services for living and working including:</p><ul><li>Banks, Credits Cards, Gift Cards and most sources of Money</li><li>Grocery Stores, Restaurants, and Food Delivery Services</li><li>Doctors, Hospitals and Pharmacists (Medicines)</li><li>Online Movie Services, Podcasts and other Entertainment</li><li>Pandemic Information Updates and Government Websites, and more</li></ul><p>They want your credentials, login IDs and credit card numbers to steal your personal information, money and company data. They are doing this using easily available tools – social media platforms, devices, apps, texting, instant messaging, emails – and anything else that can get a malicious link to you.</p><p>Cyber attackers do this through:</p><ul><li>fake emails – phishing scams</li><li>fake voice mails – vishing</li><li>fake ads and coupons</li><li>fake websites and landing pages</li><li>fake direct SMS texts to your phone</li><li>fake videos and images on social media</li><li>fake PDFs and documents</li><li>fake authority communications</li></ul><p>The bad actors offer:</p><ul><li>fake COVID-19 and pandemic info</li><li>fake financial aid and loans</li><li>fake grocery and food delivery sites</li><li>fake medicines and pharmacists</li><li>fake online doctors and medical tests</li><li>fake bank sites, fake credit card sites</li><li>fake movie and entertainment</li><li>fake unemployment sites</li><li>fake government sites</li></ul><p>When you use these services, it is best to type in the URL (website address) manually instead of following a click-through search, ad or delivered link. The malicious URLs are propagated using a variety of means including domain names only one character off, through embedded attachments, or even landing on a web page.</p><p><strong>Eight (8) DO’s and DON’T’s</strong></p><ol><li><strong>Use Secure VPN.</strong> Always use your secure VPN on your devices. This ensures you have a secure encrypted communication ‘tunnel’ while working. Bad actors can monitor your traffic. Public wi-fi hotspots should be avoided.</li><li><strong>Don’t Mix Devices.</strong> Conduct business on corporate devices to ensure cybersecurity hygiene for your corporate and client data.</li><li><strong>Regular Sign On.</strong> Ensure you log onto your corporate network regularly to get the most recent updates. With the evolving cyber threats, new attacks are coming out daily.</li><li><strong>Use Multi-factor Authentication (MFA).</strong> Enable and use your multi-factor authentication credentials. MFA adds an essential layer of protection for your credentials.</li><li><strong>Don’t Share Passwords.</strong> Even at home, don’t share your passwords. In addition, please don’t write down credentials and passwords on paper, sticky pads or other mediums where they can be seen or retrieved.</li><li><strong>Don’t Click Through.</strong> If it seems suspicious, don’t click through. Type in the URL or web address manually. Report it to your IT support if possible. Do NOT forward or send the malicious content.</li><li><strong>Verify If In Doubt.</strong> If you have a request from your supervisor, co-worker or subordinate for information or money that appears suspicious – STOP. Pick up the phone or use other safe means to verify the request. Business Email Compromise (BEC) is fast on the rise.</li><li><strong>Avoid New Apps.</strong> Hackers and scammers have flooded app stores with mobile apps (and websites) faking a variety of our essential services – banking, food delivery, government, entertainment. Be careful, be mindful.</li></ol><p><strong>Actionable Take-Aways During the Covid-19 Outbreak Leading Through This Crisis</strong></p><ol><li><strong>Clear and Frequent Communication:</strong><br>Lack of data creates a vacuum leading to ill-informed decisions, and unease throughout your organization. Ensure you and your peers communicate clearly and frequently with messaging that provides directed guidance and actionable take-aways.</li><li><strong>A Single Source of Truth:</strong><br>Avoid multiple sources and channels of information. Create a single portal that works for your organization – an app, a website, a hotline. Leverage existing data and risk assessments to support better decision making, enable transparency and communicate progress efficiently and effectively with employees, staff, and others.</li><li><strong>Provide Collaboration Tools:</strong><br>Whether you have established remote working capabilities or not, you need to provide secure solutions for your organization. Determine how your organization works and provide the necessary platforms identifying critical use cases. This includes general communications and secure access to instant messaging, file sharing, enterprise applications, and other systems of engagement.</li><li><strong>Cybersecurity Safety:</strong><br>Cyber aggressors are taking advantage of this global crisis by sending malicious emails and perpetrating other scams.</li></ol>','','full_html'),('featured_article',0,48,841,'en',0,'<p><strong>Remote Tele-work &amp; Cyber Safety</strong></p><p>As business leaders, our priority and paramount concern is the health and safety of our employees, staff, contractors, customers, clients, and community. The response to COVID-19 has affected many of us – family, friends, and business partners locally and around the world. When it came to virus detection, our major worry until recently has been cyber-related, and how it might affect our technology services. We now have a different virus challenge.</p><p>The COVID-19 outbreak is an unstable dynamic situation and has the potential to be incredibly impactful and disruptive to our organizations – corporate, non-profits, and governments alike. As the majority of our work force transitions to working remotely, bad actors and cyber attackers have ramped up their malicious efforts to create and spread more fear, uncertainty and doubt (FUD), in addition to stealing your information and company data.</p><p><strong>Attacks And Scams</strong></p><p>Right now hackers and bad actors are targeting a variety of our essential services for living and working including:</p><ul><li>Banks, Credits Cards, Gift Cards and most sources of Money</li><li>Grocery Stores, Restaurants, and Food Delivery Services</li><li>Doctors, Hospitals and Pharmacists (Medicines)</li><li>Online Movie Services, Podcasts and other Entertainment</li><li>Pandemic Information Updates and Government Websites, and more</li></ul><p>They want your credentials, login IDs and credit card numbers to steal your personal information, money and company data. They are doing this using easily available tools – social media platforms, devices, apps, texting, instant messaging, emails – and anything else that can get a malicious link to you.</p><p>Cyber attackers do this through:</p><ul><li>fake emails – phishing scams</li><li>fake voice mails – vishing</li><li>fake ads and coupons</li><li>fake websites and landing pages</li><li>fake direct SMS texts to your phone</li><li>fake videos and images on social media</li><li>fake PDFs and documents</li><li>fake authority communications</li></ul><p>The bad actors offer:</p><ul><li>fake COVID-19 and pandemic info</li><li>fake financial aid and loans</li><li>fake grocery and food delivery sites</li><li>fake medicines and pharmacists</li><li>fake online doctors and medical tests</li><li>fake bank sites, fake credit card sites</li><li>fake movie and entertainment</li><li>fake unemployment sites</li><li>fake government sites</li></ul><p>When you use these services, it is best to type in the URL (website address) manually instead of following a click-through search, ad or delivered link. The malicious URLs are propagated using a variety of means including domain names only one character off, through embedded attachments, or even landing on a web page.</p><p><strong>Eight (8) DO’s and DON’T’s</strong></p><ol><li><strong>Use Secure VPN.</strong> Always use your secure VPN on your devices. This ensures you have a secure encrypted communication ‘tunnel’ while working. Bad actors can monitor your traffic. Public wi-fi hotspots should be avoided.</li><li><strong>Don’t Mix Devices.</strong> Conduct business on corporate devices to ensure cybersecurity hygiene for your corporate and client data.</li><li><strong>Regular Sign On.</strong> Ensure you log onto your corporate network regularly to get the most recent updates. With the evolving cyber threats, new attacks are coming out daily.</li><li><strong>Use Multi-factor Authentication (MFA).</strong> Enable and use your multi-factor authentication credentials. MFA adds an essential layer of protection for your credentials.</li><li><strong>Don’t Share Passwords.</strong> Even at home, don’t share your passwords. In addition, please don’t write down credentials and passwords on paper, sticky pads or other mediums where they can be seen or retrieved.</li><li><strong>Don’t Click Through.</strong> If it seems suspicious, don’t click through. Type in the URL or web address manually. Report it to your IT support if possible. Do NOT forward or send the malicious content.</li><li><strong>Verify If In Doubt.</strong> If you have a request from your supervisor, co-worker or subordinate for information or money that appears suspicious – STOP. Pick up the phone or use other safe means to verify the request. Business Email Compromise (BEC) is fast on the rise.</li><li><strong>Avoid New Apps.</strong> Hackers and scammers have flooded app stores with mobile apps (and websites) faking a variety of our essential services – banking, food delivery, government, entertainment. Be careful, be mindful.</li></ol><p><strong>Actionable Take-Aways During the Covid-19 Outbreak Leading Through This Crisis</strong></p><ol><li><strong>Clear and Frequent Communication:</strong><br>Lack of data creates a vacuum leading to ill-informed decisions, and unease throughout your organization. Ensure you and your peers communicate clearly and frequently with messaging that provides directed guidance and actionable take-aways.</li><li><strong>A Single Source of Truth:</strong><br>Avoid multiple sources and channels of information. Create a single portal that works for your organization – an app, a website, a hotline. Leverage existing data and risk assessments to support better decision making, enable transparency and communicate progress efficiently and effectively with employees, staff, and others.</li><li><strong>Provide Collaboration Tools:</strong><br>Whether you have established remote working capabilities or not, you need to provide secure solutions for your organization. Determine how your organization works and provide the necessary platforms identifying critical use cases. This includes general communications and secure access to instant messaging, file sharing, enterprise applications, and other systems of engagement.</li><li><strong>Cybersecurity Safety:</strong><br>Cyber aggressors are taking advantage of this global crisis by sending malicious emails and perpetrating other scams.</li></ol>','','full_html'),('featured_article',0,48,842,'en',0,'<p><strong>Remote Tele-work &amp; Cyber Safety</strong></p><p>As business leaders, our priority and paramount concern is the health and safety of our employees, staff, contractors, customers, clients, and community. The response to COVID-19 has affected many of us – family, friends, and business partners locally and around the world. When it came to virus detection, our major worry until recently has been cyber-related, and how it might affect our technology services. We now have a different virus challenge.</p><p>The COVID-19 outbreak is an unstable dynamic situation and has the potential to be incredibly impactful and disruptive to our organizations – corporate, non-profits, and governments alike. As the majority of our work force transitions to working remotely, bad actors and cyber attackers have ramped up their malicious efforts to create and spread more fear, uncertainty and doubt (FUD), in addition to stealing your information and company data.</p><p><strong>Attacks And Scams</strong></p><p>Right now hackers and bad actors are targeting a variety of our essential services for living and working including:</p><ul><li>Banks, Credits Cards, Gift Cards and most sources of Money</li><li>Grocery Stores, Restaurants, and Food Delivery Services</li><li>Doctors, Hospitals and Pharmacists (Medicines)</li><li>Online Movie Services, Podcasts and other Entertainment</li><li>Pandemic Information Updates and Government Websites, and more</li></ul><p>They want your credentials, login IDs and credit card numbers to steal your personal information, money and company data. They are doing this using easily available tools – social media platforms, devices, apps, texting, instant messaging, emails – and anything else that can get a malicious link to you.</p><p>Cyber attackers do this through:</p><ul><li>fake emails – phishing scams</li><li>fake voice mails – vishing</li><li>fake ads and coupons</li><li>fake websites and landing pages</li><li>fake direct SMS texts to your phone</li><li>fake videos and images on social media</li><li>fake PDFs and documents</li><li>fake authority communications</li></ul><p>The bad actors offer:</p><ul><li>fake COVID-19 and pandemic info</li><li>fake financial aid and loans</li><li>fake grocery and food delivery sites</li><li>fake medicines and pharmacists</li><li>fake online doctors and medical tests</li><li>fake bank sites, fake credit card sites</li><li>fake movie and entertainment</li><li>fake unemployment sites</li><li>fake government sites</li></ul><p>When you use these services, it is best to type in the URL (website address) manually instead of following a click-through search, ad or delivered link. The malicious URLs are propagated using a variety of means including domain names only one character off, through embedded attachments, or even landing on a web page.</p><p><strong>Eight (8) DO’s and DON’T’s</strong></p><ol><li><strong>Use Secure VPN.</strong> Always use your secure VPN on your devices. This ensures you have a secure encrypted communication ‘tunnel’ while working. Bad actors can monitor your traffic. Public wi-fi hotspots should be avoided.</li><li><strong>Don’t Mix Devices.</strong> Conduct business on corporate devices to ensure cybersecurity hygiene for your corporate and client data.</li><li><strong>Regular Sign On.</strong> Ensure you log onto your corporate network regularly to get the most recent updates. With the evolving cyber threats, new attacks are coming out daily.</li><li><strong>Use Multi-factor Authentication (MFA).</strong> Enable and use your multi-factor authentication credentials. MFA adds an essential layer of protection for your credentials.</li><li><strong>Don’t Share Passwords.</strong> Even at home, don’t share your passwords. In addition, please don’t write down credentials and passwords on paper, sticky pads or other mediums where they can be seen or retrieved.</li><li><strong>Don’t Click Through.</strong> If it seems suspicious, don’t click through. Type in the URL or web address manually. Report it to your IT support if possible. Do NOT forward or send the malicious content.</li><li><strong>Verify If In Doubt.</strong> If you have a request from your supervisor, co-worker or subordinate for information or money that appears suspicious – STOP. Pick up the phone or use other safe means to verify the request. Business Email Compromise (BEC) is fast on the rise.</li><li><strong>Avoid New Apps.</strong> Hackers and scammers have flooded app stores with mobile apps (and websites) faking a variety of our essential services – banking, food delivery, government, entertainment. Be careful, be mindful.</li></ol><p><strong>Actionable Take-Aways During the Covid-19 Outbreak Leading Through This Crisis</strong></p><ol><li><strong>Clear and Frequent Communication:</strong><br>Lack of data creates a vacuum leading to ill-informed decisions, and unease throughout your organization. Ensure you and your peers communicate clearly and frequently with messaging that provides directed guidance and actionable take-aways.</li><li><strong>A Single Source of Truth:</strong><br>Avoid multiple sources and channels of information. Create a single portal that works for your organization – an app, a website, a hotline. Leverage existing data and risk assessments to support better decision making, enable transparency and communicate progress efficiently and effectively with employees, staff, and others.</li><li><strong>Provide Collaboration Tools:</strong><br>Whether you have established remote working capabilities or not, you need to provide secure solutions for your organization. Determine how your organization works and provide the necessary platforms identifying critical use cases. This includes general communications and secure access to instant messaging, file sharing, enterprise applications, and other systems of engagement.</li><li><strong>Cybersecurity Safety:</strong><br>Cyber aggressors are taking advantage of this global crisis by sending malicious emails and perpetrating other scams.</li></ol>','','full_html'),('featured_article',0,48,843,'en',0,'<p><strong>Remote Tele-work &amp; Cyber Safety</strong></p><p>As business leaders, our priority and paramount concern is the health and safety of our employees, staff, contractors, customers, clients, and community. The response to COVID-19 has affected many of us – family, friends, and business partners locally and around the world. When it came to virus detection, our major worry until recently has been cyber-related, and how it might affect our technology services. We now have a different virus challenge.</p><p>The COVID-19 outbreak is an unstable dynamic situation and has the potential to be incredibly impactful and disruptive to our organizations – corporate, non-profits, and governments alike. As the majority of our work force transitions to working remotely, bad actors and cyber attackers have ramped up their malicious efforts to create and spread more fear, uncertainty and doubt (FUD), in addition to stealing your information and company data.</p><p><strong>Attacks And Scams</strong></p><p>Right now hackers and bad actors are targeting a variety of our essential services for living and working including:</p><ul><li>Banks, Credits Cards, Gift Cards and most sources of Money</li><li>Grocery Stores, Restaurants, and Food Delivery Services</li><li>Doctors, Hospitals and Pharmacists (Medicines)</li><li>Online Movie Services, Podcasts and other Entertainment</li><li>Pandemic Information Updates and Government Websites, and more</li></ul><p>They want your credentials, login IDs and credit card numbers to steal your personal information, money and company data. They are doing this using easily available tools – social media platforms, devices, apps, texting, instant messaging, emails – and anything else that can get a malicious link to you.</p><p>Cyber attackers do this through:</p><ul><li>fake emails – phishing scams</li><li>fake voice mails – vishing</li><li>fake ads and coupons</li><li>fake websites and landing pages</li><li>fake direct SMS texts to your phone</li><li>fake videos and images on social media</li><li>fake PDFs and documents</li><li>fake authority communications</li></ul><p>The bad actors offer:</p><ul><li>fake COVID-19 and pandemic info</li><li>fake financial aid and loans</li><li>fake grocery and food delivery sites</li><li>fake medicines and pharmacists</li><li>fake online doctors and medical tests</li><li>fake bank sites, fake credit card sites</li><li>fake movie and entertainment</li><li>fake unemployment sites</li><li>fake government sites</li></ul><p>When you use these services, it is best to type in the URL (website address) manually instead of following a click-through search, ad or delivered link. The malicious URLs are propagated using a variety of means including domain names only one character off, through embedded attachments, or even landing on a web page.</p><p><strong>Eight (8) DO’s and DON’T’s</strong></p><ol><li><strong>Use Secure VPN.</strong> Always use your secure VPN on your devices. This ensures you have a secure encrypted communication ‘tunnel’ while working. Bad actors can monitor your traffic. Public wi-fi hotspots should be avoided.</li><li><strong>Don’t Mix Devices.</strong> Conduct business on corporate devices to ensure cybersecurity hygiene for your corporate and client data.</li><li><strong>Regular Sign On.</strong> Ensure you log onto your corporate network regularly to get the most recent updates. With the evolving cyber threats, new attacks are coming out daily.</li><li><strong>Use Multi-factor Authentication (MFA).</strong> Enable and use your multi-factor authentication credentials. MFA adds an essential layer of protection for your credentials.</li><li><strong>Don’t Share Passwords.</strong> Even at home, don’t share your passwords. In addition, please don’t write down credentials and passwords on paper, sticky pads or other mediums where they can be seen or retrieved.</li><li><strong>Don’t Click Through.</strong> If it seems suspicious, don’t click through. Type in the URL or web address manually. Report it to your IT support if possible. Do NOT forward or send the malicious content.</li><li><strong>Verify If In Doubt.</strong> If you have a request from your supervisor, co-worker or subordinate for information or money that appears suspicious – STOP. Pick up the phone or use other safe means to verify the request. Business Email Compromise (BEC) is fast on the rise.</li><li><strong>Avoid New Apps.</strong> Hackers and scammers have flooded app stores with mobile apps (and websites) faking a variety of our essential services – banking, food delivery, government, entertainment. Be careful, be mindful.</li></ol><p><strong>Actionable Take-Aways During the Covid-19 Outbreak Leading Through This Crisis</strong></p><ol><li><strong>Clear and Frequent Communication:</strong><br>Lack of data creates a vacuum leading to ill-informed decisions, and unease throughout your organization. Ensure you and your peers communicate clearly and frequently with messaging that provides directed guidance and actionable take-aways.</li><li><strong>A Single Source of Truth:</strong><br>Avoid multiple sources and channels of information. Create a single portal that works for your organization – an app, a website, a hotline. Leverage existing data and risk assessments to support better decision making, enable transparency and communicate progress efficiently and effectively with employees, staff, and others.</li><li><strong>Provide Collaboration Tools:</strong><br>Whether you have established remote working capabilities or not, you need to provide secure solutions for your organization. Determine how your organization works and provide the necessary platforms identifying critical use cases. This includes general communications and secure access to instant messaging, file sharing, enterprise applications, and other systems of engagement.</li><li><strong>Cybersecurity Safety:</strong><br>Cyber aggressors are taking advantage of this global crisis by sending malicious emails and perpetrating other scams.</li></ol>','','full_html'),('featured_article',0,48,846,'en',0,'<p><strong>Remote Tele-work &amp; Cyber Safety</strong></p><p>As business leaders, our priority and paramount concern is the health and safety of our employees, staff, contractors, customers, clients, and community. The response to COVID-19 has affected many of us – family, friends, and business partners locally and around the world. When it came to virus detection, our major worry until recently has been cyber-related, and how it might affect our technology services. We now have a different virus challenge.</p><p>The COVID-19 outbreak is an unstable dynamic situation and has the potential to be incredibly impactful and disruptive to our organizations – corporate, non-profits, and governments alike. As the majority of our work force transitions to working remotely, bad actors and cyber attackers have ramped up their malicious efforts to create and spread more fear, uncertainty and doubt (FUD), in addition to stealing your information and company data.</p><p><strong>Attacks And Scams</strong></p><p>Right now hackers and bad actors are targeting a variety of our essential services for living and working including:</p><ul><li>Banks, Credits Cards, Gift Cards and most sources of Money</li><li>Grocery Stores, Restaurants, and Food Delivery Services</li><li>Doctors, Hospitals and Pharmacists (Medicines)</li><li>Online Movie Services, Podcasts and other Entertainment</li><li>Pandemic Information Updates and Government Websites, and more</li></ul><p>They want your credentials, login IDs and credit card numbers to steal your personal information, money and company data. They are doing this using easily available tools – social media platforms, devices, apps, texting, instant messaging, emails – and anything else that can get a malicious link to you.</p><p>Cyber attackers do this through:</p><ul><li>fake emails – phishing scams</li><li>fake voice mails – vishing</li><li>fake ads and coupons</li><li>fake websites and landing pages</li><li>fake direct SMS texts to your phone</li><li>fake videos and images on social media</li><li>fake PDFs and documents</li><li>fake authority communications</li></ul><p>The bad actors offer:</p><ul><li>fake COVID-19 and pandemic info</li><li>fake financial aid and loans</li><li>fake grocery and food delivery sites</li><li>fake medicines and pharmacists</li><li>fake online doctors and medical tests</li><li>fake bank sites, fake credit card sites</li><li>fake movie and entertainment</li><li>fake unemployment sites</li><li>fake government sites</li></ul><p>When you use these services, it is best to type in the URL (website address) manually instead of following a click-through search, ad or delivered link. The malicious URLs are propagated using a variety of means including domain names only one character off, through embedded attachments, or even landing on a web page.</p><p><strong>Eight (8) DO’s and DON’T’s</strong></p><ol><li><strong>Use Secure VPN.</strong> Always use your secure VPN on your devices. This ensures you have a secure encrypted communication ‘tunnel’ while working. Bad actors can monitor your traffic. Public wi-fi hotspots should be avoided.</li><li><strong>Don’t Mix Devices.</strong> Conduct business on corporate devices to ensure cybersecurity hygiene for your corporate and client data.</li><li><strong>Regular Sign On.</strong> Ensure you log onto your corporate network regularly to get the most recent updates. With the evolving cyber threats, new attacks are coming out daily.</li><li><strong>Use Multi-factor Authentication (MFA).</strong> Enable and use your multi-factor authentication credentials. MFA adds an essential layer of protection for your credentials.</li><li><strong>Don’t Share Passwords.</strong> Even at home, don’t share your passwords. In addition, please don’t write down credentials and passwords on paper, sticky pads or other mediums where they can be seen or retrieved.</li><li><strong>Don’t Click Through.</strong> If it seems suspicious, don’t click through. Type in the URL or web address manually. Report it to your IT support if possible. Do NOT forward or send the malicious content.</li><li><strong>Verify If In Doubt.</strong> If you have a request from your supervisor, co-worker or subordinate for information or money that appears suspicious – STOP. Pick up the phone or use other safe means to verify the request. Business Email Compromise (BEC) is fast on the rise.</li><li><strong>Avoid New Apps.</strong> Hackers and scammers have flooded app stores with mobile apps (and websites) faking a variety of our essential services – banking, food delivery, government, entertainment. Be careful, be mindful.</li></ol><p><strong>Actionable Take-Aways During the Covid-19 Outbreak Leading Through This Crisis</strong></p><ol><li><strong>Clear and Frequent Communication:</strong><br>Lack of data creates a vacuum leading to ill-informed decisions, and unease throughout your organization. Ensure you and your peers communicate clearly and frequently with messaging that provides directed guidance and actionable take-aways.</li><li><strong>A Single Source of Truth:</strong><br>Avoid multiple sources and channels of information. Create a single portal that works for your organization – an app, a website, a hotline. Leverage existing data and risk assessments to support better decision making, enable transparency and communicate progress efficiently and effectively with employees, staff, and others.</li><li><strong>Provide Collaboration Tools:</strong><br>Whether you have established remote working capabilities or not, you need to provide secure solutions for your organization. Determine how your organization works and provide the necessary platforms identifying critical use cases. This includes general communications and secure access to instant messaging, file sharing, enterprise applications, and other systems of engagement.</li><li><strong>Cybersecurity Safety:</strong><br>Cyber aggressors are taking advantage of this global crisis by sending malicious emails and perpetrating other scams.</li></ol>','','full_html'),('featured_article',0,49,96,'en',0,'<p>Can security awareness training change behavior and reduce cyber risk?CIOs and CISOs realize human error is perhaps the biggest weakness in any information security program. Attacks are becoming more frequent. Five industries — health care, manufacturing, financial services, transportation, and government — have been ranked as the most frequently attacked sectors in the world.</p><p>While many large enterprises have mature employee training programs, incomplete employee training remains the main reason organizations are left vulnerable to phishing attacks — this is the conclusion of Proofpoint’s fourth annual 2019 Beyond the Phish report.</p><p>Here are four cybersecurity threats organizations should focus on during employee awareness training programs:</p><p><strong>TOP FOUR (4) SECURITY THREAT TOPICS FOR AWARENESS TRAINING</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Threats</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n</style><ol><li><strong>Phishing:</strong> At the enterprise level, many organizations struggle because it is a complicated issue. Employees need to be trained to be skeptical about essentially everything. Only those links that have been received from known senders should be clicked upon; however, even that can be difficult to discern.</li><li><strong>Unauthorized Application Installation/Usage:</strong> Another common security threat is posed by the installation of unauthorized applications. This can be addressed by revoking administrative access for corporate devices and for most employees. A training session explaining the importance of third-party credibility and authenticity can be enough to make employees aware of the threats posed by the installation of unauthorized applications.</li><li><strong>Password Practices:</strong> Guessing passwords is the easiest way of breaking into a system and has typically been the first trick up a hacker’s sleeve. Often times default passwords for hardware and systems are not changed. Another practice that elevates risk is using the same password for different applications. This can be addressed by spreading awareness about changing passwords and using strong passwords and the part they play in keeping the hackers at bay. Modern-day application systems won’t accept user passwords that don’t meet minimal complex security requirements.</li><li><strong>Data Leakage:</strong> Data Leakage can have serious consequences. Employees often transfer files between their personal computers and their corporate workstations or allow their family members to use their corporate devices at home, and this can create some security loopholes. Address this issue through enforcement of a company-wide policy prohibiting the transfer of data from corporate devices to personal ones. Software can be installed to address Data Loss Prevention (DLP).</li></ol><p>Even the most rigorously “secure” infrastructures can get compromised. The threats listed above are some of the most common human vulnerabilities and it is of vital importance that precautionary awareness regarding them be made widespread.</p><p><strong>SIX (6) CRITICAL COMPONENTS OF A SECURITY AWARENESS PROGRAM</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Awareness Program Components</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n    ol {\r\n        margin-left: 20px;\r\n    }\r\n</style><ol><li><strong>Content:</strong> Ensure you develop a program that employs multi-media content. Users learn from a variety of means at different levels and different paces. Utilizing a platform that allows delivery of a wide variety of content, including gamification, will help spread awareness of the program faster. You can also match different content types to different roles in your organization.</li><li><strong>Executive Support &amp; Planning:</strong> Ensure you have support from the top of the organization down. Security awareness programs require strong “tone-at-top.” Ensure you have a strategy and plan documented. Involve and communicate with your sponsor and stakeholders on a regular basis.</li><li><strong>Campaign Support Materials:</strong> A successful program should not be ‘one and done’; treat it as a marketing endeavor. Vary the content and materials to keep users engaged and active.</li><li><strong>Testing:</strong> Phishing simulations prompt users to either click a link, report the phish, or do nothing. You want to give them an opportunity to report phishing attempts and help the organization increase resilience. If they do fall for the phish, it is recommended you implement remediation follow-up training. Doing nothing is not ideal as it leaves the potential threat out there and increases risk for others in the organization.</li><li><strong>Metrics &amp; Reporting:</strong> Keep your sponsor and stakeholders apprised of the progress of the security awareness training program. You need to be able to demonstrate progress. Reporting is also useful for optimizing campaigns based on past results. You want to be able to see what is working well and what can be improved upon.</li><li><strong>Surveys/Assessments:</strong> These tools can help you understand the attitudes of your organization and how well your program is resonating with your people so you can adapt. Think of it as a pulse check of subtle nuances that are different from metrics/reporting, such as opinions, frame of mind, etc.</li></ol><p><strong>SUMMARY</strong></p><p>Effective education is imperative as cybercriminals continue targeting individuals, making a people-centric security approach essential. Use security awareness training software that provides testing. The phish testing software should provide performance reports so that you can measure improvements in employee behavior as training progresses.</p>','','full_html'),('featured_article',0,49,129,'en',0,'<p>Can security awareness training change behavior and reduce cyber risk?CIOs and CISOs realize human error is perhaps the biggest weakness in any information security program. Attacks are becoming more frequent. Five industries — health care, manufacturing, financial services, transportation, and government — have been ranked as the most frequently attacked sectors in the world.</p><p>While many large enterprises have mature employee training programs, incomplete employee training remains the main reason organizations are left vulnerable to phishing attacks — this is the conclusion of Proofpoint’s fourth annual 2019 Beyond the Phish report.</p><p>Here are four cybersecurity threats organizations should focus on during employee awareness training programs:</p><p><strong>TOP FOUR (4) SECURITY THREAT TOPICS FOR AWARENESS TRAINING</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Threats</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n</style><ol><li><strong>Phishing:</strong> At the enterprise level, many organizations struggle because it is a complicated issue. Employees need to be trained to be skeptical about essentially everything. Only those links that have been received from known senders should be clicked upon; however, even that can be difficult to discern.</li><li><strong>Unauthorized Application Installation/Usage:</strong> Another common security threat is posed by the installation of unauthorized applications. This can be addressed by revoking administrative access for corporate devices and for most employees. A training session explaining the importance of third-party credibility and authenticity can be enough to make employees aware of the threats posed by the installation of unauthorized applications.</li><li><strong>Password Practices:</strong> Guessing passwords is the easiest way of breaking into a system and has typically been the first trick up a hacker’s sleeve. Often times default passwords for hardware and systems are not changed. Another practice that elevates risk is using the same password for different applications. This can be addressed by spreading awareness about changing passwords and using strong passwords and the part they play in keeping the hackers at bay. Modern-day application systems won’t accept user passwords that don’t meet minimal complex security requirements.</li><li><strong>Data Leakage:</strong> Data Leakage can have serious consequences. Employees often transfer files between their personal computers and their corporate workstations or allow their family members to use their corporate devices at home, and this can create some security loopholes. Address this issue through enforcement of a company-wide policy prohibiting the transfer of data from corporate devices to personal ones. Software can be installed to address Data Loss Prevention (DLP).</li></ol><p>Even the most rigorously “secure” infrastructures can get compromised. The threats listed above are some of the most common human vulnerabilities and it is of vital importance that precautionary awareness regarding them be made widespread.</p><p><strong>SIX (6) CRITICAL COMPONENTS OF A SECURITY AWARENESS PROGRAM</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Awareness Program Components</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n    ol {\r\n        margin-left: 20px;\r\n    }\r\n</style><ol><li><strong>Content:</strong> Ensure you develop a program that employs multi-media content. Users learn from a variety of means at different levels and different paces. Utilizing a platform that allows delivery of a wide variety of content, including gamification, will help spread awareness of the program faster. You can also match different content types to different roles in your organization.</li><li><strong>Executive Support &amp; Planning:</strong> Ensure you have support from the top of the organization down. Security awareness programs require strong “tone-at-top.” Ensure you have a strategy and plan documented. Involve and communicate with your sponsor and stakeholders on a regular basis.</li><li><strong>Campaign Support Materials:</strong> A successful program should not be ‘one and done’; treat it as a marketing endeavor. Vary the content and materials to keep users engaged and active.</li><li><strong>Testing:</strong> Phishing simulations prompt users to either click a link, report the phish, or do nothing. You want to give them an opportunity to report phishing attempts and help the organization increase resilience. If they do fall for the phish, it is recommended you implement remediation follow-up training. Doing nothing is not ideal as it leaves the potential threat out there and increases risk for others in the organization.</li><li><strong>Metrics &amp; Reporting:</strong> Keep your sponsor and stakeholders apprised of the progress of the security awareness training program. You need to be able to demonstrate progress. Reporting is also useful for optimizing campaigns based on past results. You want to be able to see what is working well and what can be improved upon.</li><li><strong>Surveys/Assessments:</strong> These tools can help you understand the attitudes of your organization and how well your program is resonating with your people so you can adapt. Think of it as a pulse check of subtle nuances that are different from metrics/reporting, such as opinions, frame of mind, etc.</li></ol><p><strong>SUMMARY</strong></p><p>Effective education is imperative as cybercriminals continue targeting individuals, making a people-centric security approach essential. Use security awareness training software that provides testing. The phish testing software should provide performance reports so that you can measure improvements in employee behavior as training progresses.</p>','','full_html'),('featured_article',0,49,271,'en',0,'<p>Can security awareness training change behavior and reduce cyber risk?CIOs and CISOs realize human error is perhaps the biggest weakness in any information security program. Attacks are becoming more frequent. Five industries — health care, manufacturing, financial services, transportation, and government — have been ranked as the most frequently attacked sectors in the world.</p><p>While many large enterprises have mature employee training programs, incomplete employee training remains the main reason organizations are left vulnerable to phishing attacks — this is the conclusion of Proofpoint’s fourth annual 2019 Beyond the Phish report.</p><p>Here are four cybersecurity threats organizations should focus on during employee awareness training programs:</p><p><strong>TOP FOUR (4) SECURITY THREAT TOPICS FOR AWARENESS TRAINING</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Threats</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n</style><ol><li><strong>Phishing:</strong> At the enterprise level, many organizations struggle because it is a complicated issue. Employees need to be trained to be skeptical about essentially everything. Only those links that have been received from known senders should be clicked upon; however, even that can be difficult to discern.</li><li><strong>Unauthorized Application Installation/Usage:</strong> Another common security threat is posed by the installation of unauthorized applications. This can be addressed by revoking administrative access for corporate devices and for most employees. A training session explaining the importance of third-party credibility and authenticity can be enough to make employees aware of the threats posed by the installation of unauthorized applications.</li><li><strong>Password Practices:</strong> Guessing passwords is the easiest way of breaking into a system and has typically been the first trick up a hacker’s sleeve. Often times default passwords for hardware and systems are not changed. Another practice that elevates risk is using the same password for different applications. This can be addressed by spreading awareness about changing passwords and using strong passwords and the part they play in keeping the hackers at bay. Modern-day application systems won’t accept user passwords that don’t meet minimal complex security requirements.</li><li><strong>Data Leakage:</strong> Data Leakage can have serious consequences. Employees often transfer files between their personal computers and their corporate workstations or allow their family members to use their corporate devices at home, and this can create some security loopholes. Address this issue through enforcement of a company-wide policy prohibiting the transfer of data from corporate devices to personal ones. Software can be installed to address Data Loss Prevention (DLP).</li></ol><p>Even the most rigorously “secure” infrastructures can get compromised. The threats listed above are some of the most common human vulnerabilities and it is of vital importance that precautionary awareness regarding them be made widespread.</p><p><strong>SIX (6) CRITICAL COMPONENTS OF A SECURITY AWARENESS PROGRAM</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Awareness Program Components</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n    ol {\r\n        margin-left: 20px;\r\n    }\r\n</style><ol><li><strong>Content:</strong> Ensure you develop a program that employs multi-media content. Users learn from a variety of means at different levels and different paces. Utilizing a platform that allows delivery of a wide variety of content, including gamification, will help spread awareness of the program faster. You can also match different content types to different roles in your organization.</li><li><strong>Executive Support &amp; Planning:</strong> Ensure you have support from the top of the organization down. Security awareness programs require strong “tone-at-top.” Ensure you have a strategy and plan documented. Involve and communicate with your sponsor and stakeholders on a regular basis.</li><li><strong>Campaign Support Materials:</strong> A successful program should not be ‘one and done’; treat it as a marketing endeavor. Vary the content and materials to keep users engaged and active.</li><li><strong>Testing:</strong> Phishing simulations prompt users to either click a link, report the phish, or do nothing. You want to give them an opportunity to report phishing attempts and help the organization increase resilience. If they do fall for the phish, it is recommended you implement remediation follow-up training. Doing nothing is not ideal as it leaves the potential threat out there and increases risk for others in the organization.</li><li><strong>Metrics &amp; Reporting:</strong> Keep your sponsor and stakeholders apprised of the progress of the security awareness training program. You need to be able to demonstrate progress. Reporting is also useful for optimizing campaigns based on past results. You want to be able to see what is working well and what can be improved upon.</li><li><strong>Surveys/Assessments:</strong> These tools can help you understand the attitudes of your organization and how well your program is resonating with your people so you can adapt. Think of it as a pulse check of subtle nuances that are different from metrics/reporting, such as opinions, frame of mind, etc.</li></ol><p><strong>SUMMARY</strong></p><p>Effective education is imperative as cybercriminals continue targeting individuals, making a people-centric security approach essential. Use security awareness training software that provides testing. The phish testing software should provide performance reports so that you can measure improvements in employee behavior as training progresses.</p>','','full_html'),('featured_article',0,49,451,'en',0,'<p>Can security awareness training change behavior and reduce cyber risk?CIOs and CISOs realize human error is perhaps the biggest weakness in any information security program. Attacks are becoming more frequent. Five industries — health care, manufacturing, financial services, transportation, and government — have been ranked as the most frequently attacked sectors in the world.</p><p>While many large enterprises have mature employee training programs, incomplete employee training remains the main reason organizations are left vulnerable to phishing attacks — this is the conclusion of Proofpoint’s fourth annual 2019 Beyond the Phish report.</p><p>Here are four cybersecurity threats organizations should focus on during employee awareness training programs:</p><p><strong>TOP FOUR (4) SECURITY THREAT TOPICS FOR AWARENESS TRAINING</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Threats</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n</style><ol><li><strong>Phishing:</strong> At the enterprise level, many organizations struggle because it is a complicated issue. Employees need to be trained to be skeptical about essentially everything. Only those links that have been received from known senders should be clicked upon; however, even that can be difficult to discern.</li><li><strong>Unauthorized Application Installation/Usage:</strong> Another common security threat is posed by the installation of unauthorized applications. This can be addressed by revoking administrative access for corporate devices and for most employees. A training session explaining the importance of third-party credibility and authenticity can be enough to make employees aware of the threats posed by the installation of unauthorized applications.</li><li><strong>Password Practices:</strong> Guessing passwords is the easiest way of breaking into a system and has typically been the first trick up a hacker’s sleeve. Often times default passwords for hardware and systems are not changed. Another practice that elevates risk is using the same password for different applications. This can be addressed by spreading awareness about changing passwords and using strong passwords and the part they play in keeping the hackers at bay. Modern-day application systems won’t accept user passwords that don’t meet minimal complex security requirements.</li><li><strong>Data Leakage:</strong> Data Leakage can have serious consequences. Employees often transfer files between their personal computers and their corporate workstations or allow their family members to use their corporate devices at home, and this can create some security loopholes. Address this issue through enforcement of a company-wide policy prohibiting the transfer of data from corporate devices to personal ones. Software can be installed to address Data Loss Prevention (DLP).</li></ol><p>Even the most rigorously “secure” infrastructures can get compromised. The threats listed above are some of the most common human vulnerabilities and it is of vital importance that precautionary awareness regarding them be made widespread.</p><p><strong>SIX (6) CRITICAL COMPONENTS OF A SECURITY AWARENESS PROGRAM</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Awareness Program Components</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n    ol {\r\n        margin-left: 20px;\r\n    }\r\n</style><ol><li><strong>Content:</strong> Ensure you develop a program that employs multi-media content. Users learn from a variety of means at different levels and different paces. Utilizing a platform that allows delivery of a wide variety of content, including gamification, will help spread awareness of the program faster. You can also match different content types to different roles in your organization.</li><li><strong>Executive Support &amp; Planning:</strong> Ensure you have support from the top of the organization down. Security awareness programs require strong “tone-at-top.” Ensure you have a strategy and plan documented. Involve and communicate with your sponsor and stakeholders on a regular basis.</li><li><strong>Campaign Support Materials:</strong> A successful program should not be ‘one and done’; treat it as a marketing endeavor. Vary the content and materials to keep users engaged and active.</li><li><strong>Testing:</strong> Phishing simulations prompt users to either click a link, report the phish, or do nothing. You want to give them an opportunity to report phishing attempts and help the organization increase resilience. If they do fall for the phish, it is recommended you implement remediation follow-up training. Doing nothing is not ideal as it leaves the potential threat out there and increases risk for others in the organization.</li><li><strong>Metrics &amp; Reporting:</strong> Keep your sponsor and stakeholders apprised of the progress of the security awareness training program. You need to be able to demonstrate progress. Reporting is also useful for optimizing campaigns based on past results. You want to be able to see what is working well and what can be improved upon.</li><li><strong>Surveys/Assessments:</strong> These tools can help you understand the attitudes of your organization and how well your program is resonating with your people so you can adapt. Think of it as a pulse check of subtle nuances that are different from metrics/reporting, such as opinions, frame of mind, etc.</li></ol><p><strong>SUMMARY</strong></p><p>Effective education is imperative as cybercriminals continue targeting individuals, making a people-centric security approach essential. Use security awareness training software that provides testing. The phish testing software should provide performance reports so that you can measure improvements in employee behavior as training progresses.</p>','','full_html'),('featured_article',0,49,518,'en',0,'<p>Can security awareness training change behavior and reduce cyber risk?CIOs and CISOs realize human error is perhaps the biggest weakness in any information security program. Attacks are becoming more frequent. Five industries — health care, manufacturing, financial services, transportation, and government — have been ranked as the most frequently attacked sectors in the world.</p><p>While many large enterprises have mature employee training programs, incomplete employee training remains the main reason organizations are left vulnerable to phishing attacks — this is the conclusion of Proofpoint’s fourth annual 2019 Beyond the Phish report.</p><p>Here are four cybersecurity threats organizations should focus on during employee awareness training programs:</p><p><strong>TOP FOUR (4) SECURITY THREAT TOPICS FOR AWARENESS TRAINING</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Threats</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n</style><ol><li><strong>Phishing:</strong> At the enterprise level, many organizations struggle because it is a complicated issue. Employees need to be trained to be skeptical about essentially everything. Only those links that have been received from known senders should be clicked upon; however, even that can be difficult to discern.</li><li><strong>Unauthorized Application Installation/Usage:</strong> Another common security threat is posed by the installation of unauthorized applications. This can be addressed by revoking administrative access for corporate devices and for most employees. A training session explaining the importance of third-party credibility and authenticity can be enough to make employees aware of the threats posed by the installation of unauthorized applications.</li><li><strong>Password Practices:</strong> Guessing passwords is the easiest way of breaking into a system and has typically been the first trick up a hacker’s sleeve. Often times default passwords for hardware and systems are not changed. Another practice that elevates risk is using the same password for different applications. This can be addressed by spreading awareness about changing passwords and using strong passwords and the part they play in keeping the hackers at bay. Modern-day application systems won’t accept user passwords that don’t meet minimal complex security requirements.</li><li><strong>Data Leakage:</strong> Data Leakage can have serious consequences. Employees often transfer files between their personal computers and their corporate workstations or allow their family members to use their corporate devices at home, and this can create some security loopholes. Address this issue through enforcement of a company-wide policy prohibiting the transfer of data from corporate devices to personal ones. Software can be installed to address Data Loss Prevention (DLP).</li></ol><p>Even the most rigorously “secure” infrastructures can get compromised. The threats listed above are some of the most common human vulnerabilities and it is of vital importance that precautionary awareness regarding them be made widespread.</p><p><strong>SIX (6) CRITICAL COMPONENTS OF A SECURITY AWARENESS PROGRAM</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Awareness Program Components</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n    ol {\r\n        margin-left: 20px;\r\n    }\r\n</style><ol><li><strong>Content:</strong> Ensure you develop a program that employs multi-media content. Users learn from a variety of means at different levels and different paces. Utilizing a platform that allows delivery of a wide variety of content, including gamification, will help spread awareness of the program faster. You can also match different content types to different roles in your organization.</li><li><strong>Executive Support &amp; Planning:</strong> Ensure you have support from the top of the organization down. Security awareness programs require strong “tone-at-top.” Ensure you have a strategy and plan documented. Involve and communicate with your sponsor and stakeholders on a regular basis.</li><li><strong>Campaign Support Materials:</strong> A successful program should not be ‘one and done’; treat it as a marketing endeavor. Vary the content and materials to keep users engaged and active.</li><li><strong>Testing:</strong> Phishing simulations prompt users to either click a link, report the phish, or do nothing. You want to give them an opportunity to report phishing attempts and help the organization increase resilience. If they do fall for the phish, it is recommended you implement remediation follow-up training. Doing nothing is not ideal as it leaves the potential threat out there and increases risk for others in the organization.</li><li><strong>Metrics &amp; Reporting:</strong> Keep your sponsor and stakeholders apprised of the progress of the security awareness training program. You need to be able to demonstrate progress. Reporting is also useful for optimizing campaigns based on past results. You want to be able to see what is working well and what can be improved upon.</li><li><strong>Surveys/Assessments:</strong> These tools can help you understand the attitudes of your organization and how well your program is resonating with your people so you can adapt. Think of it as a pulse check of subtle nuances that are different from metrics/reporting, such as opinions, frame of mind, etc.</li></ol><p><strong>SUMMARY</strong></p><p>Effective education is imperative as cybercriminals continue targeting individuals, making a people-centric security approach essential. Use security awareness training software that provides testing. The phish testing software should provide performance reports so that you can measure improvements in employee behavior as training progresses.</p>','','full_html'),('featured_article',0,49,534,'en',0,'<p>Can security awareness training change behavior and reduce cyber risk?CIOs and CISOs realize human error is perhaps the biggest weakness in any information security program. Attacks are becoming more frequent. Five industries — health care, manufacturing, financial services, transportation, and government — have been ranked as the most frequently attacked sectors in the world.</p><p>While many large enterprises have mature employee training programs, incomplete employee training remains the main reason organizations are left vulnerable to phishing attacks — this is the conclusion of Proofpoint’s fourth annual 2019 Beyond the Phish report.</p><p>Here are four cybersecurity threats organizations should focus on during employee awareness training programs:</p><p><strong>TOP FOUR (4) SECURITY THREAT TOPICS FOR AWARENESS TRAINING</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Threats</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n</style><ol><li><strong>Phishing:</strong> At the enterprise level, many organizations struggle because it is a complicated issue. Employees need to be trained to be skeptical about essentially everything. Only those links that have been received from known senders should be clicked upon; however, even that can be difficult to discern.</li><li><strong>Unauthorized Application Installation/Usage:</strong> Another common security threat is posed by the installation of unauthorized applications. This can be addressed by revoking administrative access for corporate devices and for most employees. A training session explaining the importance of third-party credibility and authenticity can be enough to make employees aware of the threats posed by the installation of unauthorized applications.</li><li><strong>Password Practices:</strong> Guessing passwords is the easiest way of breaking into a system and has typically been the first trick up a hacker’s sleeve. Often times default passwords for hardware and systems are not changed. Another practice that elevates risk is using the same password for different applications. This can be addressed by spreading awareness about changing passwords and using strong passwords and the part they play in keeping the hackers at bay. Modern-day application systems won’t accept user passwords that don’t meet minimal complex security requirements.</li><li><strong>Data Leakage:</strong> Data Leakage can have serious consequences. Employees often transfer files between their personal computers and their corporate workstations or allow their family members to use their corporate devices at home, and this can create some security loopholes. Address this issue through enforcement of a company-wide policy prohibiting the transfer of data from corporate devices to personal ones. Software can be installed to address Data Loss Prevention (DLP).</li></ol><p>Even the most rigorously “secure” infrastructures can get compromised. The threats listed above are some of the most common human vulnerabilities and it is of vital importance that precautionary awareness regarding them be made widespread.</p><p><strong>SIX (6) CRITICAL COMPONENTS OF A SECURITY AWARENESS PROGRAM</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Awareness Program Components</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n    ol {\r\n        margin-left: 20px;\r\n    }\r\n</style><ol><li><strong>Content:</strong> Ensure you develop a program that employs multi-media content. Users learn from a variety of means at different levels and different paces. Utilizing a platform that allows delivery of a wide variety of content, including gamification, will help spread awareness of the program faster. You can also match different content types to different roles in your organization.</li><li><strong>Executive Support &amp; Planning:</strong> Ensure you have support from the top of the organization down. Security awareness programs require strong “tone-at-top.” Ensure you have a strategy and plan documented. Involve and communicate with your sponsor and stakeholders on a regular basis.</li><li><strong>Campaign Support Materials:</strong> A successful program should not be ‘one and done’; treat it as a marketing endeavor. Vary the content and materials to keep users engaged and active.</li><li><strong>Testing:</strong> Phishing simulations prompt users to either click a link, report the phish, or do nothing. You want to give them an opportunity to report phishing attempts and help the organization increase resilience. If they do fall for the phish, it is recommended you implement remediation follow-up training. Doing nothing is not ideal as it leaves the potential threat out there and increases risk for others in the organization.</li><li><strong>Metrics &amp; Reporting:</strong> Keep your sponsor and stakeholders apprised of the progress of the security awareness training program. You need to be able to demonstrate progress. Reporting is also useful for optimizing campaigns based on past results. You want to be able to see what is working well and what can be improved upon.</li><li><strong>Surveys/Assessments:</strong> These tools can help you understand the attitudes of your organization and how well your program is resonating with your people so you can adapt. Think of it as a pulse check of subtle nuances that are different from metrics/reporting, such as opinions, frame of mind, etc.</li></ol><p><strong>SUMMARY</strong></p><p>Effective education is imperative as cybercriminals continue targeting individuals, making a people-centric security approach essential. Use security awareness training software that provides testing. The phish testing software should provide performance reports so that you can measure improvements in employee behavior as training progresses.</p>','','full_html'),('featured_article',0,49,609,'en',0,'<p>Can security awareness training change behavior and reduce cyber risk?CIOs and CISOs realize human error is perhaps the biggest weakness in any information security program. Attacks are becoming more frequent. Five industries — health care, manufacturing, financial services, transportation, and government — have been ranked as the most frequently attacked sectors in the world.</p><p>While many large enterprises have mature employee training programs, incomplete employee training remains the main reason organizations are left vulnerable to phishing attacks — this is the conclusion of Proofpoint’s fourth annual 2019 Beyond the Phish report.</p><p>Here are four cybersecurity threats organizations should focus on during employee awareness training programs:</p><p><strong>TOP FOUR (4) SECURITY THREAT TOPICS FOR AWARENESS TRAINING</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Threats</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n</style><ol><li><strong>Phishing:</strong> At the enterprise level, many organizations struggle because it is a complicated issue. Employees need to be trained to be skeptical about essentially everything. Only those links that have been received from known senders should be clicked upon; however, even that can be difficult to discern.</li><li><strong>Unauthorized Application Installation/Usage:</strong> Another common security threat is posed by the installation of unauthorized applications. This can be addressed by revoking administrative access for corporate devices and for most employees. A training session explaining the importance of third-party credibility and authenticity can be enough to make employees aware of the threats posed by the installation of unauthorized applications.</li><li><strong>Password Practices:</strong> Guessing passwords is the easiest way of breaking into a system and has typically been the first trick up a hacker’s sleeve. Often times default passwords for hardware and systems are not changed. Another practice that elevates risk is using the same password for different applications. This can be addressed by spreading awareness about changing passwords and using strong passwords and the part they play in keeping the hackers at bay. Modern-day application systems won’t accept user passwords that don’t meet minimal complex security requirements.</li><li><strong>Data Leakage:</strong> Data Leakage can have serious consequences. Employees often transfer files between their personal computers and their corporate workstations or allow their family members to use their corporate devices at home, and this can create some security loopholes. Address this issue through enforcement of a company-wide policy prohibiting the transfer of data from corporate devices to personal ones. Software can be installed to address Data Loss Prevention (DLP).</li></ol><p>Even the most rigorously “secure” infrastructures can get compromised. The threats listed above are some of the most common human vulnerabilities and it is of vital importance that precautionary awareness regarding them be made widespread.</p><p><strong>SIX (6) CRITICAL COMPONENTS OF A SECURITY AWARENESS PROGRAM</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Awareness Program Components</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n    ol {\r\n        margin-left: 20px;\r\n    }\r\n</style><ol><li><strong>Content:</strong> Ensure you develop a program that employs multi-media content. Users learn from a variety of means at different levels and different paces. Utilizing a platform that allows delivery of a wide variety of content, including gamification, will help spread awareness of the program faster. You can also match different content types to different roles in your organization.</li><li><strong>Executive Support &amp; Planning:</strong> Ensure you have support from the top of the organization down. Security awareness programs require strong “tone-at-top.” Ensure you have a strategy and plan documented. Involve and communicate with your sponsor and stakeholders on a regular basis.</li><li><strong>Campaign Support Materials:</strong> A successful program should not be ‘one and done’; treat it as a marketing endeavor. Vary the content and materials to keep users engaged and active.</li><li><strong>Testing:</strong> Phishing simulations prompt users to either click a link, report the phish, or do nothing. You want to give them an opportunity to report phishing attempts and help the organization increase resilience. If they do fall for the phish, it is recommended you implement remediation follow-up training. Doing nothing is not ideal as it leaves the potential threat out there and increases risk for others in the organization.</li><li><strong>Metrics &amp; Reporting:</strong> Keep your sponsor and stakeholders apprised of the progress of the security awareness training program. You need to be able to demonstrate progress. Reporting is also useful for optimizing campaigns based on past results. You want to be able to see what is working well and what can be improved upon.</li><li><strong>Surveys/Assessments:</strong> These tools can help you understand the attitudes of your organization and how well your program is resonating with your people so you can adapt. Think of it as a pulse check of subtle nuances that are different from metrics/reporting, such as opinions, frame of mind, etc.</li></ol><p><strong>SUMMARY</strong></p><p>Effective education is imperative as cybercriminals continue targeting individuals, making a people-centric security approach essential. Use security awareness training software that provides testing. The phish testing software should provide performance reports so that you can measure improvements in employee behavior as training progresses.</p>','','full_html'),('featured_article',0,49,844,'en',0,'<p>Can security awareness training change behavior and reduce cyber risk?CIOs and CISOs realize human error is perhaps the biggest weakness in any information security program. Attacks are becoming more frequent. Five industries — health care, manufacturing, financial services, transportation, and government — have been ranked as the most frequently attacked sectors in the world.</p><p>While many large enterprises have mature employee training programs, incomplete employee training remains the main reason organizations are left vulnerable to phishing attacks — this is the conclusion of Proofpoint’s fourth annual 2019 Beyond the Phish report.</p><p>Here are four cybersecurity threats organizations should focus on during employee awareness training programs:</p><p><strong>TOP FOUR (4) SECURITY THREAT TOPICS FOR AWARENESS TRAINING</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Threats</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n</style><ol><li><strong>Phishing:</strong> At the enterprise level, many organizations struggle because it is a complicated issue. Employees need to be trained to be skeptical about essentially everything. Only those links that have been received from known senders should be clicked upon; however, even that can be difficult to discern.</li><li><strong>Unauthorized Application Installation/Usage:</strong> Another common security threat is posed by the installation of unauthorized applications. This can be addressed by revoking administrative access for corporate devices and for most employees. A training session explaining the importance of third-party credibility and authenticity can be enough to make employees aware of the threats posed by the installation of unauthorized applications.</li><li><strong>Password Practices:</strong> Guessing passwords is the easiest way of breaking into a system and has typically been the first trick up a hacker’s sleeve. Often times default passwords for hardware and systems are not changed. Another practice that elevates risk is using the same password for different applications. This can be addressed by spreading awareness about changing passwords and using strong passwords and the part they play in keeping the hackers at bay. Modern-day application systems won’t accept user passwords that don’t meet minimal complex security requirements.</li><li><strong>Data Leakage:</strong> Data Leakage can have serious consequences. Employees often transfer files between their personal computers and their corporate workstations or allow their family members to use their corporate devices at home, and this can create some security loopholes. Address this issue through enforcement of a company-wide policy prohibiting the transfer of data from corporate devices to personal ones. Software can be installed to address Data Loss Prevention (DLP).</li></ol><p>Even the most rigorously “secure” infrastructures can get compromised. The threats listed above are some of the most common human vulnerabilities and it is of vital importance that precautionary awareness regarding them be made widespread.</p><p><strong>SIX (6) CRITICAL COMPONENTS OF A SECURITY AWARENESS PROGRAM</strong></p><meta charset=\"UTF-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><title>Security Awareness Program Components</title><style>\r\n    body {\r\n        font-family: Arial, Helvetica, sans-serif;\r\n        font-size: 16px;\r\n        line-height: 1.6;\r\n        color: #000;\r\n        margin: 20px;\r\n    }\r\n    strong {\r\n        display: block;\r\n        margin-bottom: 5px;\r\n    }\r\n    ol {\r\n        margin-left: 20px;\r\n    }\r\n</style><ol><li><strong>Content:</strong> Ensure you develop a program that employs multi-media content. Users learn from a variety of means at different levels and different paces. Utilizing a platform that allows delivery of a wide variety of content, including gamification, will help spread awareness of the program faster. You can also match different content types to different roles in your organization.</li><li><strong>Executive Support &amp; Planning:</strong> Ensure you have support from the top of the organization down. Security awareness programs require strong “tone-at-top.” Ensure you have a strategy and plan documented. Involve and communicate with your sponsor and stakeholders on a regular basis.</li><li><strong>Campaign Support Materials:</strong> A successful program should not be ‘one and done’; treat it as a marketing endeavor. Vary the content and materials to keep users engaged and active.</li><li><strong>Testing:</strong> Phishing simulations prompt users to either click a link, report the phish, or do nothing. You want to give them an opportunity to report phishing attempts and help the organization increase resilience. If they do fall for the phish, it is recommended you implement remediation follow-up training. Doing nothing is not ideal as it leaves the potential threat out there and increases risk for others in the organization.</li><li><strong>Metrics &amp; Reporting:</strong> Keep your sponsor and stakeholders apprised of the progress of the security awareness training program. You need to be able to demonstrate progress. Reporting is also useful for optimizing campaigns based on past results. You want to be able to see what is working well and what can be improved upon.</li><li><strong>Surveys/Assessments:</strong> These tools can help you understand the attitudes of your organization and how well your program is resonating with your people so you can adapt. Think of it as a pulse check of subtle nuances that are different from metrics/reporting, such as opinions, frame of mind, etc.</li></ol><p><strong>SUMMARY</strong></p><p>Effective education is imperative as cybercriminals continue targeting individuals, making a people-centric security approach essential. Use security awareness training software that provides testing. The phish testing software should provide performance reports so that you can measure improvements in employee behavior as training progresses.</p>','','full_html'),('featured_article',0,50,97,'en',0,'<p>Organizations – public and private – have felt the impact of the COVID-19 outbreak on our supply chains as suppliers have diminished workforces and capacity. While cybersecurity threats may appear less of a priority, hackers and cyber attackers are leveraging the headlines to swiftly escalate their attacks across most industries, including healthcare, banking, retail, and entertainment.</p><p><em>“CYFIRMA’s threat visibility and intelligence research revealed a massive increase of over 600% of cyberthreat indicators related to the Coronavirus pandemic from February to early March.”</em></p><p>Many businesses today tend to have a higher dependency on outsourced products, services, and tools to maintain ongoing operations. These services and tools can include hybrid cloud environments, hosted websites, external applications, mobile apps, and cloud storage services. This results in a higher risk exposure to critical services and potentially your sensitive data.</p><p>During this critical time, it’s important to engage and have an honest dialogue with your suppliers on business continuity and cybersecurity risk.</p><ol><li><strong>Establish a Strong Communication Channel:</strong> Establish a strong communication channel with your suppliers. It is essential for a successful partnership. Ensure you have established a clear and transparent process with a single point of contact. Begin with setting expectations and defining the related processes for refining and enforcing them. From a security standpoint, set those expectations with a clear understanding of what your vendor will do and how their activities and responsibilities can create potential security issues for your organization, in turn letting them know the potential issues.</li><li><strong>Cybersecurity Awareness:</strong> Your third-party suppliers, especially smaller organizations, may not be aware of the increased cyber threats. Be proactive through regular meetings and creating an established channel to share vetted information they can use to avoid phishing and other forms of cyber-attacks. Create a dashboard of reporting metrics to monitor your critical supply chain partners.</li><li><strong>Business Continuity:</strong> Some third-party suppliers to your organization’s operations may be determined critical. If they should be adversely affected, you may risk a loss to certain areas of your business operations. Engage your third-party suppliers and ask what they are doing to ensure their operations continue in the face of adverse events. Like cybersecurity awareness, partner with them to share vetted information for best practices in ensuring they have resources to cope with these types of challenges.</li><li><strong>Risk and Controls:</strong> Moving operations to alternative locations and external providers carries increased risks. It is important to understand your regulatory and compliance landscape, inventory and understand the critical services and sensitive information your third-party supplier handles. Beyond conducting risk assessments with your suppliers, partner with them to monitor and assess cybersecurity risks, especially when there is a change in the relationship, product, or service. In many cases, the regulatory and compliance liability remains with your organization.</li><li><strong>Centralized Assessment:</strong> Centralizing your assessment of supplier risk and resilience during periods of disruption and heightened risk represents a major operational advance for many. Third-party data breaches may force your organization to respond to incidents that are outside of your control or originate from an indirect source. Regardless of obligation, your organization may suffer significant reputational damage as a result of the incident.</li></ol><p><strong>FOUR (4) THINGS TO DO NOW TO ADDRESS THIRD PARTY RISK</strong></p><ol><li><strong>Communication:</strong> Establish clear and transparent processes, set expectations.</li><li><strong>Cybersecurity Awareness:</strong> Partner with suppliers to understand the risks.</li><li><strong>Business Continuity:</strong> Understand the impact to your business if your supplier is interrupted.</li><li><strong>Risk and Controls:</strong> Understand the regulatory and compliance landscape, monitor compliance.</li></ol><p>&nbsp;</p>','','full_html'),('featured_article',0,50,130,'en',0,'<p>Organizations – public and private – have felt the impact of the COVID-19 outbreak on our supply chains as suppliers have diminished workforces and capacity. While cybersecurity threats may appear less of a priority, hackers and cyber attackers are leveraging the headlines to swiftly escalate their attacks across most industries, including healthcare, banking, retail, and entertainment.</p><p><em>“CYFIRMA’s threat visibility and intelligence research revealed a massive increase of over 600% of cyberthreat indicators related to the Coronavirus pandemic from February to early March.”</em></p><p>Many businesses today tend to have a higher dependency on outsourced products, services, and tools to maintain ongoing operations. These services and tools can include hybrid cloud environments, hosted websites, external applications, mobile apps, and cloud storage services. This results in a higher risk exposure to critical services and potentially your sensitive data.</p><p>During this critical time, it’s important to engage and have an honest dialogue with your suppliers on business continuity and cybersecurity risk.</p><ol><li><strong>Establish a Strong Communication Channel:</strong> Establish a strong communication channel with your suppliers. It is essential for a successful partnership. Ensure you have established a clear and transparent process with a single point of contact. Begin with setting expectations and defining the related processes for refining and enforcing them. From a security standpoint, set those expectations with a clear understanding of what your vendor will do and how their activities and responsibilities can create potential security issues for your organization, in turn letting them know the potential issues.</li><li><strong>Cybersecurity Awareness:</strong> Your third-party suppliers, especially smaller organizations, may not be aware of the increased cyber threats. Be proactive through regular meetings and creating an established channel to share vetted information they can use to avoid phishing and other forms of cyber-attacks. Create a dashboard of reporting metrics to monitor your critical supply chain partners.</li><li><strong>Business Continuity:</strong> Some third-party suppliers to your organization’s operations may be determined critical. If they should be adversely affected, you may risk a loss to certain areas of your business operations. Engage your third-party suppliers and ask what they are doing to ensure their operations continue in the face of adverse events. Like cybersecurity awareness, partner with them to share vetted information for best practices in ensuring they have resources to cope with these types of challenges.</li><li><strong>Risk and Controls:</strong> Moving operations to alternative locations and external providers carries increased risks. It is important to understand your regulatory and compliance landscape, inventory and understand the critical services and sensitive information your third-party supplier handles. Beyond conducting risk assessments with your suppliers, partner with them to monitor and assess cybersecurity risks, especially when there is a change in the relationship, product, or service. In many cases, the regulatory and compliance liability remains with your organization.</li><li><strong>Centralized Assessment:</strong> Centralizing your assessment of supplier risk and resilience during periods of disruption and heightened risk represents a major operational advance for many. Third-party data breaches may force your organization to respond to incidents that are outside of your control or originate from an indirect source. Regardless of obligation, your organization may suffer significant reputational damage as a result of the incident.</li></ol><p><strong>FOUR (4) THINGS TO DO NOW TO ADDRESS THIRD PARTY RISK</strong></p><ol><li><strong>Communication:</strong> Establish clear and transparent processes, set expectations.</li><li><strong>Cybersecurity Awareness:</strong> Partner with suppliers to understand the risks.</li><li><strong>Business Continuity:</strong> Understand the impact to your business if your supplier is interrupted.</li><li><strong>Risk and Controls:</strong> Understand the regulatory and compliance landscape, monitor compliance.</li></ol><p>&nbsp;</p>','','full_html'),('featured_article',0,50,270,'en',0,'<p>Organizations – public and private – have felt the impact of the COVID-19 outbreak on our supply chains as suppliers have diminished workforces and capacity. While cybersecurity threats may appear less of a priority, hackers and cyber attackers are leveraging the headlines to swiftly escalate their attacks across most industries, including healthcare, banking, retail, and entertainment.</p><p><em>“CYFIRMA’s threat visibility and intelligence research revealed a massive increase of over 600% of cyberthreat indicators related to the Coronavirus pandemic from February to early March.”</em></p><p>Many businesses today tend to have a higher dependency on outsourced products, services, and tools to maintain ongoing operations. These services and tools can include hybrid cloud environments, hosted websites, external applications, mobile apps, and cloud storage services. This results in a higher risk exposure to critical services and potentially your sensitive data.</p><p>During this critical time, it’s important to engage and have an honest dialogue with your suppliers on business continuity and cybersecurity risk.</p><ol><li><strong>Establish a Strong Communication Channel:</strong> Establish a strong communication channel with your suppliers. It is essential for a successful partnership. Ensure you have established a clear and transparent process with a single point of contact. Begin with setting expectations and defining the related processes for refining and enforcing them. From a security standpoint, set those expectations with a clear understanding of what your vendor will do and how their activities and responsibilities can create potential security issues for your organization, in turn letting them know the potential issues.</li><li><strong>Cybersecurity Awareness:</strong> Your third-party suppliers, especially smaller organizations, may not be aware of the increased cyber threats. Be proactive through regular meetings and creating an established channel to share vetted information they can use to avoid phishing and other forms of cyber-attacks. Create a dashboard of reporting metrics to monitor your critical supply chain partners.</li><li><strong>Business Continuity:</strong> Some third-party suppliers to your organization’s operations may be determined critical. If they should be adversely affected, you may risk a loss to certain areas of your business operations. Engage your third-party suppliers and ask what they are doing to ensure their operations continue in the face of adverse events. Like cybersecurity awareness, partner with them to share vetted information for best practices in ensuring they have resources to cope with these types of challenges.</li><li><strong>Risk and Controls:</strong> Moving operations to alternative locations and external providers carries increased risks. It is important to understand your regulatory and compliance landscape, inventory and understand the critical services and sensitive information your third-party supplier handles. Beyond conducting risk assessments with your suppliers, partner with them to monitor and assess cybersecurity risks, especially when there is a change in the relationship, product, or service. In many cases, the regulatory and compliance liability remains with your organization.</li><li><strong>Centralized Assessment:</strong> Centralizing your assessment of supplier risk and resilience during periods of disruption and heightened risk represents a major operational advance for many. Third-party data breaches may force your organization to respond to incidents that are outside of your control or originate from an indirect source. Regardless of obligation, your organization may suffer significant reputational damage as a result of the incident.</li></ol><p><strong>FOUR (4) THINGS TO DO NOW TO ADDRESS THIRD PARTY RISK</strong></p><ol><li><strong>Communication:</strong> Establish clear and transparent processes, set expectations.</li><li><strong>Cybersecurity Awareness:</strong> Partner with suppliers to understand the risks.</li><li><strong>Business Continuity:</strong> Understand the impact to your business if your supplier is interrupted.</li><li><strong>Risk and Controls:</strong> Understand the regulatory and compliance landscape, monitor compliance.</li></ol><p>&nbsp;</p>','','full_html'),('featured_article',0,50,452,'en',0,'<p>Organizations – public and private – have felt the impact of the COVID-19 outbreak on our supply chains as suppliers have diminished workforces and capacity. While cybersecurity threats may appear less of a priority, hackers and cyber attackers are leveraging the headlines to swiftly escalate their attacks across most industries, including healthcare, banking, retail, and entertainment.</p><p><em>“CYFIRMA’s threat visibility and intelligence research revealed a massive increase of over 600% of cyberthreat indicators related to the Coronavirus pandemic from February to early March.”</em></p><p>Many businesses today tend to have a higher dependency on outsourced products, services, and tools to maintain ongoing operations. These services and tools can include hybrid cloud environments, hosted websites, external applications, mobile apps, and cloud storage services. This results in a higher risk exposure to critical services and potentially your sensitive data.</p><p>During this critical time, it’s important to engage and have an honest dialogue with your suppliers on business continuity and cybersecurity risk.</p><ol><li><strong>Establish a Strong Communication Channel:</strong> Establish a strong communication channel with your suppliers. It is essential for a successful partnership. Ensure you have established a clear and transparent process with a single point of contact. Begin with setting expectations and defining the related processes for refining and enforcing them. From a security standpoint, set those expectations with a clear understanding of what your vendor will do and how their activities and responsibilities can create potential security issues for your organization, in turn letting them know the potential issues.</li><li><strong>Cybersecurity Awareness:</strong> Your third-party suppliers, especially smaller organizations, may not be aware of the increased cyber threats. Be proactive through regular meetings and creating an established channel to share vetted information they can use to avoid phishing and other forms of cyber-attacks. Create a dashboard of reporting metrics to monitor your critical supply chain partners.</li><li><strong>Business Continuity:</strong> Some third-party suppliers to your organization’s operations may be determined critical. If they should be adversely affected, you may risk a loss to certain areas of your business operations. Engage your third-party suppliers and ask what they are doing to ensure their operations continue in the face of adverse events. Like cybersecurity awareness, partner with them to share vetted information for best practices in ensuring they have resources to cope with these types of challenges.</li><li><strong>Risk and Controls:</strong> Moving operations to alternative locations and external providers carries increased risks. It is important to understand your regulatory and compliance landscape, inventory and understand the critical services and sensitive information your third-party supplier handles. Beyond conducting risk assessments with your suppliers, partner with them to monitor and assess cybersecurity risks, especially when there is a change in the relationship, product, or service. In many cases, the regulatory and compliance liability remains with your organization.</li><li><strong>Centralized Assessment:</strong> Centralizing your assessment of supplier risk and resilience during periods of disruption and heightened risk represents a major operational advance for many. Third-party data breaches may force your organization to respond to incidents that are outside of your control or originate from an indirect source. Regardless of obligation, your organization may suffer significant reputational damage as a result of the incident.</li></ol><p><strong>FOUR (4) THINGS TO DO NOW TO ADDRESS THIRD PARTY RISK</strong></p><ol><li><strong>Communication:</strong> Establish clear and transparent processes, set expectations.</li><li><strong>Cybersecurity Awareness:</strong> Partner with suppliers to understand the risks.</li><li><strong>Business Continuity:</strong> Understand the impact to your business if your supplier is interrupted.</li><li><strong>Risk and Controls:</strong> Understand the regulatory and compliance landscape, monitor compliance.</li></ol><p>&nbsp;</p>','','full_html'),('featured_article',0,50,519,'en',0,'<p>Organizations – public and private – have felt the impact of the COVID-19 outbreak on our supply chains as suppliers have diminished workforces and capacity. While cybersecurity threats may appear less of a priority, hackers and cyber attackers are leveraging the headlines to swiftly escalate their attacks across most industries, including healthcare, banking, retail, and entertainment.</p><p><em>“CYFIRMA’s threat visibility and intelligence research revealed a massive increase of over 600% of cyberthreat indicators related to the Coronavirus pandemic from February to early March.”</em></p><p>Many businesses today tend to have a higher dependency on outsourced products, services, and tools to maintain ongoing operations. These services and tools can include hybrid cloud environments, hosted websites, external applications, mobile apps, and cloud storage services. This results in a higher risk exposure to critical services and potentially your sensitive data.</p><p>During this critical time, it’s important to engage and have an honest dialogue with your suppliers on business continuity and cybersecurity risk.</p><ol><li><strong>Establish a Strong Communication Channel:</strong> Establish a strong communication channel with your suppliers. It is essential for a successful partnership. Ensure you have established a clear and transparent process with a single point of contact. Begin with setting expectations and defining the related processes for refining and enforcing them. From a security standpoint, set those expectations with a clear understanding of what your vendor will do and how their activities and responsibilities can create potential security issues for your organization, in turn letting them know the potential issues.</li><li><strong>Cybersecurity Awareness:</strong> Your third-party suppliers, especially smaller organizations, may not be aware of the increased cyber threats. Be proactive through regular meetings and creating an established channel to share vetted information they can use to avoid phishing and other forms of cyber-attacks. Create a dashboard of reporting metrics to monitor your critical supply chain partners.</li><li><strong>Business Continuity:</strong> Some third-party suppliers to your organization’s operations may be determined critical. If they should be adversely affected, you may risk a loss to certain areas of your business operations. Engage your third-party suppliers and ask what they are doing to ensure their operations continue in the face of adverse events. Like cybersecurity awareness, partner with them to share vetted information for best practices in ensuring they have resources to cope with these types of challenges.</li><li><strong>Risk and Controls:</strong> Moving operations to alternative locations and external providers carries increased risks. It is important to understand your regulatory and compliance landscape, inventory and understand the critical services and sensitive information your third-party supplier handles. Beyond conducting risk assessments with your suppliers, partner with them to monitor and assess cybersecurity risks, especially when there is a change in the relationship, product, or service. In many cases, the regulatory and compliance liability remains with your organization.</li><li><strong>Centralized Assessment:</strong> Centralizing your assessment of supplier risk and resilience during periods of disruption and heightened risk represents a major operational advance for many. Third-party data breaches may force your organization to respond to incidents that are outside of your control or originate from an indirect source. Regardless of obligation, your organization may suffer significant reputational damage as a result of the incident.</li></ol><p><strong>FOUR (4) THINGS TO DO NOW TO ADDRESS THIRD PARTY RISK</strong></p><ol><li><strong>Communication:</strong> Establish clear and transparent processes, set expectations.</li><li><strong>Cybersecurity Awareness:</strong> Partner with suppliers to understand the risks.</li><li><strong>Business Continuity:</strong> Understand the impact to your business if your supplier is interrupted.</li><li><strong>Risk and Controls:</strong> Understand the regulatory and compliance landscape, monitor compliance.</li></ol><p>&nbsp;</p>','','full_html'),('featured_article',0,50,535,'en',0,'<p>Organizations – public and private – have felt the impact of the COVID-19 outbreak on our supply chains as suppliers have diminished workforces and capacity. While cybersecurity threats may appear less of a priority, hackers and cyber attackers are leveraging the headlines to swiftly escalate their attacks across most industries, including healthcare, banking, retail, and entertainment.</p><p><em>“CYFIRMA’s threat visibility and intelligence research revealed a massive increase of over 600% of cyberthreat indicators related to the Coronavirus pandemic from February to early March.”</em></p><p>Many businesses today tend to have a higher dependency on outsourced products, services, and tools to maintain ongoing operations. These services and tools can include hybrid cloud environments, hosted websites, external applications, mobile apps, and cloud storage services. This results in a higher risk exposure to critical services and potentially your sensitive data.</p><p>During this critical time, it’s important to engage and have an honest dialogue with your suppliers on business continuity and cybersecurity risk.</p><ol><li><strong>Establish a Strong Communication Channel:</strong> Establish a strong communication channel with your suppliers. It is essential for a successful partnership. Ensure you have established a clear and transparent process with a single point of contact. Begin with setting expectations and defining the related processes for refining and enforcing them. From a security standpoint, set those expectations with a clear understanding of what your vendor will do and how their activities and responsibilities can create potential security issues for your organization, in turn letting them know the potential issues.</li><li><strong>Cybersecurity Awareness:</strong> Your third-party suppliers, especially smaller organizations, may not be aware of the increased cyber threats. Be proactive through regular meetings and creating an established channel to share vetted information they can use to avoid phishing and other forms of cyber-attacks. Create a dashboard of reporting metrics to monitor your critical supply chain partners.</li><li><strong>Business Continuity:</strong> Some third-party suppliers to your organization’s operations may be determined critical. If they should be adversely affected, you may risk a loss to certain areas of your business operations. Engage your third-party suppliers and ask what they are doing to ensure their operations continue in the face of adverse events. Like cybersecurity awareness, partner with them to share vetted information for best practices in ensuring they have resources to cope with these types of challenges.</li><li><strong>Risk and Controls:</strong> Moving operations to alternative locations and external providers carries increased risks. It is important to understand your regulatory and compliance landscape, inventory and understand the critical services and sensitive information your third-party supplier handles. Beyond conducting risk assessments with your suppliers, partner with them to monitor and assess cybersecurity risks, especially when there is a change in the relationship, product, or service. In many cases, the regulatory and compliance liability remains with your organization.</li><li><strong>Centralized Assessment:</strong> Centralizing your assessment of supplier risk and resilience during periods of disruption and heightened risk represents a major operational advance for many. Third-party data breaches may force your organization to respond to incidents that are outside of your control or originate from an indirect source. Regardless of obligation, your organization may suffer significant reputational damage as a result of the incident.</li></ol><p><strong>FOUR (4) THINGS TO DO NOW TO ADDRESS THIRD PARTY RISK</strong></p><ol><li><strong>Communication:</strong> Establish clear and transparent processes, set expectations.</li><li><strong>Cybersecurity Awareness:</strong> Partner with suppliers to understand the risks.</li><li><strong>Business Continuity:</strong> Understand the impact to your business if your supplier is interrupted.</li><li><strong>Risk and Controls:</strong> Understand the regulatory and compliance landscape, monitor compliance.</li></ol><p>&nbsp;</p>','','full_html'),('featured_article',0,50,610,'en',0,'<p>Organizations – public and private – have felt the impact of the COVID-19 outbreak on our supply chains as suppliers have diminished workforces and capacity. While cybersecurity threats may appear less of a priority, hackers and cyber attackers are leveraging the headlines to swiftly escalate their attacks across most industries, including healthcare, banking, retail, and entertainment.</p><p><em>“CYFIRMA’s threat visibility and intelligence research revealed a massive increase of over 600% of cyberthreat indicators related to the Coronavirus pandemic from February to early March.”</em></p><p>Many businesses today tend to have a higher dependency on outsourced products, services, and tools to maintain ongoing operations. These services and tools can include hybrid cloud environments, hosted websites, external applications, mobile apps, and cloud storage services. This results in a higher risk exposure to critical services and potentially your sensitive data.</p><p>During this critical time, it’s important to engage and have an honest dialogue with your suppliers on business continuity and cybersecurity risk.</p><ol><li><strong>Establish a Strong Communication Channel:</strong> Establish a strong communication channel with your suppliers. It is essential for a successful partnership. Ensure you have established a clear and transparent process with a single point of contact. Begin with setting expectations and defining the related processes for refining and enforcing them. From a security standpoint, set those expectations with a clear understanding of what your vendor will do and how their activities and responsibilities can create potential security issues for your organization, in turn letting them know the potential issues.</li><li><strong>Cybersecurity Awareness:</strong> Your third-party suppliers, especially smaller organizations, may not be aware of the increased cyber threats. Be proactive through regular meetings and creating an established channel to share vetted information they can use to avoid phishing and other forms of cyber-attacks. Create a dashboard of reporting metrics to monitor your critical supply chain partners.</li><li><strong>Business Continuity:</strong> Some third-party suppliers to your organization’s operations may be determined critical. If they should be adversely affected, you may risk a loss to certain areas of your business operations. Engage your third-party suppliers and ask what they are doing to ensure their operations continue in the face of adverse events. Like cybersecurity awareness, partner with them to share vetted information for best practices in ensuring they have resources to cope with these types of challenges.</li><li><strong>Risk and Controls:</strong> Moving operations to alternative locations and external providers carries increased risks. It is important to understand your regulatory and compliance landscape, inventory and understand the critical services and sensitive information your third-party supplier handles. Beyond conducting risk assessments with your suppliers, partner with them to monitor and assess cybersecurity risks, especially when there is a change in the relationship, product, or service. In many cases, the regulatory and compliance liability remains with your organization.</li><li><strong>Centralized Assessment:</strong> Centralizing your assessment of supplier risk and resilience during periods of disruption and heightened risk represents a major operational advance for many. Third-party data breaches may force your organization to respond to incidents that are outside of your control or originate from an indirect source. Regardless of obligation, your organization may suffer significant reputational damage as a result of the incident.</li></ol><p><strong>FOUR (4) THINGS TO DO NOW TO ADDRESS THIRD PARTY RISK</strong></p><ol><li><strong>Communication:</strong> Establish clear and transparent processes, set expectations.</li><li><strong>Cybersecurity Awareness:</strong> Partner with suppliers to understand the risks.</li><li><strong>Business Continuity:</strong> Understand the impact to your business if your supplier is interrupted.</li><li><strong>Risk and Controls:</strong> Understand the regulatory and compliance landscape, monitor compliance.</li></ol><p>&nbsp;</p>','','full_html'),('featured_article',0,50,845,'en',0,'<p>Organizations – public and private – have felt the impact of the COVID-19 outbreak on our supply chains as suppliers have diminished workforces and capacity. While cybersecurity threats may appear less of a priority, hackers and cyber attackers are leveraging the headlines to swiftly escalate their attacks across most industries, including healthcare, banking, retail, and entertainment.</p><p><em>“CYFIRMA’s threat visibility and intelligence research revealed a massive increase of over 600% of cyberthreat indicators related to the Coronavirus pandemic from February to early March.”</em></p><p>Many businesses today tend to have a higher dependency on outsourced products, services, and tools to maintain ongoing operations. These services and tools can include hybrid cloud environments, hosted websites, external applications, mobile apps, and cloud storage services. This results in a higher risk exposure to critical services and potentially your sensitive data.</p><p>During this critical time, it’s important to engage and have an honest dialogue with your suppliers on business continuity and cybersecurity risk.</p><ol><li><strong>Establish a Strong Communication Channel:</strong> Establish a strong communication channel with your suppliers. It is essential for a successful partnership. Ensure you have established a clear and transparent process with a single point of contact. Begin with setting expectations and defining the related processes for refining and enforcing them. From a security standpoint, set those expectations with a clear understanding of what your vendor will do and how their activities and responsibilities can create potential security issues for your organization, in turn letting them know the potential issues.</li><li><strong>Cybersecurity Awareness:</strong> Your third-party suppliers, especially smaller organizations, may not be aware of the increased cyber threats. Be proactive through regular meetings and creating an established channel to share vetted information they can use to avoid phishing and other forms of cyber-attacks. Create a dashboard of reporting metrics to monitor your critical supply chain partners.</li><li><strong>Business Continuity:</strong> Some third-party suppliers to your organization’s operations may be determined critical. If they should be adversely affected, you may risk a loss to certain areas of your business operations. Engage your third-party suppliers and ask what they are doing to ensure their operations continue in the face of adverse events. Like cybersecurity awareness, partner with them to share vetted information for best practices in ensuring they have resources to cope with these types of challenges.</li><li><strong>Risk and Controls:</strong> Moving operations to alternative locations and external providers carries increased risks. It is important to understand your regulatory and compliance landscape, inventory and understand the critical services and sensitive information your third-party supplier handles. Beyond conducting risk assessments with your suppliers, partner with them to monitor and assess cybersecurity risks, especially when there is a change in the relationship, product, or service. In many cases, the regulatory and compliance liability remains with your organization.</li><li><strong>Centralized Assessment:</strong> Centralizing your assessment of supplier risk and resilience during periods of disruption and heightened risk represents a major operational advance for many. Third-party data breaches may force your organization to respond to incidents that are outside of your control or originate from an indirect source. Regardless of obligation, your organization may suffer significant reputational damage as a result of the incident.</li></ol><p><strong>FOUR (4) THINGS TO DO NOW TO ADDRESS THIRD PARTY RISK</strong></p><ol><li><strong>Communication:</strong> Establish clear and transparent processes, set expectations.</li><li><strong>Cybersecurity Awareness:</strong> Partner with suppliers to understand the risks.</li><li><strong>Business Continuity:</strong> Understand the impact to your business if your supplier is interrupted.</li><li><strong>Risk and Controls:</strong> Understand the regulatory and compliance landscape, monitor compliance.</li></ol><p>&nbsp;</p>','','full_html'),('featured_article',0,51,98,'en',0,'<!-- Headline with stylized first letter --><div class=\"headline\"><span class=\"first-letter\">N</span>ever trust, always verify.</div><!-- Body Paragraph --><p>The traditional idea of the well-defined network perimeter is outdated in a world where organizations are increasingly moving applications and data to cloud services, embracing a highly mobile remote workforce, and dealing with a significantly growing number of devices attaching to the corporate network. Many digital transformation initiatives are forcing businesses to rethink their enterprise security architecture. As organizations go through these changes, security concerns are paramount with cyber attacks on the rise.</p><!-- Quoted statistic --><p class=\"quote\"><em>“In March, there was a 30,000% increase in COVID-19 related attacks and malware.”(Source: Zscaler)</em></p><!-- Follow-up content --><p>&nbsp;</p><p>Today’s new reality in an increasingly perimeter-less world begs the question: how does an organization protect itself? The Zero Trust framework presumes bad actors are already in the network. The approach deploys multiple strategies such as (a) identity and access management, (b) multifactor authentication, (c) encryption, (d) risk scoring, and (e)role-based access controls to enforce strict governance policies. These policies provide user access to specific applications and resources aligned with their roles and responsibilities. This limits not only <em>north-south</em> movement in the network, but also <em>east-west</em> lateral movement across the network.</p><p><strong>Four (4) Things You Need To Know</strong></p><p>The methodologies that enable Zero Trust accomplish five (5) core tasks:</p><ol><li><p><strong>Micro-segmentation.</strong> Micro-segmentation is a method of creating secure zones in data centers, cloud deployments, and even applications, allowing organizations to isolate workloads from one another and secure them individually. It is aimed at making network security more granular. Using micro-segmentation, files in a network can be placed in separate secure zones. A user or program with access to one of those zones will not be able to access any of the other zones without separate authorization, tying security to individual workloads.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust_0.png\" data-entity-uuid=\"64a65fd7-9658-44dd-8310-feaeb8c99e1c\" data-entity-type=\"file\" width=\"300\" height=\"249\"></p></li><li><strong>Least Privilege Access</strong>. Zero-Trust is based on granting least privilege access. However, the access is only granted on verification of multiple contextual environmental variables at each request, such as: (a) who is requesting access, (b) what is the context of the request, and (c) what is the risk of access to the environment. Zero-trust no longer provides trust to anyone or anything connecting to valued systems. It treats equally traffic originating from within the network as well traffic arriving externally – users, devices, even API’s are all treated the same. This enables minimization of the attack surface, it improves audit, and reduces the risk and costs of security breaches.</li><li><strong>Multi-factor Authentication (MFA)</strong>. MFA is a core value of zero trust security. It means simply requiring more than one piece of evidence to authenticate a user, entering a password alone is not enough to gain access. The use of two-factor authorization—the addition of a code sent to another device — is now widely used and accepted by consumers and stakeholders. Other forms of authentication — biometrics — are emerging to bolster identity verification.</li><li><p><strong>Application Behavior and Visibility</strong>. A benefit of micro-segmentation is the enablement of application security that builds in policies defining allowed behavior and protection for each individual build. As example, ideation through development occurs in an environment isolated from the rest of the network so that any breach of an application will be contained and prevented from spreading into the rest of the network. Visibility into application behavior on devices that access applications also needs to be taken into account so anomalous activity can be detected and action can be taken more quickly.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust-2png.png\" data-entity-uuid=\"556637b5-cc8f-496e-b4c5-0ed550ac54b1\" data-entity-type=\"file\" width=\"918\" height=\"522\"></p></li></ol><p><strong>Designing and Building</strong></p><p>Use a five (5) step model for implementing and maintaining a Zero Trust network:</p><ol><li><strong>Define the protect surface.</strong> In the Zero Trust defining the scope of the protect surface in manageable portions is critically important. The protect surface should include the critical</li><li><strong>Map the transactions flows.</strong> How traffic moves across a network should define how it is protected. Therefore it is essential to gain contextual insight on the interdependencies of your data, application, assets and services – the DAAS. Documenting the interaction between specific resources allows the ability to properly enforce controls. It also provides valuable context to ensure the controls help protect the data.</li><li><strong>Architect a Zero Trust network.</strong> Zero Trust networks are built from the ground up, architected and customized around specific requirements for the protect surfaces. However it is imperative that the protect surface and transaction flow maps be completed first.</li><li><strong>Create the Zero Trust policy.</strong> Once the Zero Trust network has been architected, the next step is to define and whitelist which resources should have access to the others. The questions of “who, what, when, where, why and how” work well here.</li><li><strong>Monitor and maintain the network.</strong> Lastly, the final step is to ensure logging is enabled, all logs are reviewed (both internal and external) and data is analyzed in a timely manner. Visibility should be all way through Layer 7 of the OSI model.</li></ol><p>Upon completing the first protect surface for your organization, this model can be iteratively and easily expanded to other data sets, applications, assets and services from legacy or modern systems. It can be implemented in a cost-effective and non-destructive way.</p><p><strong>Zero Trust and the Future of Work</strong></p><p>Security objectives and best practices to keep mind while designing and building a Zero Trust environment that serves today’s needs and into the future should include these considerations:</p><ul class=\"BlogPreventList\"><li><strong>Think Anytime, Anywhere. </strong>Secure applications, data, users, devices and network traffic through persistent protection, all with the same degree of effectiveness regardless of location. The user experience should be frictionless and easy to deploy.</li><li><strong>Build for Resilience. </strong>As organizations mature their continuity of operations and crisis management plans, a Zero Trust architecture allows organizations to adapt and move quickly to changing environments and realities, in addition to providing strong cybersecurity best practices.</li></ul><p>Zero Trust means different things to different organizations. It is an approach, a framework. Zero Trust is not a specific tool or set of tools. It can be adapted to many use cases, particularly for remote work, teleworking, and BYOD (Bring Your Own Device) typically a practice still not considered secure, and it can be implement one defined protect surface at a time.</p><p>As senior leaders we are asked to be more strategic and drive revenue through technologies and integration as the business goals and needs expand. At the same time, cybersecurity is an incredibly complex problem to solve from both the end user side and in the data center as attack surfaces become even broader. It’s no longer a question of “if” a breach will happen but “when.” Zero Trust provides a scalable adaptive solution.</p><p>Author:</p><p>Laszlo S. Gonc, CISSP, First Senior Fellow, DivIHN Cybersecurity Center of Excellence</p>','','full_html'),('featured_article',0,51,131,'en',0,'<!-- Headline with stylized first letter --><div class=\"headline\"><span class=\"first-letter\">N</span>ever trust, always verify.</div><!-- Body Paragraph --><p>The traditional idea of the well-defined network perimeter is outdated in a world where organizations are increasingly moving applications and data to cloud services, embracing a highly mobile remote workforce, and dealing with a significantly growing number of devices attaching to the corporate network. Many digital transformation initiatives are forcing businesses to rethink their enterprise security architecture. As organizations go through these changes, security concerns are paramount with cyber attacks on the rise.</p><!-- Quoted statistic --><p class=\"quote\"><em>“In March, there was a 30,000% increase in COVID-19 related attacks and malware.”(Source: Zscaler)</em></p><!-- Follow-up content --><p>&nbsp;</p><p>Today’s new reality in an increasingly perimeter-less world begs the question: how does an organization protect itself? The Zero Trust framework presumes bad actors are already in the network. The approach deploys multiple strategies such as (a) identity and access management, (b) multifactor authentication, (c) encryption, (d) risk scoring, and (e)role-based access controls to enforce strict governance policies. These policies provide user access to specific applications and resources aligned with their roles and responsibilities. This limits not only <em>north-south</em> movement in the network, but also <em>east-west</em> lateral movement across the network.</p><p><strong>Four (4) Things You Need To Know</strong></p><p>The methodologies that enable Zero Trust accomplish five (5) core tasks:</p><ol><li><p><strong>Micro-segmentation.</strong> Micro-segmentation is a method of creating secure zones in data centers, cloud deployments, and even applications, allowing organizations to isolate workloads from one another and secure them individually. It is aimed at making network security more granular. Using micro-segmentation, files in a network can be placed in separate secure zones. A user or program with access to one of those zones will not be able to access any of the other zones without separate authorization, tying security to individual workloads.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust_0.png\" data-entity-uuid=\"64a65fd7-9658-44dd-8310-feaeb8c99e1c\" data-entity-type=\"file\" width=\"300\" height=\"249\"></p></li><li><strong>Least Privilege Access</strong>. Zero-Trust is based on granting least privilege access. However, the access is only granted on verification of multiple contextual environmental variables at each request, such as: (a) who is requesting access, (b) what is the context of the request, and (c) what is the risk of access to the environment. Zero-trust no longer provides trust to anyone or anything connecting to valued systems. It treats equally traffic originating from within the network as well traffic arriving externally – users, devices, even API’s are all treated the same. This enables minimization of the attack surface, it improves audit, and reduces the risk and costs of security breaches.</li><li><strong>Multi-factor Authentication (MFA)</strong>. MFA is a core value of zero trust security. It means simply requiring more than one piece of evidence to authenticate a user, entering a password alone is not enough to gain access. The use of two-factor authorization—the addition of a code sent to another device — is now widely used and accepted by consumers and stakeholders. Other forms of authentication — biometrics — are emerging to bolster identity verification.</li><li><p><strong>Application Behavior and Visibility</strong>. A benefit of micro-segmentation is the enablement of application security that builds in policies defining allowed behavior and protection for each individual build. As example, ideation through development occurs in an environment isolated from the rest of the network so that any breach of an application will be contained and prevented from spreading into the rest of the network. Visibility into application behavior on devices that access applications also needs to be taken into account so anomalous activity can be detected and action can be taken more quickly.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust-2png.png\" data-entity-uuid=\"556637b5-cc8f-496e-b4c5-0ed550ac54b1\" data-entity-type=\"file\" width=\"918\" height=\"522\"></p></li></ol><p><strong>Designing and Building</strong></p><p>Use a five (5) step model for implementing and maintaining a Zero Trust network:</p><ol><li><strong>Define the protect surface.</strong> In the Zero Trust defining the scope of the protect surface in manageable portions is critically important. The protect surface should include the critical</li><li><strong>Map the transactions flows.</strong> How traffic moves across a network should define how it is protected. Therefore it is essential to gain contextual insight on the interdependencies of your data, application, assets and services – the DAAS. Documenting the interaction between specific resources allows the ability to properly enforce controls. It also provides valuable context to ensure the controls help protect the data.</li><li><strong>Architect a Zero Trust network.</strong> Zero Trust networks are built from the ground up, architected and customized around specific requirements for the protect surfaces. However it is imperative that the protect surface and transaction flow maps be completed first.</li><li><strong>Create the Zero Trust policy.</strong> Once the Zero Trust network has been architected, the next step is to define and whitelist which resources should have access to the others. The questions of “who, what, when, where, why and how” work well here.</li><li><strong>Monitor and maintain the network.</strong> Lastly, the final step is to ensure logging is enabled, all logs are reviewed (both internal and external) and data is analyzed in a timely manner. Visibility should be all way through Layer 7 of the OSI model.</li></ol><p>Upon completing the first protect surface for your organization, this model can be iteratively and easily expanded to other data sets, applications, assets and services from legacy or modern systems. It can be implemented in a cost-effective and non-destructive way.</p><p><strong>Zero Trust and the Future of Work</strong></p><p>Security objectives and best practices to keep mind while designing and building a Zero Trust environment that serves today’s needs and into the future should include these considerations:</p><ul class=\"BlogPreventList\"><li><strong>Think Anytime, Anywhere. </strong>Secure applications, data, users, devices and network traffic through persistent protection, all with the same degree of effectiveness regardless of location. The user experience should be frictionless and easy to deploy.</li><li><strong>Build for Resilience. </strong>As organizations mature their continuity of operations and crisis management plans, a Zero Trust architecture allows organizations to adapt and move quickly to changing environments and realities, in addition to providing strong cybersecurity best practices.</li></ul><p>Zero Trust means different things to different organizations. It is an approach, a framework. Zero Trust is not a specific tool or set of tools. It can be adapted to many use cases, particularly for remote work, teleworking, and BYOD (Bring Your Own Device) typically a practice still not considered secure, and it can be implement one defined protect surface at a time.</p><p>As senior leaders we are asked to be more strategic and drive revenue through technologies and integration as the business goals and needs expand. At the same time, cybersecurity is an incredibly complex problem to solve from both the end user side and in the data center as attack surfaces become even broader. It’s no longer a question of “if” a breach will happen but “when.” Zero Trust provides a scalable adaptive solution.</p><p>Author:</p><p>Laszlo S. Gonc, CISSP, First Senior Fellow, DivIHN Cybersecurity Center of Excellence</p>','','full_html'),('featured_article',0,51,269,'en',0,'<!-- Headline with stylized first letter --><div class=\"headline\"><span class=\"first-letter\">N</span>ever trust, always verify.</div><!-- Body Paragraph --><p>The traditional idea of the well-defined network perimeter is outdated in a world where organizations are increasingly moving applications and data to cloud services, embracing a highly mobile remote workforce, and dealing with a significantly growing number of devices attaching to the corporate network. Many digital transformation initiatives are forcing businesses to rethink their enterprise security architecture. As organizations go through these changes, security concerns are paramount with cyber attacks on the rise.</p><!-- Quoted statistic --><p class=\"quote\"><em>“In March, there was a 30,000% increase in COVID-19 related attacks and malware.”(Source: Zscaler)</em></p><!-- Follow-up content --><p>&nbsp;</p><p>Today’s new reality in an increasingly perimeter-less world begs the question: how does an organization protect itself? The Zero Trust framework presumes bad actors are already in the network. The approach deploys multiple strategies such as (a) identity and access management, (b) multifactor authentication, (c) encryption, (d) risk scoring, and (e)role-based access controls to enforce strict governance policies. These policies provide user access to specific applications and resources aligned with their roles and responsibilities. This limits not only <em>north-south</em> movement in the network, but also <em>east-west</em> lateral movement across the network.</p><p><strong>Four (4) Things You Need To Know</strong></p><p>The methodologies that enable Zero Trust accomplish five (5) core tasks:</p><ol><li><p><strong>Micro-segmentation.</strong> Micro-segmentation is a method of creating secure zones in data centers, cloud deployments, and even applications, allowing organizations to isolate workloads from one another and secure them individually. It is aimed at making network security more granular. Using micro-segmentation, files in a network can be placed in separate secure zones. A user or program with access to one of those zones will not be able to access any of the other zones without separate authorization, tying security to individual workloads.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust_0.png\" data-entity-uuid=\"64a65fd7-9658-44dd-8310-feaeb8c99e1c\" data-entity-type=\"file\" width=\"300\" height=\"249\"></p></li><li><strong>Least Privilege Access</strong>. Zero-Trust is based on granting least privilege access. However, the access is only granted on verification of multiple contextual environmental variables at each request, such as: (a) who is requesting access, (b) what is the context of the request, and (c) what is the risk of access to the environment. Zero-trust no longer provides trust to anyone or anything connecting to valued systems. It treats equally traffic originating from within the network as well traffic arriving externally – users, devices, even API’s are all treated the same. This enables minimization of the attack surface, it improves audit, and reduces the risk and costs of security breaches.</li><li><strong>Multi-factor Authentication (MFA)</strong>. MFA is a core value of zero trust security. It means simply requiring more than one piece of evidence to authenticate a user, entering a password alone is not enough to gain access. The use of two-factor authorization—the addition of a code sent to another device — is now widely used and accepted by consumers and stakeholders. Other forms of authentication — biometrics — are emerging to bolster identity verification.</li><li><p><strong>Application Behavior and Visibility</strong>. A benefit of micro-segmentation is the enablement of application security that builds in policies defining allowed behavior and protection for each individual build. As example, ideation through development occurs in an environment isolated from the rest of the network so that any breach of an application will be contained and prevented from spreading into the rest of the network. Visibility into application behavior on devices that access applications also needs to be taken into account so anomalous activity can be detected and action can be taken more quickly.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust-2png.png\" data-entity-uuid=\"556637b5-cc8f-496e-b4c5-0ed550ac54b1\" data-entity-type=\"file\" width=\"918\" height=\"522\"></p></li></ol><p><strong>Designing and Building</strong></p><p>Use a five (5) step model for implementing and maintaining a Zero Trust network:</p><ol><li><strong>Define the protect surface.</strong> In the Zero Trust defining the scope of the protect surface in manageable portions is critically important. The protect surface should include the critical</li><li><strong>Map the transactions flows.</strong> How traffic moves across a network should define how it is protected. Therefore it is essential to gain contextual insight on the interdependencies of your data, application, assets and services – the DAAS. Documenting the interaction between specific resources allows the ability to properly enforce controls. It also provides valuable context to ensure the controls help protect the data.</li><li><strong>Architect a Zero Trust network.</strong> Zero Trust networks are built from the ground up, architected and customized around specific requirements for the protect surfaces. However it is imperative that the protect surface and transaction flow maps be completed first.</li><li><strong>Create the Zero Trust policy.</strong> Once the Zero Trust network has been architected, the next step is to define and whitelist which resources should have access to the others. The questions of “who, what, when, where, why and how” work well here.</li><li><strong>Monitor and maintain the network.</strong> Lastly, the final step is to ensure logging is enabled, all logs are reviewed (both internal and external) and data is analyzed in a timely manner. Visibility should be all way through Layer 7 of the OSI model.</li></ol><p>Upon completing the first protect surface for your organization, this model can be iteratively and easily expanded to other data sets, applications, assets and services from legacy or modern systems. It can be implemented in a cost-effective and non-destructive way.</p><p><strong>Zero Trust and the Future of Work</strong></p><p>Security objectives and best practices to keep mind while designing and building a Zero Trust environment that serves today’s needs and into the future should include these considerations:</p><ul class=\"BlogPreventList\"><li><strong>Think Anytime, Anywhere. </strong>Secure applications, data, users, devices and network traffic through persistent protection, all with the same degree of effectiveness regardless of location. The user experience should be frictionless and easy to deploy.</li><li><strong>Build for Resilience. </strong>As organizations mature their continuity of operations and crisis management plans, a Zero Trust architecture allows organizations to adapt and move quickly to changing environments and realities, in addition to providing strong cybersecurity best practices.</li></ul><p>Zero Trust means different things to different organizations. It is an approach, a framework. Zero Trust is not a specific tool or set of tools. It can be adapted to many use cases, particularly for remote work, teleworking, and BYOD (Bring Your Own Device) typically a practice still not considered secure, and it can be implement one defined protect surface at a time.</p><p>As senior leaders we are asked to be more strategic and drive revenue through technologies and integration as the business goals and needs expand. At the same time, cybersecurity is an incredibly complex problem to solve from both the end user side and in the data center as attack surfaces become even broader. It’s no longer a question of “if” a breach will happen but “when.” Zero Trust provides a scalable adaptive solution.</p><p>Author:</p><p>Laszlo S. Gonc, CISSP, First Senior Fellow, DivIHN Cybersecurity Center of Excellence</p>','','full_html'),('featured_article',0,51,387,'en',0,'<!-- Headline with stylized first letter --><div class=\"headline\"><span class=\"first-letter\">N</span>ever trust, always verify.</div><!-- Body Paragraph --><p>The traditional idea of the well-defined network perimeter is outdated in a world where organizations are increasingly moving applications and data to cloud services, embracing a highly mobile remote workforce, and dealing with a significantly growing number of devices attaching to the corporate network. Many digital transformation initiatives are forcing businesses to rethink their enterprise security architecture. As organizations go through these changes, security concerns are paramount with cyber attacks on the rise.</p><!-- Quoted statistic --><p class=\"quote\"><em>“In March, there was a 30,000% increase in COVID-19 related attacks and malware.”(Source: Zscaler)</em></p><!-- Follow-up content --><p>&nbsp;</p><p>Today’s new reality in an increasingly perimeter-less world begs the question: how does an organization protect itself? The Zero Trust framework presumes bad actors are already in the network. The approach deploys multiple strategies such as (a) identity and access management, (b) multifactor authentication, (c) encryption, (d) risk scoring, and (e)role-based access controls to enforce strict governance policies. These policies provide user access to specific applications and resources aligned with their roles and responsibilities. This limits not only <em>north-south</em> movement in the network, but also <em>east-west</em> lateral movement across the network.</p><p><strong>Four (4) Things You Need To Know</strong></p><p>The methodologies that enable Zero Trust accomplish five (5) core tasks:</p><ol><li><p><strong>Micro-segmentation.</strong> Micro-segmentation is a method of creating secure zones in data centers, cloud deployments, and even applications, allowing organizations to isolate workloads from one another and secure them individually. It is aimed at making network security more granular. Using micro-segmentation, files in a network can be placed in separate secure zones. A user or program with access to one of those zones will not be able to access any of the other zones without separate authorization, tying security to individual workloads.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust_0.png\" data-entity-uuid=\"64a65fd7-9658-44dd-8310-feaeb8c99e1c\" data-entity-type=\"file\" width=\"300\" height=\"249\"></p></li><li><strong>Least Privilege Access</strong>. Zero-Trust is based on granting least privilege access. However, the access is only granted on verification of multiple contextual environmental variables at each request, such as: (a) who is requesting access, (b) what is the context of the request, and (c) what is the risk of access to the environment. Zero-trust no longer provides trust to anyone or anything connecting to valued systems. It treats equally traffic originating from within the network as well traffic arriving externally – users, devices, even API’s are all treated the same. This enables minimization of the attack surface, it improves audit, and reduces the risk and costs of security breaches.</li><li><strong>Multi-factor Authentication (MFA)</strong>. MFA is a core value of zero trust security. It means simply requiring more than one piece of evidence to authenticate a user, entering a password alone is not enough to gain access. The use of two-factor authorization—the addition of a code sent to another device — is now widely used and accepted by consumers and stakeholders. Other forms of authentication — biometrics — are emerging to bolster identity verification.</li><li><p><strong>Application Behavior and Visibility</strong>. A benefit of micro-segmentation is the enablement of application security that builds in policies defining allowed behavior and protection for each individual build. As example, ideation through development occurs in an environment isolated from the rest of the network so that any breach of an application will be contained and prevented from spreading into the rest of the network. Visibility into application behavior on devices that access applications also needs to be taken into account so anomalous activity can be detected and action can be taken more quickly.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust-2png.png\" data-entity-uuid=\"556637b5-cc8f-496e-b4c5-0ed550ac54b1\" data-entity-type=\"file\" width=\"918\" height=\"522\"></p></li></ol><p><strong>Designing and Building</strong></p><p>Use a five (5) step model for implementing and maintaining a Zero Trust network:</p><ol><li><strong>Define the protect surface.</strong> In the Zero Trust defining the scope of the protect surface in manageable portions is critically important. The protect surface should include the critical</li><li><strong>Map the transactions flows.</strong> How traffic moves across a network should define how it is protected. Therefore it is essential to gain contextual insight on the interdependencies of your data, application, assets and services – the DAAS. Documenting the interaction between specific resources allows the ability to properly enforce controls. It also provides valuable context to ensure the controls help protect the data.</li><li><strong>Architect a Zero Trust network.</strong> Zero Trust networks are built from the ground up, architected and customized around specific requirements for the protect surfaces. However it is imperative that the protect surface and transaction flow maps be completed first.</li><li><strong>Create the Zero Trust policy.</strong> Once the Zero Trust network has been architected, the next step is to define and whitelist which resources should have access to the others. The questions of “who, what, when, where, why and how” work well here.</li><li><strong>Monitor and maintain the network.</strong> Lastly, the final step is to ensure logging is enabled, all logs are reviewed (both internal and external) and data is analyzed in a timely manner. Visibility should be all way through Layer 7 of the OSI model.</li></ol><p>Upon completing the first protect surface for your organization, this model can be iteratively and easily expanded to other data sets, applications, assets and services from legacy or modern systems. It can be implemented in a cost-effective and non-destructive way.</p><p><strong>Zero Trust and the Future of Work</strong></p><p>Security objectives and best practices to keep mind while designing and building a Zero Trust environment that serves today’s needs and into the future should include these considerations:</p><ul class=\"BlogPreventList\"><li><strong>Think Anytime, Anywhere. </strong>Secure applications, data, users, devices and network traffic through persistent protection, all with the same degree of effectiveness regardless of location. The user experience should be frictionless and easy to deploy.</li><li><strong>Build for Resilience. </strong>As organizations mature their continuity of operations and crisis management plans, a Zero Trust architecture allows organizations to adapt and move quickly to changing environments and realities, in addition to providing strong cybersecurity best practices.</li></ul><p>Zero Trust means different things to different organizations. It is an approach, a framework. Zero Trust is not a specific tool or set of tools. It can be adapted to many use cases, particularly for remote work, teleworking, and BYOD (Bring Your Own Device) typically a practice still not considered secure, and it can be implement one defined protect surface at a time.</p><p>As senior leaders we are asked to be more strategic and drive revenue through technologies and integration as the business goals and needs expand. At the same time, cybersecurity is an incredibly complex problem to solve from both the end user side and in the data center as attack surfaces become even broader. It’s no longer a question of “if” a breach will happen but “when.” Zero Trust provides a scalable adaptive solution.</p><p>Author:</p><p>Laszlo S. Gonc, CISSP, First Senior Fellow, DivIHN Cybersecurity Center of Excellence</p>','','full_html'),('featured_article',0,51,453,'en',0,'<!-- Headline with stylized first letter --><div class=\"headline\"><span class=\"first-letter\">N</span>ever trust, always verify.</div><!-- Body Paragraph --><p>The traditional idea of the well-defined network perimeter is outdated in a world where organizations are increasingly moving applications and data to cloud services, embracing a highly mobile remote workforce, and dealing with a significantly growing number of devices attaching to the corporate network. Many digital transformation initiatives are forcing businesses to rethink their enterprise security architecture. As organizations go through these changes, security concerns are paramount with cyber attacks on the rise.</p><!-- Quoted statistic --><p class=\"quote\"><em>“In March, there was a 30,000% increase in COVID-19 related attacks and malware.”(Source: Zscaler)</em></p><!-- Follow-up content --><p>&nbsp;</p><p>Today’s new reality in an increasingly perimeter-less world begs the question: how does an organization protect itself? The Zero Trust framework presumes bad actors are already in the network. The approach deploys multiple strategies such as (a) identity and access management, (b) multifactor authentication, (c) encryption, (d) risk scoring, and (e)role-based access controls to enforce strict governance policies. These policies provide user access to specific applications and resources aligned with their roles and responsibilities. This limits not only <em>north-south</em> movement in the network, but also <em>east-west</em> lateral movement across the network.</p><p><strong>Four (4) Things You Need To Know</strong></p><p>The methodologies that enable Zero Trust accomplish five (5) core tasks:</p><ol><li><p><strong>Micro-segmentation.</strong> Micro-segmentation is a method of creating secure zones in data centers, cloud deployments, and even applications, allowing organizations to isolate workloads from one another and secure them individually. It is aimed at making network security more granular. Using micro-segmentation, files in a network can be placed in separate secure zones. A user or program with access to one of those zones will not be able to access any of the other zones without separate authorization, tying security to individual workloads.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust_0.png\" data-entity-uuid=\"64a65fd7-9658-44dd-8310-feaeb8c99e1c\" data-entity-type=\"file\" width=\"300\" height=\"249\"></p></li><li><strong>Least Privilege Access</strong>. Zero-Trust is based on granting least privilege access. However, the access is only granted on verification of multiple contextual environmental variables at each request, such as: (a) who is requesting access, (b) what is the context of the request, and (c) what is the risk of access to the environment. Zero-trust no longer provides trust to anyone or anything connecting to valued systems. It treats equally traffic originating from within the network as well traffic arriving externally – users, devices, even API’s are all treated the same. This enables minimization of the attack surface, it improves audit, and reduces the risk and costs of security breaches.</li><li><strong>Multi-factor Authentication (MFA)</strong>. MFA is a core value of zero trust security. It means simply requiring more than one piece of evidence to authenticate a user, entering a password alone is not enough to gain access. The use of two-factor authorization—the addition of a code sent to another device — is now widely used and accepted by consumers and stakeholders. Other forms of authentication — biometrics — are emerging to bolster identity verification.</li><li><p><strong>Application Behavior and Visibility</strong>. A benefit of micro-segmentation is the enablement of application security that builds in policies defining allowed behavior and protection for each individual build. As example, ideation through development occurs in an environment isolated from the rest of the network so that any breach of an application will be contained and prevented from spreading into the rest of the network. Visibility into application behavior on devices that access applications also needs to be taken into account so anomalous activity can be detected and action can be taken more quickly.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust-2png.png\" data-entity-uuid=\"556637b5-cc8f-496e-b4c5-0ed550ac54b1\" data-entity-type=\"file\" width=\"918\" height=\"522\"></p></li></ol><p><strong>Designing and Building</strong></p><p>Use a five (5) step model for implementing and maintaining a Zero Trust network:</p><ol><li><strong>Define the protect surface.</strong> In the Zero Trust defining the scope of the protect surface in manageable portions is critically important. The protect surface should include the critical</li><li><strong>Map the transactions flows.</strong> How traffic moves across a network should define how it is protected. Therefore it is essential to gain contextual insight on the interdependencies of your data, application, assets and services – the DAAS. Documenting the interaction between specific resources allows the ability to properly enforce controls. It also provides valuable context to ensure the controls help protect the data.</li><li><strong>Architect a Zero Trust network.</strong> Zero Trust networks are built from the ground up, architected and customized around specific requirements for the protect surfaces. However it is imperative that the protect surface and transaction flow maps be completed first.</li><li><strong>Create the Zero Trust policy.</strong> Once the Zero Trust network has been architected, the next step is to define and whitelist which resources should have access to the others. The questions of “who, what, when, where, why and how” work well here.</li><li><strong>Monitor and maintain the network.</strong> Lastly, the final step is to ensure logging is enabled, all logs are reviewed (both internal and external) and data is analyzed in a timely manner. Visibility should be all way through Layer 7 of the OSI model.</li></ol><p>Upon completing the first protect surface for your organization, this model can be iteratively and easily expanded to other data sets, applications, assets and services from legacy or modern systems. It can be implemented in a cost-effective and non-destructive way.</p><p><strong>Zero Trust and the Future of Work</strong></p><p>Security objectives and best practices to keep mind while designing and building a Zero Trust environment that serves today’s needs and into the future should include these considerations:</p><ul class=\"BlogPreventList\"><li><strong>Think Anytime, Anywhere. </strong>Secure applications, data, users, devices and network traffic through persistent protection, all with the same degree of effectiveness regardless of location. The user experience should be frictionless and easy to deploy.</li><li><strong>Build for Resilience. </strong>As organizations mature their continuity of operations and crisis management plans, a Zero Trust architecture allows organizations to adapt and move quickly to changing environments and realities, in addition to providing strong cybersecurity best practices.</li></ul><p>Zero Trust means different things to different organizations. It is an approach, a framework. Zero Trust is not a specific tool or set of tools. It can be adapted to many use cases, particularly for remote work, teleworking, and BYOD (Bring Your Own Device) typically a practice still not considered secure, and it can be implement one defined protect surface at a time.</p><p>As senior leaders we are asked to be more strategic and drive revenue through technologies and integration as the business goals and needs expand. At the same time, cybersecurity is an incredibly complex problem to solve from both the end user side and in the data center as attack surfaces become even broader. It’s no longer a question of “if” a breach will happen but “when.” Zero Trust provides a scalable adaptive solution.</p><p>Author:</p><p>Laszlo S. Gonc, CISSP, First Senior Fellow, DivIHN Cybersecurity Center of Excellence</p>','','full_html'),('featured_article',0,51,520,'en',0,'<!-- Headline with stylized first letter --><div class=\"headline\"><span class=\"first-letter\">N</span>ever trust, always verify.</div><!-- Body Paragraph --><p>The traditional idea of the well-defined network perimeter is outdated in a world where organizations are increasingly moving applications and data to cloud services, embracing a highly mobile remote workforce, and dealing with a significantly growing number of devices attaching to the corporate network. Many digital transformation initiatives are forcing businesses to rethink their enterprise security architecture. As organizations go through these changes, security concerns are paramount with cyber attacks on the rise.</p><!-- Quoted statistic --><p class=\"quote\"><em>“In March, there was a 30,000% increase in COVID-19 related attacks and malware.”(Source: Zscaler)</em></p><!-- Follow-up content --><p>&nbsp;</p><p>Today’s new reality in an increasingly perimeter-less world begs the question: how does an organization protect itself? The Zero Trust framework presumes bad actors are already in the network. The approach deploys multiple strategies such as (a) identity and access management, (b) multifactor authentication, (c) encryption, (d) risk scoring, and (e)role-based access controls to enforce strict governance policies. These policies provide user access to specific applications and resources aligned with their roles and responsibilities. This limits not only <em>north-south</em> movement in the network, but also <em>east-west</em> lateral movement across the network.</p><p><strong>Four (4) Things You Need To Know</strong></p><p>The methodologies that enable Zero Trust accomplish five (5) core tasks:</p><ol><li><p><strong>Micro-segmentation.</strong> Micro-segmentation is a method of creating secure zones in data centers, cloud deployments, and even applications, allowing organizations to isolate workloads from one another and secure them individually. It is aimed at making network security more granular. Using micro-segmentation, files in a network can be placed in separate secure zones. A user or program with access to one of those zones will not be able to access any of the other zones without separate authorization, tying security to individual workloads.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust_0.png\" data-entity-uuid=\"64a65fd7-9658-44dd-8310-feaeb8c99e1c\" data-entity-type=\"file\" width=\"300\" height=\"249\"></p></li><li><strong>Least Privilege Access</strong>. Zero-Trust is based on granting least privilege access. However, the access is only granted on verification of multiple contextual environmental variables at each request, such as: (a) who is requesting access, (b) what is the context of the request, and (c) what is the risk of access to the environment. Zero-trust no longer provides trust to anyone or anything connecting to valued systems. It treats equally traffic originating from within the network as well traffic arriving externally – users, devices, even API’s are all treated the same. This enables minimization of the attack surface, it improves audit, and reduces the risk and costs of security breaches.</li><li><strong>Multi-factor Authentication (MFA)</strong>. MFA is a core value of zero trust security. It means simply requiring more than one piece of evidence to authenticate a user, entering a password alone is not enough to gain access. The use of two-factor authorization—the addition of a code sent to another device — is now widely used and accepted by consumers and stakeholders. Other forms of authentication — biometrics — are emerging to bolster identity verification.</li><li><p><strong>Application Behavior and Visibility</strong>. A benefit of micro-segmentation is the enablement of application security that builds in policies defining allowed behavior and protection for each individual build. As example, ideation through development occurs in an environment isolated from the rest of the network so that any breach of an application will be contained and prevented from spreading into the rest of the network. Visibility into application behavior on devices that access applications also needs to be taken into account so anomalous activity can be detected and action can be taken more quickly.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust-2png.png\" data-entity-uuid=\"556637b5-cc8f-496e-b4c5-0ed550ac54b1\" data-entity-type=\"file\" width=\"918\" height=\"522\"></p></li></ol><p><strong>Designing and Building</strong></p><p>Use a five (5) step model for implementing and maintaining a Zero Trust network:</p><ol><li><strong>Define the protect surface.</strong> In the Zero Trust defining the scope of the protect surface in manageable portions is critically important. The protect surface should include the critical</li><li><strong>Map the transactions flows.</strong> How traffic moves across a network should define how it is protected. Therefore it is essential to gain contextual insight on the interdependencies of your data, application, assets and services – the DAAS. Documenting the interaction between specific resources allows the ability to properly enforce controls. It also provides valuable context to ensure the controls help protect the data.</li><li><strong>Architect a Zero Trust network.</strong> Zero Trust networks are built from the ground up, architected and customized around specific requirements for the protect surfaces. However it is imperative that the protect surface and transaction flow maps be completed first.</li><li><strong>Create the Zero Trust policy.</strong> Once the Zero Trust network has been architected, the next step is to define and whitelist which resources should have access to the others. The questions of “who, what, when, where, why and how” work well here.</li><li><strong>Monitor and maintain the network.</strong> Lastly, the final step is to ensure logging is enabled, all logs are reviewed (both internal and external) and data is analyzed in a timely manner. Visibility should be all way through Layer 7 of the OSI model.</li></ol><p>Upon completing the first protect surface for your organization, this model can be iteratively and easily expanded to other data sets, applications, assets and services from legacy or modern systems. It can be implemented in a cost-effective and non-destructive way.</p><p><strong>Zero Trust and the Future of Work</strong></p><p>Security objectives and best practices to keep mind while designing and building a Zero Trust environment that serves today’s needs and into the future should include these considerations:</p><ul class=\"BlogPreventList\"><li><strong>Think Anytime, Anywhere. </strong>Secure applications, data, users, devices and network traffic through persistent protection, all with the same degree of effectiveness regardless of location. The user experience should be frictionless and easy to deploy.</li><li><strong>Build for Resilience. </strong>As organizations mature their continuity of operations and crisis management plans, a Zero Trust architecture allows organizations to adapt and move quickly to changing environments and realities, in addition to providing strong cybersecurity best practices.</li></ul><p>Zero Trust means different things to different organizations. It is an approach, a framework. Zero Trust is not a specific tool or set of tools. It can be adapted to many use cases, particularly for remote work, teleworking, and BYOD (Bring Your Own Device) typically a practice still not considered secure, and it can be implement one defined protect surface at a time.</p><p>As senior leaders we are asked to be more strategic and drive revenue through technologies and integration as the business goals and needs expand. At the same time, cybersecurity is an incredibly complex problem to solve from both the end user side and in the data center as attack surfaces become even broader. It’s no longer a question of “if” a breach will happen but “when.” Zero Trust provides a scalable adaptive solution.</p><p>Author:</p><p>Laszlo S. Gonc, CISSP, First Senior Fellow, DivIHN Cybersecurity Center of Excellence</p>','','full_html'),('featured_article',0,51,536,'en',0,'<!-- Headline with stylized first letter --><div class=\"headline\"><span class=\"first-letter\">N</span>ever trust, always verify.</div><!-- Body Paragraph --><p>The traditional idea of the well-defined network perimeter is outdated in a world where organizations are increasingly moving applications and data to cloud services, embracing a highly mobile remote workforce, and dealing with a significantly growing number of devices attaching to the corporate network. Many digital transformation initiatives are forcing businesses to rethink their enterprise security architecture. As organizations go through these changes, security concerns are paramount with cyber attacks on the rise.</p><!-- Quoted statistic --><p class=\"quote\"><em>“In March, there was a 30,000% increase in COVID-19 related attacks and malware.”(Source: Zscaler)</em></p><!-- Follow-up content --><p>&nbsp;</p><p>Today’s new reality in an increasingly perimeter-less world begs the question: how does an organization protect itself? The Zero Trust framework presumes bad actors are already in the network. The approach deploys multiple strategies such as (a) identity and access management, (b) multifactor authentication, (c) encryption, (d) risk scoring, and (e)role-based access controls to enforce strict governance policies. These policies provide user access to specific applications and resources aligned with their roles and responsibilities. This limits not only <em>north-south</em> movement in the network, but also <em>east-west</em> lateral movement across the network.</p><p><strong>Four (4) Things You Need To Know</strong></p><p>The methodologies that enable Zero Trust accomplish five (5) core tasks:</p><ol><li><p><strong>Micro-segmentation.</strong> Micro-segmentation is a method of creating secure zones in data centers, cloud deployments, and even applications, allowing organizations to isolate workloads from one another and secure them individually. It is aimed at making network security more granular. Using micro-segmentation, files in a network can be placed in separate secure zones. A user or program with access to one of those zones will not be able to access any of the other zones without separate authorization, tying security to individual workloads.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust_0.png\" data-entity-uuid=\"64a65fd7-9658-44dd-8310-feaeb8c99e1c\" data-entity-type=\"file\" width=\"300\" height=\"249\"></p></li><li><strong>Least Privilege Access</strong>. Zero-Trust is based on granting least privilege access. However, the access is only granted on verification of multiple contextual environmental variables at each request, such as: (a) who is requesting access, (b) what is the context of the request, and (c) what is the risk of access to the environment. Zero-trust no longer provides trust to anyone or anything connecting to valued systems. It treats equally traffic originating from within the network as well traffic arriving externally – users, devices, even API’s are all treated the same. This enables minimization of the attack surface, it improves audit, and reduces the risk and costs of security breaches.</li><li><strong>Multi-factor Authentication (MFA)</strong>. MFA is a core value of zero trust security. It means simply requiring more than one piece of evidence to authenticate a user, entering a password alone is not enough to gain access. The use of two-factor authorization—the addition of a code sent to another device — is now widely used and accepted by consumers and stakeholders. Other forms of authentication — biometrics — are emerging to bolster identity verification.</li><li><p><strong>Application Behavior and Visibility</strong>. A benefit of micro-segmentation is the enablement of application security that builds in policies defining allowed behavior and protection for each individual build. As example, ideation through development occurs in an environment isolated from the rest of the network so that any breach of an application will be contained and prevented from spreading into the rest of the network. Visibility into application behavior on devices that access applications also needs to be taken into account so anomalous activity can be detected and action can be taken more quickly.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust-2png.png\" data-entity-uuid=\"556637b5-cc8f-496e-b4c5-0ed550ac54b1\" data-entity-type=\"file\" width=\"918\" height=\"522\"></p></li></ol><p><strong>Designing and Building</strong></p><p>Use a five (5) step model for implementing and maintaining a Zero Trust network:</p><ol><li><strong>Define the protect surface.</strong> In the Zero Trust defining the scope of the protect surface in manageable portions is critically important. The protect surface should include the critical</li><li><strong>Map the transactions flows.</strong> How traffic moves across a network should define how it is protected. Therefore it is essential to gain contextual insight on the interdependencies of your data, application, assets and services – the DAAS. Documenting the interaction between specific resources allows the ability to properly enforce controls. It also provides valuable context to ensure the controls help protect the data.</li><li><strong>Architect a Zero Trust network.</strong> Zero Trust networks are built from the ground up, architected and customized around specific requirements for the protect surfaces. However it is imperative that the protect surface and transaction flow maps be completed first.</li><li><strong>Create the Zero Trust policy.</strong> Once the Zero Trust network has been architected, the next step is to define and whitelist which resources should have access to the others. The questions of “who, what, when, where, why and how” work well here.</li><li><strong>Monitor and maintain the network.</strong> Lastly, the final step is to ensure logging is enabled, all logs are reviewed (both internal and external) and data is analyzed in a timely manner. Visibility should be all way through Layer 7 of the OSI model.</li></ol><p>Upon completing the first protect surface for your organization, this model can be iteratively and easily expanded to other data sets, applications, assets and services from legacy or modern systems. It can be implemented in a cost-effective and non-destructive way.</p><p><strong>Zero Trust and the Future of Work</strong></p><p>Security objectives and best practices to keep mind while designing and building a Zero Trust environment that serves today’s needs and into the future should include these considerations:</p><ul class=\"BlogPreventList\"><li><strong>Think Anytime, Anywhere. </strong>Secure applications, data, users, devices and network traffic through persistent protection, all with the same degree of effectiveness regardless of location. The user experience should be frictionless and easy to deploy.</li><li><strong>Build for Resilience. </strong>As organizations mature their continuity of operations and crisis management plans, a Zero Trust architecture allows organizations to adapt and move quickly to changing environments and realities, in addition to providing strong cybersecurity best practices.</li></ul><p>Zero Trust means different things to different organizations. It is an approach, a framework. Zero Trust is not a specific tool or set of tools. It can be adapted to many use cases, particularly for remote work, teleworking, and BYOD (Bring Your Own Device) typically a practice still not considered secure, and it can be implement one defined protect surface at a time.</p><p>As senior leaders we are asked to be more strategic and drive revenue through technologies and integration as the business goals and needs expand. At the same time, cybersecurity is an incredibly complex problem to solve from both the end user side and in the data center as attack surfaces become even broader. It’s no longer a question of “if” a breach will happen but “when.” Zero Trust provides a scalable adaptive solution.</p><p>Author:</p><p>Laszlo S. Gonc, CISSP, First Senior Fellow, DivIHN Cybersecurity Center of Excellence</p>','','full_html'),('featured_article',0,51,611,'en',0,'<!-- Headline with stylized first letter --><div class=\"headline\"><span class=\"first-letter\">N</span>ever trust, always verify.</div><!-- Body Paragraph --><p>The traditional idea of the well-defined network perimeter is outdated in a world where organizations are increasingly moving applications and data to cloud services, embracing a highly mobile remote workforce, and dealing with a significantly growing number of devices attaching to the corporate network. Many digital transformation initiatives are forcing businesses to rethink their enterprise security architecture. As organizations go through these changes, security concerns are paramount with cyber attacks on the rise.</p><!-- Quoted statistic --><p class=\"quote\"><em>“In March, there was a 30,000% increase in COVID-19 related attacks and malware.”(Source: Zscaler)</em></p><!-- Follow-up content --><p>&nbsp;</p><p>Today’s new reality in an increasingly perimeter-less world begs the question: how does an organization protect itself? The Zero Trust framework presumes bad actors are already in the network. The approach deploys multiple strategies such as (a) identity and access management, (b) multifactor authentication, (c) encryption, (d) risk scoring, and (e)role-based access controls to enforce strict governance policies. These policies provide user access to specific applications and resources aligned with their roles and responsibilities. This limits not only <em>north-south</em> movement in the network, but also <em>east-west</em> lateral movement across the network.</p><p><strong>Four (4) Things You Need To Know</strong></p><p>The methodologies that enable Zero Trust accomplish five (5) core tasks:</p><ol><li><p><strong>Micro-segmentation.</strong> Micro-segmentation is a method of creating secure zones in data centers, cloud deployments, and even applications, allowing organizations to isolate workloads from one another and secure them individually. It is aimed at making network security more granular. Using micro-segmentation, files in a network can be placed in separate secure zones. A user or program with access to one of those zones will not be able to access any of the other zones without separate authorization, tying security to individual workloads.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust_0.png\" data-entity-uuid=\"64a65fd7-9658-44dd-8310-feaeb8c99e1c\" data-entity-type=\"file\" width=\"300\" height=\"249\"></p></li><li><strong>Least Privilege Access</strong>. Zero-Trust is based on granting least privilege access. However, the access is only granted on verification of multiple contextual environmental variables at each request, such as: (a) who is requesting access, (b) what is the context of the request, and (c) what is the risk of access to the environment. Zero-trust no longer provides trust to anyone or anything connecting to valued systems. It treats equally traffic originating from within the network as well traffic arriving externally – users, devices, even API’s are all treated the same. This enables minimization of the attack surface, it improves audit, and reduces the risk and costs of security breaches.</li><li><strong>Multi-factor Authentication (MFA)</strong>. MFA is a core value of zero trust security. It means simply requiring more than one piece of evidence to authenticate a user, entering a password alone is not enough to gain access. The use of two-factor authorization—the addition of a code sent to another device — is now widely used and accepted by consumers and stakeholders. Other forms of authentication — biometrics — are emerging to bolster identity verification.</li><li><p><strong>Application Behavior and Visibility</strong>. A benefit of micro-segmentation is the enablement of application security that builds in policies defining allowed behavior and protection for each individual build. As example, ideation through development occurs in an environment isolated from the rest of the network so that any breach of an application will be contained and prevented from spreading into the rest of the network. Visibility into application behavior on devices that access applications also needs to be taken into account so anomalous activity can be detected and action can be taken more quickly.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust-2png.png\" data-entity-uuid=\"556637b5-cc8f-496e-b4c5-0ed550ac54b1\" data-entity-type=\"file\" width=\"918\" height=\"522\"></p></li></ol><p><strong>Designing and Building</strong></p><p>Use a five (5) step model for implementing and maintaining a Zero Trust network:</p><ol><li><strong>Define the protect surface.</strong> In the Zero Trust defining the scope of the protect surface in manageable portions is critically important. The protect surface should include the critical</li><li><strong>Map the transactions flows.</strong> How traffic moves across a network should define how it is protected. Therefore it is essential to gain contextual insight on the interdependencies of your data, application, assets and services – the DAAS. Documenting the interaction between specific resources allows the ability to properly enforce controls. It also provides valuable context to ensure the controls help protect the data.</li><li><strong>Architect a Zero Trust network.</strong> Zero Trust networks are built from the ground up, architected and customized around specific requirements for the protect surfaces. However it is imperative that the protect surface and transaction flow maps be completed first.</li><li><strong>Create the Zero Trust policy.</strong> Once the Zero Trust network has been architected, the next step is to define and whitelist which resources should have access to the others. The questions of “who, what, when, where, why and how” work well here.</li><li><strong>Monitor and maintain the network.</strong> Lastly, the final step is to ensure logging is enabled, all logs are reviewed (both internal and external) and data is analyzed in a timely manner. Visibility should be all way through Layer 7 of the OSI model.</li></ol><p>Upon completing the first protect surface for your organization, this model can be iteratively and easily expanded to other data sets, applications, assets and services from legacy or modern systems. It can be implemented in a cost-effective and non-destructive way.</p><p><strong>Zero Trust and the Future of Work</strong></p><p>Security objectives and best practices to keep mind while designing and building a Zero Trust environment that serves today’s needs and into the future should include these considerations:</p><ul class=\"BlogPreventList\"><li><strong>Think Anytime, Anywhere. </strong>Secure applications, data, users, devices and network traffic through persistent protection, all with the same degree of effectiveness regardless of location. The user experience should be frictionless and easy to deploy.</li><li><strong>Build for Resilience. </strong>As organizations mature their continuity of operations and crisis management plans, a Zero Trust architecture allows organizations to adapt and move quickly to changing environments and realities, in addition to providing strong cybersecurity best practices.</li></ul><p>Zero Trust means different things to different organizations. It is an approach, a framework. Zero Trust is not a specific tool or set of tools. It can be adapted to many use cases, particularly for remote work, teleworking, and BYOD (Bring Your Own Device) typically a practice still not considered secure, and it can be implement one defined protect surface at a time.</p><p>As senior leaders we are asked to be more strategic and drive revenue through technologies and integration as the business goals and needs expand. At the same time, cybersecurity is an incredibly complex problem to solve from both the end user side and in the data center as attack surfaces become even broader. It’s no longer a question of “if” a breach will happen but “when.” Zero Trust provides a scalable adaptive solution.</p><p>Author:</p><p>Laszlo S. Gonc, CISSP, First Senior Fellow, DivIHN Cybersecurity Center of Excellence</p>','','full_html'),('featured_article',0,51,765,'en',0,'<!-- Headline with stylized first letter --><div class=\"headline\"><span class=\"first-letter\">N</span>ever trust, always verify.</div><!-- Body Paragraph --><p>The traditional idea of the well-defined network perimeter is outdated in a world where organizations are increasingly moving applications and data to cloud services, embracing a highly mobile remote workforce, and dealing with a significantly growing number of devices attaching to the corporate network. Many digital transformation initiatives are forcing businesses to rethink their enterprise security architecture. As organizations go through these changes, security concerns are paramount with cyber attacks on the rise.</p><!-- Quoted statistic --><p class=\"quote\"><em>“In March, there was a 30,000% increase in COVID-19 related attacks and malware.”(Source: Zscaler)</em></p><!-- Follow-up content --><p>&nbsp;</p><p>Today’s new reality in an increasingly perimeter-less world begs the question: how does an organization protect itself? The Zero Trust framework presumes bad actors are already in the network. The approach deploys multiple strategies such as (a) identity and access management, (b) multifactor authentication, (c) encryption, (d) risk scoring, and (e)role-based access controls to enforce strict governance policies. These policies provide user access to specific applications and resources aligned with their roles and responsibilities. This limits not only <em>north-south</em> movement in the network, but also <em>east-west</em> lateral movement across the network.</p><p><strong>Four (4) Things You Need To Know</strong></p><p>The methodologies that enable Zero Trust accomplish five (5) core tasks:</p><ol><li><p><strong>Micro-segmentation.</strong> Micro-segmentation is a method of creating secure zones in data centers, cloud deployments, and even applications, allowing organizations to isolate workloads from one another and secure them individually. It is aimed at making network security more granular. Using micro-segmentation, files in a network can be placed in separate secure zones. A user or program with access to one of those zones will not be able to access any of the other zones without separate authorization, tying security to individual workloads.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust_0.png\" data-entity-uuid=\"64a65fd7-9658-44dd-8310-feaeb8c99e1c\" data-entity-type=\"file\" width=\"300\" height=\"249\" alt=\"micro segmentation \"></p></li><li><strong>Least Privilege Access</strong>. Zero-Trust is based on granting least privilege access. However, the access is only granted on verification of multiple contextual environmental variables at each request, such as: (a) who is requesting access, (b) what is the context of the request, and (c) what is the risk of access to the environment. Zero-trust no longer provides trust to anyone or anything connecting to valued systems. It treats equally traffic originating from within the network as well traffic arriving externally – users, devices, even API’s are all treated the same. This enables minimization of the attack surface, it improves audit, and reduces the risk and costs of security breaches.</li><li><strong>Multi-factor Authentication (MFA)</strong>. MFA is a core value of zero trust security. It means simply requiring more than one piece of evidence to authenticate a user, entering a password alone is not enough to gain access. The use of two-factor authorization—the addition of a code sent to another device — is now widely used and accepted by consumers and stakeholders. Other forms of authentication — biometrics — are emerging to bolster identity verification.</li><li><p><strong>Application Behavior and Visibility</strong>. A benefit of micro-segmentation is the enablement of application security that builds in policies defining allowed behavior and protection for each individual build. As example, ideation through development occurs in an environment isolated from the rest of the network so that any breach of an application will be contained and prevented from spreading into the rest of the network. Visibility into application behavior on devices that access applications also needs to be taken into account so anomalous activity can be detected and action can be taken more quickly.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust-2png.png\" data-entity-uuid=\"556637b5-cc8f-496e-b4c5-0ed550ac54b1\" data-entity-type=\"file\" width=\"918\" height=\"522\" alt=\"zero trust architecture \"></p></li></ol><p><strong>Designing and Building</strong></p><p>Use a five (5) step model for implementing and maintaining a Zero Trust network:</p><ol><li><strong>Define the protect surface.</strong> In the Zero Trust defining the scope of the protect surface in manageable portions is critically important. The protect surface should include the critical</li><li><strong>Map the transactions flows.</strong> How traffic moves across a network should define how it is protected. Therefore it is essential to gain contextual insight on the interdependencies of your data, application, assets and services – the DAAS. Documenting the interaction between specific resources allows the ability to properly enforce controls. It also provides valuable context to ensure the controls help protect the data.</li><li><strong>Architect a Zero Trust network.</strong> Zero Trust networks are built from the ground up, architected and customized around specific requirements for the protect surfaces. However it is imperative that the protect surface and transaction flow maps be completed first.</li><li><strong>Create the Zero Trust policy.</strong> Once the Zero Trust network has been architected, the next step is to define and whitelist which resources should have access to the others. The questions of “who, what, when, where, why and how” work well here.</li><li><strong>Monitor and maintain the network.</strong> Lastly, the final step is to ensure logging is enabled, all logs are reviewed (both internal and external) and data is analyzed in a timely manner. Visibility should be all way through Layer 7 of the OSI model.</li></ol><p>Upon completing the first protect surface for your organization, this model can be iteratively and easily expanded to other data sets, applications, assets and services from legacy or modern systems. It can be implemented in a cost-effective and non-destructive way.</p><p><strong>Zero Trust and the Future of Work</strong></p><p>Security objectives and best practices to keep mind while designing and building a Zero Trust environment that serves today’s needs and into the future should include these considerations:</p><ul class=\"BlogPreventList\"><li><strong>Think Anytime, Anywhere. </strong>Secure applications, data, users, devices and network traffic through persistent protection, all with the same degree of effectiveness regardless of location. The user experience should be frictionless and easy to deploy.</li><li><strong>Build for Resilience. </strong>As organizations mature their continuity of operations and crisis management plans, a Zero Trust architecture allows organizations to adapt and move quickly to changing environments and realities, in addition to providing strong cybersecurity best practices.</li></ul><p>Zero Trust means different things to different organizations. It is an approach, a framework. Zero Trust is not a specific tool or set of tools. It can be adapted to many use cases, particularly for remote work, teleworking, and BYOD (Bring Your Own Device) typically a practice still not considered secure, and it can be implement one defined protect surface at a time.</p><p>As senior leaders we are asked to be more strategic and drive revenue through technologies and integration as the business goals and needs expand. At the same time, cybersecurity is an incredibly complex problem to solve from both the end user side and in the data center as attack surfaces become even broader. It’s no longer a question of “if” a breach will happen but “when.” Zero Trust provides a scalable adaptive solution.</p><p>Author:</p><p>Laszlo S. Gonc, CISSP, First Senior Fellow, DivIHN Cybersecurity Center of Excellence</p>','','full_html'),('featured_article',0,51,847,'en',0,'<!-- Headline with stylized first letter --><div class=\"headline\"><span class=\"first-letter\">N</span>ever trust, always verify.</div><!-- Body Paragraph --><p>The traditional idea of the well-defined network perimeter is outdated in a world where organizations are increasingly moving applications and data to cloud services, embracing a highly mobile remote workforce, and dealing with a significantly growing number of devices attaching to the corporate network. Many digital transformation initiatives are forcing businesses to rethink their enterprise security architecture. As organizations go through these changes, security concerns are paramount with cyber attacks on the rise.</p><!-- Quoted statistic --><p class=\"quote\"><em>“In March, there was a 30,000% increase in COVID-19 related attacks and malware.”(Source: Zscaler)</em></p><!-- Follow-up content --><p>&nbsp;</p><p>Today’s new reality in an increasingly perimeter-less world begs the question: how does an organization protect itself? The Zero Trust framework presumes bad actors are already in the network. The approach deploys multiple strategies such as (a) identity and access management, (b) multifactor authentication, (c) encryption, (d) risk scoring, and (e)role-based access controls to enforce strict governance policies. These policies provide user access to specific applications and resources aligned with their roles and responsibilities. This limits not only <em>north-south</em> movement in the network, but also <em>east-west</em> lateral movement across the network.</p><p><strong>Four (4) Things You Need To Know</strong></p><p>The methodologies that enable Zero Trust accomplish five (5) core tasks:</p><ol><li><p><strong>Micro-segmentation.</strong> Micro-segmentation is a method of creating secure zones in data centers, cloud deployments, and even applications, allowing organizations to isolate workloads from one another and secure them individually. It is aimed at making network security more granular. Using micro-segmentation, files in a network can be placed in separate secure zones. A user or program with access to one of those zones will not be able to access any of the other zones without separate authorization, tying security to individual workloads.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust_0.png\" data-entity-uuid=\"64a65fd7-9658-44dd-8310-feaeb8c99e1c\" data-entity-type=\"file\" alt=\"micro segmentation \" width=\"300\" height=\"249\"></p></li><li><strong>Least Privilege Access</strong>. Zero-Trust is based on granting least privilege access. However, the access is only granted on verification of multiple contextual environmental variables at each request, such as: (a) who is requesting access, (b) what is the context of the request, and (c) what is the risk of access to the environment. Zero-trust no longer provides trust to anyone or anything connecting to valued systems. It treats equally traffic originating from within the network as well traffic arriving externally – users, devices, even API’s are all treated the same. This enables minimization of the attack surface, it improves audit, and reduces the risk and costs of security breaches.</li><li><strong>Multi-factor Authentication (MFA)</strong>. MFA is a core value of zero trust security. It means simply requiring more than one piece of evidence to authenticate a user, entering a password alone is not enough to gain access. The use of two-factor authorization—the addition of a code sent to another device — is now widely used and accepted by consumers and stakeholders. Other forms of authentication — biometrics — are emerging to bolster identity verification.</li><li><p><strong>Application Behavior and Visibility</strong>. A benefit of micro-segmentation is the enablement of application security that builds in policies defining allowed behavior and protection for each individual build. As example, ideation through development occurs in an environment isolated from the rest of the network so that any breach of an application will be contained and prevented from spreading into the rest of the network. Visibility into application behavior on devices that access applications also needs to be taken into account so anomalous activity can be detected and action can be taken more quickly.</p><p><img src=\"/sites/default/files/inline-images/Zero-Trust-2png.png\" data-entity-uuid=\"556637b5-cc8f-496e-b4c5-0ed550ac54b1\" data-entity-type=\"file\" alt=\"zero trust architecture \" width=\"918\" height=\"522\"></p></li></ol><p><strong>Designing and Building</strong></p><p>Use a five (5) step model for implementing and maintaining a Zero Trust network:</p><ol><li><strong>Define the protect surface.</strong> In the Zero Trust defining the scope of the protect surface in manageable portions is critically important. The protect surface should include the critical</li><li><strong>Map the transactions flows.</strong> How traffic moves across a network should define how it is protected. Therefore it is essential to gain contextual insight on the interdependencies of your data, application, assets and services – the DAAS. Documenting the interaction between specific resources allows the ability to properly enforce controls. It also provides valuable context to ensure the controls help protect the data.</li><li><strong>Architect a Zero Trust network.</strong> Zero Trust networks are built from the ground up, architected and customized around specific requirements for the protect surfaces. However it is imperative that the protect surface and transaction flow maps be completed first.</li><li><strong>Create the Zero Trust policy.</strong> Once the Zero Trust network has been architected, the next step is to define and whitelist which resources should have access to the others. The questions of “who, what, when, where, why and how” work well here.</li><li><strong>Monitor and maintain the network.</strong> Lastly, the final step is to ensure logging is enabled, all logs are reviewed (both internal and external) and data is analyzed in a timely manner. Visibility should be all way through Layer 7 of the OSI model.</li></ol><p>Upon completing the first protect surface for your organization, this model can be iteratively and easily expanded to other data sets, applications, assets and services from legacy or modern systems. It can be implemented in a cost-effective and non-destructive way.</p><p><strong>Zero Trust and the Future of Work</strong></p><p>Security objectives and best practices to keep mind while designing and building a Zero Trust environment that serves today’s needs and into the future should include these considerations:</p><ul class=\"BlogPreventList\"><li><strong>Think Anytime, Anywhere. </strong>Secure applications, data, users, devices and network traffic through persistent protection, all with the same degree of effectiveness regardless of location. The user experience should be frictionless and easy to deploy.</li><li><strong>Build for Resilience. </strong>As organizations mature their continuity of operations and crisis management plans, a Zero Trust architecture allows organizations to adapt and move quickly to changing environments and realities, in addition to providing strong cybersecurity best practices.</li></ul><p>Zero Trust means different things to different organizations. It is an approach, a framework. Zero Trust is not a specific tool or set of tools. It can be adapted to many use cases, particularly for remote work, teleworking, and BYOD (Bring Your Own Device) typically a practice still not considered secure, and it can be implement one defined protect surface at a time.</p><p>As senior leaders we are asked to be more strategic and drive revenue through technologies and integration as the business goals and needs expand. At the same time, cybersecurity is an incredibly complex problem to solve from both the end user side and in the data center as attack surfaces become even broader. It’s no longer a question of “if” a breach will happen but “when.” Zero Trust provides a scalable adaptive solution.</p><p>Author:</p><p>Laszlo S. Gonc, CISSP, First Senior Fellow, DivIHN Cybersecurity Center of Excellence</p>','','full_html'),('client_success',0,52,99,'en',0,'<p>Our client, a leading independent producer of high-quality, specialty hydrocarbon products, agreed to sell a 50,000 barrel per day refinery, associated delivery terminals, and related assets to an unaffiliated energy company for $435 million.</p>','','full_html'),('client_success',0,52,679,'en',0,'<p>Our client, a leading independent producer of high-quality, specialty hydrocarbon products, agreed to sell a 50,000 barrel per day refinery, associated delivery terminals, and related assets to an unaffiliated energy company for $435 million.</p>','','full_html'),('client_success',0,52,933,'en',0,'<p>Our client, a leading independent producer of high-quality, specialty hydrocarbon products, agreed to sell a 50,000 barrel per day refinery, associated delivery terminals, and related assets to an unaffiliated energy company for $435 million.</p>','','full_html'),('featured_article',0,53,100,'en',0,'<div style=\"font-family:Arial, sans-serif;font-size:16px;white-space:pre-wrap;\">\r\n                                                                                    T\r\n                                                                                    he California Consumer Privacy Act (CCPA) is a new regulation on the horizon that organizations must understand and, if applicable, take action to comply. CCPA becomes effective January 1, 2020 and time is running out.\r\n                                                                                      \r\n</div><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Overview</title><p>Some have compared CCPA to General Data Protection Regulation (GDPR) and, in reality, there is some overlap but there are also several differences. Similar to GDPR, CCPA reinforces a key principle: privacy is a fundamental right and individuals must be able to control the collection and use of their personal data.</p><p>CCPA is focused on giving the consumer rights to know what personal information is collected, to whom it’s sold or disclosed to, and the ability to exercise rights without fearing discrimination. The regulation also imposes responsibility on organizations to process consumer requests, manage risk to consumer personal information, and respond to breaches in a timely manner. The CCPA holds organizations accountable by enforcing fines for violations when they haven’t taken proper steps to protect consumers’ personal information.</p><p>The core consumer rights granted by CCPA are described below. As with any regulation, caveats are in place to promote fairness to both the consumer and organizations collecting and processing their personal information. For example, the right to deletion is granted but there are nine exceptions in place that enable organizations to retain consumers personal information (regulation section 1798.105(d)).</p><p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Consumer Rights under CCPA</title></p><p>Consumer Rights</p><ul><li><strong>Right To Disclosure –</strong> Consumers have a right to know what personal information is collected and whether it’s sold or disclosed and to whom. The Right to disclosure also enables the consumer to receive a copy of their personal data in a standard format.</li><li><strong>Right To Deletion –</strong> Consumers may present a request to delete their personal information retained by the organization.</li><li><strong>Right To Opt-out –</strong> Consumers may exercise the right to say no to the sale of their personal information.</li><li><strong>Right To Nondiscrimination –</strong> When consumers exercise rights enabled by the CCPA, organizations must not apply financial penalties, deny goods and services, or provide an unequal service as a result of their requests.</li></ul><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Applicability</title><p>CCPA is applicable to for profit organizations collecting personal information from California residents and determining what is done with the data. Additionally, one or more of the following must apply for organizations to be subject to CCPA:</p><ul><li>Annual gross revenue is greater than $25mil</li><li>Personal information from &gt;50k consumers, households, or devices</li><li>Derive greater than 50% of annual revenue generated from the sale of consumer’s personal information</li></ul><p>As with any regulation, the definition of personal information influences the impact on organizations need to comply. CCPA defines personal information as information that identifies, describes, or could be reasonably linked to a consumer or household (regulation section 1798.140(o)). Personal information includes the items listed below. The list is not definitive and can change at any time.</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Personal Information under CCPA</title><p>&nbsp;Personal Information</p><ul><li><strong>Identifiers:</strong> real name, social security number, driver’s license number, email address, postal address, IP address, account ID or online identifier.</li><li><strong>Commercial Information:</strong> personal property records, purchase history and patterns</li><li><strong>Biometric Information:</strong> DNA, fingerprint data, and iris scan data</li><li><strong>Electronic Activity:</strong> search history, browsing history, and cookie data</li><li><strong>Geolocation:</strong> GPS data</li><li><strong>Inferences/Profiling:</strong> behavior, personal preferences, psychological state</li></ul><p>Now that we’ve established what CCPA is and how it applies, the question becomes what do you have to do to prepare for compliance. Those organizations familiar with GDPR will notice these steps.</p><p>&nbsp;</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Key Considerations For CCPA Compliance</title><p>&nbsp;Key Considerations For CCPA Compliance</p><p>Assess Applicability – Identify the California residents, devices, and households targeted by the organization. Determine whether the organization must comply with the CCPA.</p><p>Perform Data and Processing Inventory – Understand what personal data collected and processed. Additionally, identify the third parties the data is sold to. This critical step will require significant effort if the data inventory and flows don’t exist. The effort is worth it because the output can be used for other privacy initiatives and improves the organization’s ability to protect the data.</p><p>Assess Policies – Include a description of consumer’s rights in the organization’s privacy policy.</p><p>Update Website – The CCPA requires all web sites to contain a link labeled “Do Not Sell My Information”. This link must be conspicuously placed on the web site home page and must enable the consumer to opt out of the sale of their personal information.</p><p>Support Consumer Rights – Make available two methods to allow consumers to submit requests: toll free number and form on website is acceptable. Additionally, implement processes to intake and satisfy requests in a timely manner (45 days from receipt of verifiable request). The process must include a preliminary assessment to verify the request before fulfillment.</p><p>Apply Technical Measures and Controls – Organizations must implement practices to understand the privacy impact as new software is introduced, scope of data collected changes, or processing of personal data changes. Furthermore, leadings practices must be established to protect personal data in the possession of the organization. Data Protection Impact Assessments (DPIAs) are used to assess privacy implications and establish appropriate security controls to manage risk. This is followed up with leading practices such as encryption to protect the personal data of California consumers. This is important to limit the organization and consumer exposure in the event of a breach or data leakage. Additionally, the CCPA allows the California Attorney General to impose significant penalties if breached or leaked data is unencrypted or not redacted. There are many additional considerations for data protection but we’ll stop here for now.</p><p>The CCPA is primarily focused on privacy but the impact is felt throughout many departments in the organization. Understanding what personal information you have, how it’s processed (including the sale of the data), and how it’s protected is on the critical path to establishing CCPA compliance. The first two items are needed to establish the right processes to support consumer rights. The latter item is needed to ensure personal data is handled responsibly – reasonable measures.</p><p>This post provides a basic understanding of the CCPA and what organizations must do to prepare for compliance. The regulation is comprehensive and requires a deeper dive to understand how it applies to your organization and the specific next steps needed to achieve compliance.</p><p>Additional CCPA information can be referenced on the State of California Department of Justice or the Californian’s Consumer Privacy website.</p><p>Before the draft of this post was completed the state of Nevada passed its own privacy law advancing the privacy rights of consumers. The regulation is more narrow than CCPA but will become effective on October 1, 2019. The message here is privacy laws will continue to be passed and organizations will be pressed to comply. Get ahead of the wave and develop a strong privacy framework that enables reasonable consumer/data subject/individual rights based on your business model, and enforce it by adopting privacy by design methods and effective security program to protect the organization’s data and technology assets.</p>','','full_html'),('featured_article',0,53,132,'en',0,'<div style=\"font-family:Arial, sans-serif;font-size:16px;white-space:pre-wrap;\">\r\n                                                                                    T\r\n                                                                                    he California Consumer Privacy Act (CCPA) is a new regulation on the horizon that organizations must understand and, if applicable, take action to comply. CCPA becomes effective January 1, 2020 and time is running out.\r\n                                                                                      \r\n</div><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Overview</title><p>Some have compared CCPA to General Data Protection Regulation (GDPR) and, in reality, there is some overlap but there are also several differences. Similar to GDPR, CCPA reinforces a key principle: privacy is a fundamental right and individuals must be able to control the collection and use of their personal data.</p><p>CCPA is focused on giving the consumer rights to know what personal information is collected, to whom it’s sold or disclosed to, and the ability to exercise rights without fearing discrimination. The regulation also imposes responsibility on organizations to process consumer requests, manage risk to consumer personal information, and respond to breaches in a timely manner. The CCPA holds organizations accountable by enforcing fines for violations when they haven’t taken proper steps to protect consumers’ personal information.</p><p>The core consumer rights granted by CCPA are described below. As with any regulation, caveats are in place to promote fairness to both the consumer and organizations collecting and processing their personal information. For example, the right to deletion is granted but there are nine exceptions in place that enable organizations to retain consumers personal information (regulation section 1798.105(d)).</p><p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Consumer Rights under CCPA</title></p><p>Consumer Rights</p><ul><li><strong>Right To Disclosure –</strong> Consumers have a right to know what personal information is collected and whether it’s sold or disclosed and to whom. The Right to disclosure also enables the consumer to receive a copy of their personal data in a standard format.</li><li><strong>Right To Deletion –</strong> Consumers may present a request to delete their personal information retained by the organization.</li><li><strong>Right To Opt-out –</strong> Consumers may exercise the right to say no to the sale of their personal information.</li><li><strong>Right To Nondiscrimination –</strong> When consumers exercise rights enabled by the CCPA, organizations must not apply financial penalties, deny goods and services, or provide an unequal service as a result of their requests.</li></ul><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Applicability</title><p>CCPA is applicable to for profit organizations collecting personal information from California residents and determining what is done with the data. Additionally, one or more of the following must apply for organizations to be subject to CCPA:</p><ul><li>Annual gross revenue is greater than $25mil</li><li>Personal information from &gt;50k consumers, households, or devices</li><li>Derive greater than 50% of annual revenue generated from the sale of consumer’s personal information</li></ul><p>As with any regulation, the definition of personal information influences the impact on organizations need to comply. CCPA defines personal information as information that identifies, describes, or could be reasonably linked to a consumer or household (regulation section 1798.140(o)). Personal information includes the items listed below. The list is not definitive and can change at any time.</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Personal Information under CCPA</title><p>&nbsp;Personal Information</p><ul><li><strong>Identifiers:</strong> real name, social security number, driver’s license number, email address, postal address, IP address, account ID or online identifier.</li><li><strong>Commercial Information:</strong> personal property records, purchase history and patterns</li><li><strong>Biometric Information:</strong> DNA, fingerprint data, and iris scan data</li><li><strong>Electronic Activity:</strong> search history, browsing history, and cookie data</li><li><strong>Geolocation:</strong> GPS data</li><li><strong>Inferences/Profiling:</strong> behavior, personal preferences, psychological state</li></ul><p>Now that we’ve established what CCPA is and how it applies, the question becomes what do you have to do to prepare for compliance. Those organizations familiar with GDPR will notice these steps.</p><p>&nbsp;</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Key Considerations For CCPA Compliance</title><p>&nbsp;Key Considerations For CCPA Compliance</p><p>Assess Applicability – Identify the California residents, devices, and households targeted by the organization. Determine whether the organization must comply with the CCPA.</p><p>Perform Data and Processing Inventory – Understand what personal data collected and processed. Additionally, identify the third parties the data is sold to. This critical step will require significant effort if the data inventory and flows don’t exist. The effort is worth it because the output can be used for other privacy initiatives and improves the organization’s ability to protect the data.</p><p>Assess Policies – Include a description of consumer’s rights in the organization’s privacy policy.</p><p>Update Website – The CCPA requires all web sites to contain a link labeled “Do Not Sell My Information”. This link must be conspicuously placed on the web site home page and must enable the consumer to opt out of the sale of their personal information.</p><p>Support Consumer Rights – Make available two methods to allow consumers to submit requests: toll free number and form on website is acceptable. Additionally, implement processes to intake and satisfy requests in a timely manner (45 days from receipt of verifiable request). The process must include a preliminary assessment to verify the request before fulfillment.</p><p>Apply Technical Measures and Controls – Organizations must implement practices to understand the privacy impact as new software is introduced, scope of data collected changes, or processing of personal data changes. Furthermore, leadings practices must be established to protect personal data in the possession of the organization. Data Protection Impact Assessments (DPIAs) are used to assess privacy implications and establish appropriate security controls to manage risk. This is followed up with leading practices such as encryption to protect the personal data of California consumers. This is important to limit the organization and consumer exposure in the event of a breach or data leakage. Additionally, the CCPA allows the California Attorney General to impose significant penalties if breached or leaked data is unencrypted or not redacted. There are many additional considerations for data protection but we’ll stop here for now.</p><p>The CCPA is primarily focused on privacy but the impact is felt throughout many departments in the organization. Understanding what personal information you have, how it’s processed (including the sale of the data), and how it’s protected is on the critical path to establishing CCPA compliance. The first two items are needed to establish the right processes to support consumer rights. The latter item is needed to ensure personal data is handled responsibly – reasonable measures.</p><p>This post provides a basic understanding of the CCPA and what organizations must do to prepare for compliance. The regulation is comprehensive and requires a deeper dive to understand how it applies to your organization and the specific next steps needed to achieve compliance.</p><p>Additional CCPA information can be referenced on the State of California Department of Justice or the Californian’s Consumer Privacy website.</p><p>Before the draft of this post was completed the state of Nevada passed its own privacy law advancing the privacy rights of consumers. The regulation is more narrow than CCPA but will become effective on October 1, 2019. The message here is privacy laws will continue to be passed and organizations will be pressed to comply. Get ahead of the wave and develop a strong privacy framework that enables reasonable consumer/data subject/individual rights based on your business model, and enforce it by adopting privacy by design methods and effective security program to protect the organization’s data and technology assets.</p>','','full_html'),('featured_article',0,53,268,'en',0,'<div style=\"font-family:Arial, sans-serif;font-size:16px;white-space:pre-wrap;\">\r\n                                                                                    T\r\n                                                                                    he California Consumer Privacy Act (CCPA) is a new regulation on the horizon that organizations must understand and, if applicable, take action to comply. CCPA becomes effective January 1, 2020 and time is running out.\r\n                                                                                      \r\n</div><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Overview</title><p>Some have compared CCPA to General Data Protection Regulation (GDPR) and, in reality, there is some overlap but there are also several differences. Similar to GDPR, CCPA reinforces a key principle: privacy is a fundamental right and individuals must be able to control the collection and use of their personal data.</p><p>CCPA is focused on giving the consumer rights to know what personal information is collected, to whom it’s sold or disclosed to, and the ability to exercise rights without fearing discrimination. The regulation also imposes responsibility on organizations to process consumer requests, manage risk to consumer personal information, and respond to breaches in a timely manner. The CCPA holds organizations accountable by enforcing fines for violations when they haven’t taken proper steps to protect consumers’ personal information.</p><p>The core consumer rights granted by CCPA are described below. As with any regulation, caveats are in place to promote fairness to both the consumer and organizations collecting and processing their personal information. For example, the right to deletion is granted but there are nine exceptions in place that enable organizations to retain consumers personal information (regulation section 1798.105(d)).</p><p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Consumer Rights under CCPA</title></p><p>Consumer Rights</p><ul><li><strong>Right To Disclosure –</strong> Consumers have a right to know what personal information is collected and whether it’s sold or disclosed and to whom. The Right to disclosure also enables the consumer to receive a copy of their personal data in a standard format.</li><li><strong>Right To Deletion –</strong> Consumers may present a request to delete their personal information retained by the organization.</li><li><strong>Right To Opt-out –</strong> Consumers may exercise the right to say no to the sale of their personal information.</li><li><strong>Right To Nondiscrimination –</strong> When consumers exercise rights enabled by the CCPA, organizations must not apply financial penalties, deny goods and services, or provide an unequal service as a result of their requests.</li></ul><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Applicability</title><p>CCPA is applicable to for profit organizations collecting personal information from California residents and determining what is done with the data. Additionally, one or more of the following must apply for organizations to be subject to CCPA:</p><ul><li>Annual gross revenue is greater than $25mil</li><li>Personal information from &gt;50k consumers, households, or devices</li><li>Derive greater than 50% of annual revenue generated from the sale of consumer’s personal information</li></ul><p>As with any regulation, the definition of personal information influences the impact on organizations need to comply. CCPA defines personal information as information that identifies, describes, or could be reasonably linked to a consumer or household (regulation section 1798.140(o)). Personal information includes the items listed below. The list is not definitive and can change at any time.</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Personal Information under CCPA</title><p>&nbsp;Personal Information</p><ul><li><strong>Identifiers:</strong> real name, social security number, driver’s license number, email address, postal address, IP address, account ID or online identifier.</li><li><strong>Commercial Information:</strong> personal property records, purchase history and patterns</li><li><strong>Biometric Information:</strong> DNA, fingerprint data, and iris scan data</li><li><strong>Electronic Activity:</strong> search history, browsing history, and cookie data</li><li><strong>Geolocation:</strong> GPS data</li><li><strong>Inferences/Profiling:</strong> behavior, personal preferences, psychological state</li></ul><p>Now that we’ve established what CCPA is and how it applies, the question becomes what do you have to do to prepare for compliance. Those organizations familiar with GDPR will notice these steps.</p><p>&nbsp;</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Key Considerations For CCPA Compliance</title><p>&nbsp;Key Considerations For CCPA Compliance</p><p>Assess Applicability – Identify the California residents, devices, and households targeted by the organization. Determine whether the organization must comply with the CCPA.</p><p>Perform Data and Processing Inventory – Understand what personal data collected and processed. Additionally, identify the third parties the data is sold to. This critical step will require significant effort if the data inventory and flows don’t exist. The effort is worth it because the output can be used for other privacy initiatives and improves the organization’s ability to protect the data.</p><p>Assess Policies – Include a description of consumer’s rights in the organization’s privacy policy.</p><p>Update Website – The CCPA requires all web sites to contain a link labeled “Do Not Sell My Information”. This link must be conspicuously placed on the web site home page and must enable the consumer to opt out of the sale of their personal information.</p><p>Support Consumer Rights – Make available two methods to allow consumers to submit requests: toll free number and form on website is acceptable. Additionally, implement processes to intake and satisfy requests in a timely manner (45 days from receipt of verifiable request). The process must include a preliminary assessment to verify the request before fulfillment.</p><p>Apply Technical Measures and Controls – Organizations must implement practices to understand the privacy impact as new software is introduced, scope of data collected changes, or processing of personal data changes. Furthermore, leadings practices must be established to protect personal data in the possession of the organization. Data Protection Impact Assessments (DPIAs) are used to assess privacy implications and establish appropriate security controls to manage risk. This is followed up with leading practices such as encryption to protect the personal data of California consumers. This is important to limit the organization and consumer exposure in the event of a breach or data leakage. Additionally, the CCPA allows the California Attorney General to impose significant penalties if breached or leaked data is unencrypted or not redacted. There are many additional considerations for data protection but we’ll stop here for now.</p><p>The CCPA is primarily focused on privacy but the impact is felt throughout many departments in the organization. Understanding what personal information you have, how it’s processed (including the sale of the data), and how it’s protected is on the critical path to establishing CCPA compliance. The first two items are needed to establish the right processes to support consumer rights. The latter item is needed to ensure personal data is handled responsibly – reasonable measures.</p><p>This post provides a basic understanding of the CCPA and what organizations must do to prepare for compliance. The regulation is comprehensive and requires a deeper dive to understand how it applies to your organization and the specific next steps needed to achieve compliance.</p><p>Additional CCPA information can be referenced on the State of California Department of Justice or the Californian’s Consumer Privacy website.</p><p>Before the draft of this post was completed the state of Nevada passed its own privacy law advancing the privacy rights of consumers. The regulation is more narrow than CCPA but will become effective on October 1, 2019. The message here is privacy laws will continue to be passed and organizations will be pressed to comply. Get ahead of the wave and develop a strong privacy framework that enables reasonable consumer/data subject/individual rights based on your business model, and enforce it by adopting privacy by design methods and effective security program to protect the organization’s data and technology assets.</p>','','full_html'),('featured_article',0,53,388,'en',0,'<div style=\"font-family:Arial, sans-serif;font-size:16px;white-space:pre-wrap;\">\r\n                                                                                    T\r\n                                                                                    he California Consumer Privacy Act (CCPA) is a new regulation on the horizon that organizations must understand and, if applicable, take action to comply. CCPA becomes effective January 1, 2020 and time is running out.\r\n                                                                                      \r\n</div><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Overview</title><p>Some have compared CCPA to General Data Protection Regulation (GDPR) and, in reality, there is some overlap but there are also several differences. Similar to GDPR, CCPA reinforces a key principle: privacy is a fundamental right and individuals must be able to control the collection and use of their personal data.</p><p>CCPA is focused on giving the consumer rights to know what personal information is collected, to whom it’s sold or disclosed to, and the ability to exercise rights without fearing discrimination. The regulation also imposes responsibility on organizations to process consumer requests, manage risk to consumer personal information, and respond to breaches in a timely manner. The CCPA holds organizations accountable by enforcing fines for violations when they haven’t taken proper steps to protect consumers’ personal information.</p><p>The core consumer rights granted by CCPA are described below. As with any regulation, caveats are in place to promote fairness to both the consumer and organizations collecting and processing their personal information. For example, the right to deletion is granted but there are nine exceptions in place that enable organizations to retain consumers personal information (regulation section 1798.105(d)).</p><p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Consumer Rights under CCPA</title></p><p>Consumer Rights</p><ul><li><strong>Right To Disclosure –</strong> Consumers have a right to know what personal information is collected and whether it’s sold or disclosed and to whom. The Right to disclosure also enables the consumer to receive a copy of their personal data in a standard format.</li><li><strong>Right To Deletion –</strong> Consumers may present a request to delete their personal information retained by the organization.</li><li><strong>Right To Opt-out –</strong> Consumers may exercise the right to say no to the sale of their personal information.</li><li><strong>Right To Nondiscrimination –</strong> When consumers exercise rights enabled by the CCPA, organizations must not apply financial penalties, deny goods and services, or provide an unequal service as a result of their requests.</li></ul><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Applicability</title><p>CCPA is applicable to for profit organizations collecting personal information from California residents and determining what is done with the data. Additionally, one or more of the following must apply for organizations to be subject to CCPA:</p><ul><li>Annual gross revenue is greater than $25mil</li><li>Personal information from &gt;50k consumers, households, or devices</li><li>Derive greater than 50% of annual revenue generated from the sale of consumer’s personal information</li></ul><p>As with any regulation, the definition of personal information influences the impact on organizations need to comply. CCPA defines personal information as information that identifies, describes, or could be reasonably linked to a consumer or household (regulation section 1798.140(o)). Personal information includes the items listed below. The list is not definitive and can change at any time.</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Personal Information under CCPA</title><p>&nbsp;Personal Information</p><ul><li><strong>Identifiers:</strong> real name, social security number, driver’s license number, email address, postal address, IP address, account ID or online identifier.</li><li><strong>Commercial Information:</strong> personal property records, purchase history and patterns</li><li><strong>Biometric Information:</strong> DNA, fingerprint data, and iris scan data</li><li><strong>Electronic Activity:</strong> search history, browsing history, and cookie data</li><li><strong>Geolocation:</strong> GPS data</li><li><strong>Inferences/Profiling:</strong> behavior, personal preferences, psychological state</li></ul><p>Now that we’ve established what CCPA is and how it applies, the question becomes what do you have to do to prepare for compliance. Those organizations familiar with GDPR will notice these steps.</p><p>&nbsp;</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Key Considerations For CCPA Compliance</title><p>&nbsp;Key Considerations For CCPA Compliance</p><p>Assess Applicability – Identify the California residents, devices, and households targeted by the organization. Determine whether the organization must comply with the CCPA.</p><p>Perform Data and Processing Inventory – Understand what personal data collected and processed. Additionally, identify the third parties the data is sold to. This critical step will require significant effort if the data inventory and flows don’t exist. The effort is worth it because the output can be used for other privacy initiatives and improves the organization’s ability to protect the data.</p><p>Assess Policies – Include a description of consumer’s rights in the organization’s privacy policy.</p><p>Update Website – The CCPA requires all web sites to contain a link labeled “Do Not Sell My Information”. This link must be conspicuously placed on the web site home page and must enable the consumer to opt out of the sale of their personal information.</p><p>Support Consumer Rights – Make available two methods to allow consumers to submit requests: toll free number and form on website is acceptable. Additionally, implement processes to intake and satisfy requests in a timely manner (45 days from receipt of verifiable request). The process must include a preliminary assessment to verify the request before fulfillment.</p><p>Apply Technical Measures and Controls – Organizations must implement practices to understand the privacy impact as new software is introduced, scope of data collected changes, or processing of personal data changes. Furthermore, leadings practices must be established to protect personal data in the possession of the organization. Data Protection Impact Assessments (DPIAs) are used to assess privacy implications and establish appropriate security controls to manage risk. This is followed up with leading practices such as encryption to protect the personal data of California consumers. This is important to limit the organization and consumer exposure in the event of a breach or data leakage. Additionally, the CCPA allows the California Attorney General to impose significant penalties if breached or leaked data is unencrypted or not redacted. There are many additional considerations for data protection but we’ll stop here for now.</p><p>The CCPA is primarily focused on privacy but the impact is felt throughout many departments in the organization. Understanding what personal information you have, how it’s processed (including the sale of the data), and how it’s protected is on the critical path to establishing CCPA compliance. The first two items are needed to establish the right processes to support consumer rights. The latter item is needed to ensure personal data is handled responsibly – reasonable measures.</p><p>This post provides a basic understanding of the CCPA and what organizations must do to prepare for compliance. The regulation is comprehensive and requires a deeper dive to understand how it applies to your organization and the specific next steps needed to achieve compliance.</p><p>Additional CCPA information can be referenced on the State of California Department of Justice or the Californian’s Consumer Privacy website.</p><p>Before the draft of this post was completed the state of Nevada passed its own privacy law advancing the privacy rights of consumers. The regulation is more narrow than CCPA but will become effective on October 1, 2019. The message here is privacy laws will continue to be passed and organizations will be pressed to comply. Get ahead of the wave and develop a strong privacy framework that enables reasonable consumer/data subject/individual rights based on your business model, and enforce it by adopting privacy by design methods and effective security program to protect the organization’s data and technology assets.</p>','','full_html'),('featured_article',0,53,454,'en',0,'<div style=\"font-family:Arial, sans-serif;font-size:16px;white-space:pre-wrap;\">\r\n                                                                                    T\r\n                                                                                    he California Consumer Privacy Act (CCPA) is a new regulation on the horizon that organizations must understand and, if applicable, take action to comply. CCPA becomes effective January 1, 2020 and time is running out.\r\n                                                                                      \r\n</div><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Overview</title><p>Some have compared CCPA to General Data Protection Regulation (GDPR) and, in reality, there is some overlap but there are also several differences. Similar to GDPR, CCPA reinforces a key principle: privacy is a fundamental right and individuals must be able to control the collection and use of their personal data.</p><p>CCPA is focused on giving the consumer rights to know what personal information is collected, to whom it’s sold or disclosed to, and the ability to exercise rights without fearing discrimination. The regulation also imposes responsibility on organizations to process consumer requests, manage risk to consumer personal information, and respond to breaches in a timely manner. The CCPA holds organizations accountable by enforcing fines for violations when they haven’t taken proper steps to protect consumers’ personal information.</p><p>The core consumer rights granted by CCPA are described below. As with any regulation, caveats are in place to promote fairness to both the consumer and organizations collecting and processing their personal information. For example, the right to deletion is granted but there are nine exceptions in place that enable organizations to retain consumers personal information (regulation section 1798.105(d)).</p><p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Consumer Rights under CCPA</title></p><p>Consumer Rights</p><ul><li><strong>Right To Disclosure –</strong> Consumers have a right to know what personal information is collected and whether it’s sold or disclosed and to whom. The Right to disclosure also enables the consumer to receive a copy of their personal data in a standard format.</li><li><strong>Right To Deletion –</strong> Consumers may present a request to delete their personal information retained by the organization.</li><li><strong>Right To Opt-out –</strong> Consumers may exercise the right to say no to the sale of their personal information.</li><li><strong>Right To Nondiscrimination –</strong> When consumers exercise rights enabled by the CCPA, organizations must not apply financial penalties, deny goods and services, or provide an unequal service as a result of their requests.</li></ul><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Applicability</title><p>CCPA is applicable to for profit organizations collecting personal information from California residents and determining what is done with the data. Additionally, one or more of the following must apply for organizations to be subject to CCPA:</p><ul><li>Annual gross revenue is greater than $25mil</li><li>Personal information from &gt;50k consumers, households, or devices</li><li>Derive greater than 50% of annual revenue generated from the sale of consumer’s personal information</li></ul><p>As with any regulation, the definition of personal information influences the impact on organizations need to comply. CCPA defines personal information as information that identifies, describes, or could be reasonably linked to a consumer or household (regulation section 1798.140(o)). Personal information includes the items listed below. The list is not definitive and can change at any time.</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Personal Information under CCPA</title><p>&nbsp;Personal Information</p><ul><li><strong>Identifiers:</strong> real name, social security number, driver’s license number, email address, postal address, IP address, account ID or online identifier.</li><li><strong>Commercial Information:</strong> personal property records, purchase history and patterns</li><li><strong>Biometric Information:</strong> DNA, fingerprint data, and iris scan data</li><li><strong>Electronic Activity:</strong> search history, browsing history, and cookie data</li><li><strong>Geolocation:</strong> GPS data</li><li><strong>Inferences/Profiling:</strong> behavior, personal preferences, psychological state</li></ul><p>Now that we’ve established what CCPA is and how it applies, the question becomes what do you have to do to prepare for compliance. Those organizations familiar with GDPR will notice these steps.</p><p>&nbsp;</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Key Considerations For CCPA Compliance</title><p>&nbsp;Key Considerations For CCPA Compliance</p><p>Assess Applicability – Identify the California residents, devices, and households targeted by the organization. Determine whether the organization must comply with the CCPA.</p><p>Perform Data and Processing Inventory – Understand what personal data collected and processed. Additionally, identify the third parties the data is sold to. This critical step will require significant effort if the data inventory and flows don’t exist. The effort is worth it because the output can be used for other privacy initiatives and improves the organization’s ability to protect the data.</p><p>Assess Policies – Include a description of consumer’s rights in the organization’s privacy policy.</p><p>Update Website – The CCPA requires all web sites to contain a link labeled “Do Not Sell My Information”. This link must be conspicuously placed on the web site home page and must enable the consumer to opt out of the sale of their personal information.</p><p>Support Consumer Rights – Make available two methods to allow consumers to submit requests: toll free number and form on website is acceptable. Additionally, implement processes to intake and satisfy requests in a timely manner (45 days from receipt of verifiable request). The process must include a preliminary assessment to verify the request before fulfillment.</p><p>Apply Technical Measures and Controls – Organizations must implement practices to understand the privacy impact as new software is introduced, scope of data collected changes, or processing of personal data changes. Furthermore, leadings practices must be established to protect personal data in the possession of the organization. Data Protection Impact Assessments (DPIAs) are used to assess privacy implications and establish appropriate security controls to manage risk. This is followed up with leading practices such as encryption to protect the personal data of California consumers. This is important to limit the organization and consumer exposure in the event of a breach or data leakage. Additionally, the CCPA allows the California Attorney General to impose significant penalties if breached or leaked data is unencrypted or not redacted. There are many additional considerations for data protection but we’ll stop here for now.</p><p>The CCPA is primarily focused on privacy but the impact is felt throughout many departments in the organization. Understanding what personal information you have, how it’s processed (including the sale of the data), and how it’s protected is on the critical path to establishing CCPA compliance. The first two items are needed to establish the right processes to support consumer rights. The latter item is needed to ensure personal data is handled responsibly – reasonable measures.</p><p>This post provides a basic understanding of the CCPA and what organizations must do to prepare for compliance. The regulation is comprehensive and requires a deeper dive to understand how it applies to your organization and the specific next steps needed to achieve compliance.</p><p>Additional CCPA information can be referenced on the State of California Department of Justice or the Californian’s Consumer Privacy website.</p><p>Before the draft of this post was completed the state of Nevada passed its own privacy law advancing the privacy rights of consumers. The regulation is more narrow than CCPA but will become effective on October 1, 2019. The message here is privacy laws will continue to be passed and organizations will be pressed to comply. Get ahead of the wave and develop a strong privacy framework that enables reasonable consumer/data subject/individual rights based on your business model, and enforce it by adopting privacy by design methods and effective security program to protect the organization’s data and technology assets.</p>','','full_html'),('featured_article',0,53,521,'en',0,'<div style=\"font-family:Arial, sans-serif;font-size:16px;white-space:pre-wrap;\">\r\n                                                                                    T\r\n                                                                                    he California Consumer Privacy Act (CCPA) is a new regulation on the horizon that organizations must understand and, if applicable, take action to comply. CCPA becomes effective January 1, 2020 and time is running out.\r\n                                                                                      \r\n</div><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Overview</title><p>Some have compared CCPA to General Data Protection Regulation (GDPR) and, in reality, there is some overlap but there are also several differences. Similar to GDPR, CCPA reinforces a key principle: privacy is a fundamental right and individuals must be able to control the collection and use of their personal data.</p><p>CCPA is focused on giving the consumer rights to know what personal information is collected, to whom it’s sold or disclosed to, and the ability to exercise rights without fearing discrimination. The regulation also imposes responsibility on organizations to process consumer requests, manage risk to consumer personal information, and respond to breaches in a timely manner. The CCPA holds organizations accountable by enforcing fines for violations when they haven’t taken proper steps to protect consumers’ personal information.</p><p>The core consumer rights granted by CCPA are described below. As with any regulation, caveats are in place to promote fairness to both the consumer and organizations collecting and processing their personal information. For example, the right to deletion is granted but there are nine exceptions in place that enable organizations to retain consumers personal information (regulation section 1798.105(d)).</p><p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Consumer Rights under CCPA</title></p><p>Consumer Rights</p><ul><li><strong>Right To Disclosure –</strong> Consumers have a right to know what personal information is collected and whether it’s sold or disclosed and to whom. The Right to disclosure also enables the consumer to receive a copy of their personal data in a standard format.</li><li><strong>Right To Deletion –</strong> Consumers may present a request to delete their personal information retained by the organization.</li><li><strong>Right To Opt-out –</strong> Consumers may exercise the right to say no to the sale of their personal information.</li><li><strong>Right To Nondiscrimination –</strong> When consumers exercise rights enabled by the CCPA, organizations must not apply financial penalties, deny goods and services, or provide an unequal service as a result of their requests.</li></ul><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Applicability</title><p>CCPA is applicable to for profit organizations collecting personal information from California residents and determining what is done with the data. Additionally, one or more of the following must apply for organizations to be subject to CCPA:</p><ul><li>Annual gross revenue is greater than $25mil</li><li>Personal information from &gt;50k consumers, households, or devices</li><li>Derive greater than 50% of annual revenue generated from the sale of consumer’s personal information</li></ul><p>As with any regulation, the definition of personal information influences the impact on organizations need to comply. CCPA defines personal information as information that identifies, describes, or could be reasonably linked to a consumer or household (regulation section 1798.140(o)). Personal information includes the items listed below. The list is not definitive and can change at any time.</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Personal Information under CCPA</title><p>&nbsp;Personal Information</p><ul><li><strong>Identifiers:</strong> real name, social security number, driver’s license number, email address, postal address, IP address, account ID or online identifier.</li><li><strong>Commercial Information:</strong> personal property records, purchase history and patterns</li><li><strong>Biometric Information:</strong> DNA, fingerprint data, and iris scan data</li><li><strong>Electronic Activity:</strong> search history, browsing history, and cookie data</li><li><strong>Geolocation:</strong> GPS data</li><li><strong>Inferences/Profiling:</strong> behavior, personal preferences, psychological state</li></ul><p>Now that we’ve established what CCPA is and how it applies, the question becomes what do you have to do to prepare for compliance. Those organizations familiar with GDPR will notice these steps.</p><p>&nbsp;</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Key Considerations For CCPA Compliance</title><p>&nbsp;Key Considerations For CCPA Compliance</p><p>Assess Applicability – Identify the California residents, devices, and households targeted by the organization. Determine whether the organization must comply with the CCPA.</p><p>Perform Data and Processing Inventory – Understand what personal data collected and processed. Additionally, identify the third parties the data is sold to. This critical step will require significant effort if the data inventory and flows don’t exist. The effort is worth it because the output can be used for other privacy initiatives and improves the organization’s ability to protect the data.</p><p>Assess Policies – Include a description of consumer’s rights in the organization’s privacy policy.</p><p>Update Website – The CCPA requires all web sites to contain a link labeled “Do Not Sell My Information”. This link must be conspicuously placed on the web site home page and must enable the consumer to opt out of the sale of their personal information.</p><p>Support Consumer Rights – Make available two methods to allow consumers to submit requests: toll free number and form on website is acceptable. Additionally, implement processes to intake and satisfy requests in a timely manner (45 days from receipt of verifiable request). The process must include a preliminary assessment to verify the request before fulfillment.</p><p>Apply Technical Measures and Controls – Organizations must implement practices to understand the privacy impact as new software is introduced, scope of data collected changes, or processing of personal data changes. Furthermore, leadings practices must be established to protect personal data in the possession of the organization. Data Protection Impact Assessments (DPIAs) are used to assess privacy implications and establish appropriate security controls to manage risk. This is followed up with leading practices such as encryption to protect the personal data of California consumers. This is important to limit the organization and consumer exposure in the event of a breach or data leakage. Additionally, the CCPA allows the California Attorney General to impose significant penalties if breached or leaked data is unencrypted or not redacted. There are many additional considerations for data protection but we’ll stop here for now.</p><p>The CCPA is primarily focused on privacy but the impact is felt throughout many departments in the organization. Understanding what personal information you have, how it’s processed (including the sale of the data), and how it’s protected is on the critical path to establishing CCPA compliance. The first two items are needed to establish the right processes to support consumer rights. The latter item is needed to ensure personal data is handled responsibly – reasonable measures.</p><p>This post provides a basic understanding of the CCPA and what organizations must do to prepare for compliance. The regulation is comprehensive and requires a deeper dive to understand how it applies to your organization and the specific next steps needed to achieve compliance.</p><p>Additional CCPA information can be referenced on the State of California Department of Justice or the Californian’s Consumer Privacy website.</p><p>Before the draft of this post was completed the state of Nevada passed its own privacy law advancing the privacy rights of consumers. The regulation is more narrow than CCPA but will become effective on October 1, 2019. The message here is privacy laws will continue to be passed and organizations will be pressed to comply. Get ahead of the wave and develop a strong privacy framework that enables reasonable consumer/data subject/individual rights based on your business model, and enforce it by adopting privacy by design methods and effective security program to protect the organization’s data and technology assets.</p>','','full_html'),('featured_article',0,53,537,'en',0,'<div style=\"font-family:Arial, sans-serif;font-size:16px;white-space:pre-wrap;\">\r\n                                                                                    T\r\n                                                                                    he California Consumer Privacy Act (CCPA) is a new regulation on the horizon that organizations must understand and, if applicable, take action to comply. CCPA becomes effective January 1, 2020 and time is running out.\r\n                                                                                      \r\n</div><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Overview</title><p>Some have compared CCPA to General Data Protection Regulation (GDPR) and, in reality, there is some overlap but there are also several differences. Similar to GDPR, CCPA reinforces a key principle: privacy is a fundamental right and individuals must be able to control the collection and use of their personal data.</p><p>CCPA is focused on giving the consumer rights to know what personal information is collected, to whom it’s sold or disclosed to, and the ability to exercise rights without fearing discrimination. The regulation also imposes responsibility on organizations to process consumer requests, manage risk to consumer personal information, and respond to breaches in a timely manner. The CCPA holds organizations accountable by enforcing fines for violations when they haven’t taken proper steps to protect consumers’ personal information.</p><p>The core consumer rights granted by CCPA are described below. As with any regulation, caveats are in place to promote fairness to both the consumer and organizations collecting and processing their personal information. For example, the right to deletion is granted but there are nine exceptions in place that enable organizations to retain consumers personal information (regulation section 1798.105(d)).</p><p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Consumer Rights under CCPA</title></p><p>Consumer Rights</p><ul><li><strong>Right To Disclosure –</strong> Consumers have a right to know what personal information is collected and whether it’s sold or disclosed and to whom. The Right to disclosure also enables the consumer to receive a copy of their personal data in a standard format.</li><li><strong>Right To Deletion –</strong> Consumers may present a request to delete their personal information retained by the organization.</li><li><strong>Right To Opt-out –</strong> Consumers may exercise the right to say no to the sale of their personal information.</li><li><strong>Right To Nondiscrimination –</strong> When consumers exercise rights enabled by the CCPA, organizations must not apply financial penalties, deny goods and services, or provide an unequal service as a result of their requests.</li></ul><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Applicability</title><p>CCPA is applicable to for profit organizations collecting personal information from California residents and determining what is done with the data. Additionally, one or more of the following must apply for organizations to be subject to CCPA:</p><ul><li>Annual gross revenue is greater than $25mil</li><li>Personal information from &gt;50k consumers, households, or devices</li><li>Derive greater than 50% of annual revenue generated from the sale of consumer’s personal information</li></ul><p>As with any regulation, the definition of personal information influences the impact on organizations need to comply. CCPA defines personal information as information that identifies, describes, or could be reasonably linked to a consumer or household (regulation section 1798.140(o)). Personal information includes the items listed below. The list is not definitive and can change at any time.</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Personal Information under CCPA</title><p>&nbsp;Personal Information</p><ul><li><strong>Identifiers:</strong> real name, social security number, driver’s license number, email address, postal address, IP address, account ID or online identifier.</li><li><strong>Commercial Information:</strong> personal property records, purchase history and patterns</li><li><strong>Biometric Information:</strong> DNA, fingerprint data, and iris scan data</li><li><strong>Electronic Activity:</strong> search history, browsing history, and cookie data</li><li><strong>Geolocation:</strong> GPS data</li><li><strong>Inferences/Profiling:</strong> behavior, personal preferences, psychological state</li></ul><p>Now that we’ve established what CCPA is and how it applies, the question becomes what do you have to do to prepare for compliance. Those organizations familiar with GDPR will notice these steps.</p><p>&nbsp;</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Key Considerations For CCPA Compliance</title><p>&nbsp;Key Considerations For CCPA Compliance</p><p>Assess Applicability – Identify the California residents, devices, and households targeted by the organization. Determine whether the organization must comply with the CCPA.</p><p>Perform Data and Processing Inventory – Understand what personal data collected and processed. Additionally, identify the third parties the data is sold to. This critical step will require significant effort if the data inventory and flows don’t exist. The effort is worth it because the output can be used for other privacy initiatives and improves the organization’s ability to protect the data.</p><p>Assess Policies – Include a description of consumer’s rights in the organization’s privacy policy.</p><p>Update Website – The CCPA requires all web sites to contain a link labeled “Do Not Sell My Information”. This link must be conspicuously placed on the web site home page and must enable the consumer to opt out of the sale of their personal information.</p><p>Support Consumer Rights – Make available two methods to allow consumers to submit requests: toll free number and form on website is acceptable. Additionally, implement processes to intake and satisfy requests in a timely manner (45 days from receipt of verifiable request). The process must include a preliminary assessment to verify the request before fulfillment.</p><p>Apply Technical Measures and Controls – Organizations must implement practices to understand the privacy impact as new software is introduced, scope of data collected changes, or processing of personal data changes. Furthermore, leadings practices must be established to protect personal data in the possession of the organization. Data Protection Impact Assessments (DPIAs) are used to assess privacy implications and establish appropriate security controls to manage risk. This is followed up with leading practices such as encryption to protect the personal data of California consumers. This is important to limit the organization and consumer exposure in the event of a breach or data leakage. Additionally, the CCPA allows the California Attorney General to impose significant penalties if breached or leaked data is unencrypted or not redacted. There are many additional considerations for data protection but we’ll stop here for now.</p><p>The CCPA is primarily focused on privacy but the impact is felt throughout many departments in the organization. Understanding what personal information you have, how it’s processed (including the sale of the data), and how it’s protected is on the critical path to establishing CCPA compliance. The first two items are needed to establish the right processes to support consumer rights. The latter item is needed to ensure personal data is handled responsibly – reasonable measures.</p><p>This post provides a basic understanding of the CCPA and what organizations must do to prepare for compliance. The regulation is comprehensive and requires a deeper dive to understand how it applies to your organization and the specific next steps needed to achieve compliance.</p><p>Additional CCPA information can be referenced on the State of California Department of Justice or the Californian’s Consumer Privacy website.</p><p>Before the draft of this post was completed the state of Nevada passed its own privacy law advancing the privacy rights of consumers. The regulation is more narrow than CCPA but will become effective on October 1, 2019. The message here is privacy laws will continue to be passed and organizations will be pressed to comply. Get ahead of the wave and develop a strong privacy framework that enables reasonable consumer/data subject/individual rights based on your business model, and enforce it by adopting privacy by design methods and effective security program to protect the organization’s data and technology assets.</p>','','full_html'),('featured_article',0,53,612,'en',0,'<div style=\"font-family:Arial, sans-serif;font-size:16px;white-space:pre-wrap;\">\r\n                                                                                    T\r\n                                                                                    he California Consumer Privacy Act (CCPA) is a new regulation on the horizon that organizations must understand and, if applicable, take action to comply. CCPA becomes effective January 1, 2020 and time is running out.\r\n                                                                                      \r\n</div><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Overview</title><p>Some have compared CCPA to General Data Protection Regulation (GDPR) and, in reality, there is some overlap but there are also several differences. Similar to GDPR, CCPA reinforces a key principle: privacy is a fundamental right and individuals must be able to control the collection and use of their personal data.</p><p>CCPA is focused on giving the consumer rights to know what personal information is collected, to whom it’s sold or disclosed to, and the ability to exercise rights without fearing discrimination. The regulation also imposes responsibility on organizations to process consumer requests, manage risk to consumer personal information, and respond to breaches in a timely manner. The CCPA holds organizations accountable by enforcing fines for violations when they haven’t taken proper steps to protect consumers’ personal information.</p><p>The core consumer rights granted by CCPA are described below. As with any regulation, caveats are in place to promote fairness to both the consumer and organizations collecting and processing their personal information. For example, the right to deletion is granted but there are nine exceptions in place that enable organizations to retain consumers personal information (regulation section 1798.105(d)).</p><p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Consumer Rights under CCPA</title></p><p>Consumer Rights</p><ul><li><strong>Right To Disclosure –</strong> Consumers have a right to know what personal information is collected and whether it’s sold or disclosed and to whom. The Right to disclosure also enables the consumer to receive a copy of their personal data in a standard format.</li><li><strong>Right To Deletion –</strong> Consumers may present a request to delete their personal information retained by the organization.</li><li><strong>Right To Opt-out –</strong> Consumers may exercise the right to say no to the sale of their personal information.</li><li><strong>Right To Nondiscrimination –</strong> When consumers exercise rights enabled by the CCPA, organizations must not apply financial penalties, deny goods and services, or provide an unequal service as a result of their requests.</li></ul><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Applicability</title><p>CCPA is applicable to for profit organizations collecting personal information from California residents and determining what is done with the data. Additionally, one or more of the following must apply for organizations to be subject to CCPA:</p><ul><li>Annual gross revenue is greater than $25mil</li><li>Personal information from &gt;50k consumers, households, or devices</li><li>Derive greater than 50% of annual revenue generated from the sale of consumer’s personal information</li></ul><p>As with any regulation, the definition of personal information influences the impact on organizations need to comply. CCPA defines personal information as information that identifies, describes, or could be reasonably linked to a consumer or household (regulation section 1798.140(o)). Personal information includes the items listed below. The list is not definitive and can change at any time.</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Personal Information under CCPA</title><p>&nbsp;Personal Information</p><ul><li><strong>Identifiers:</strong> real name, social security number, driver’s license number, email address, postal address, IP address, account ID or online identifier.</li><li><strong>Commercial Information:</strong> personal property records, purchase history and patterns</li><li><strong>Biometric Information:</strong> DNA, fingerprint data, and iris scan data</li><li><strong>Electronic Activity:</strong> search history, browsing history, and cookie data</li><li><strong>Geolocation:</strong> GPS data</li><li><strong>Inferences/Profiling:</strong> behavior, personal preferences, psychological state</li></ul><p>Now that we’ve established what CCPA is and how it applies, the question becomes what do you have to do to prepare for compliance. Those organizations familiar with GDPR will notice these steps.</p><p>&nbsp;</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Key Considerations For CCPA Compliance</title><p>&nbsp;Key Considerations For CCPA Compliance</p><p>Assess Applicability – Identify the California residents, devices, and households targeted by the organization. Determine whether the organization must comply with the CCPA.</p><p>Perform Data and Processing Inventory – Understand what personal data collected and processed. Additionally, identify the third parties the data is sold to. This critical step will require significant effort if the data inventory and flows don’t exist. The effort is worth it because the output can be used for other privacy initiatives and improves the organization’s ability to protect the data.</p><p>Assess Policies – Include a description of consumer’s rights in the organization’s privacy policy.</p><p>Update Website – The CCPA requires all web sites to contain a link labeled “Do Not Sell My Information”. This link must be conspicuously placed on the web site home page and must enable the consumer to opt out of the sale of their personal information.</p><p>Support Consumer Rights – Make available two methods to allow consumers to submit requests: toll free number and form on website is acceptable. Additionally, implement processes to intake and satisfy requests in a timely manner (45 days from receipt of verifiable request). The process must include a preliminary assessment to verify the request before fulfillment.</p><p>Apply Technical Measures and Controls – Organizations must implement practices to understand the privacy impact as new software is introduced, scope of data collected changes, or processing of personal data changes. Furthermore, leadings practices must be established to protect personal data in the possession of the organization. Data Protection Impact Assessments (DPIAs) are used to assess privacy implications and establish appropriate security controls to manage risk. This is followed up with leading practices such as encryption to protect the personal data of California consumers. This is important to limit the organization and consumer exposure in the event of a breach or data leakage. Additionally, the CCPA allows the California Attorney General to impose significant penalties if breached or leaked data is unencrypted or not redacted. There are many additional considerations for data protection but we’ll stop here for now.</p><p>The CCPA is primarily focused on privacy but the impact is felt throughout many departments in the organization. Understanding what personal information you have, how it’s processed (including the sale of the data), and how it’s protected is on the critical path to establishing CCPA compliance. The first two items are needed to establish the right processes to support consumer rights. The latter item is needed to ensure personal data is handled responsibly – reasonable measures.</p><p>This post provides a basic understanding of the CCPA and what organizations must do to prepare for compliance. The regulation is comprehensive and requires a deeper dive to understand how it applies to your organization and the specific next steps needed to achieve compliance.</p><p>Additional CCPA information can be referenced on the State of California Department of Justice or the Californian’s Consumer Privacy website.</p><p>Before the draft of this post was completed the state of Nevada passed its own privacy law advancing the privacy rights of consumers. The regulation is more narrow than CCPA but will become effective on October 1, 2019. The message here is privacy laws will continue to be passed and organizations will be pressed to comply. Get ahead of the wave and develop a strong privacy framework that enables reasonable consumer/data subject/individual rights based on your business model, and enforce it by adopting privacy by design methods and effective security program to protect the organization’s data and technology assets.</p>','','full_html'),('featured_article',0,53,848,'en',0,'<div style=\"font-family:Arial, sans-serif;font-size:16px;white-space:pre-wrap;\">\r\n                                                                                    T\r\n                                                                                    he California Consumer Privacy Act (CCPA) is a new regulation on the horizon that organizations must understand and, if applicable, take action to comply. CCPA becomes effective January 1, 2020 and time is running out.\r\n                                                                                      \r\n</div><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Overview</title><p>Some have compared CCPA to General Data Protection Regulation (GDPR) and, in reality, there is some overlap but there are also several differences. Similar to GDPR, CCPA reinforces a key principle: privacy is a fundamental right and individuals must be able to control the collection and use of their personal data.</p><p>CCPA is focused on giving the consumer rights to know what personal information is collected, to whom it’s sold or disclosed to, and the ability to exercise rights without fearing discrimination. The regulation also imposes responsibility on organizations to process consumer requests, manage risk to consumer personal information, and respond to breaches in a timely manner. The CCPA holds organizations accountable by enforcing fines for violations when they haven’t taken proper steps to protect consumers’ personal information.</p><p>The core consumer rights granted by CCPA are described below. As with any regulation, caveats are in place to promote fairness to both the consumer and organizations collecting and processing their personal information. For example, the right to deletion is granted but there are nine exceptions in place that enable organizations to retain consumers personal information (regulation section 1798.105(d)).</p><p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Consumer Rights under CCPA</title></p><p>Consumer Rights</p><ul><li><strong>Right To Disclosure –</strong> Consumers have a right to know what personal information is collected and whether it’s sold or disclosed and to whom. The Right to disclosure also enables the consumer to receive a copy of their personal data in a standard format.</li><li><strong>Right To Deletion –</strong> Consumers may present a request to delete their personal information retained by the organization.</li><li><strong>Right To Opt-out –</strong> Consumers may exercise the right to say no to the sale of their personal information.</li><li><strong>Right To Nondiscrimination –</strong> When consumers exercise rights enabled by the CCPA, organizations must not apply financial penalties, deny goods and services, or provide an unequal service as a result of their requests.</li></ul><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>CCPA Applicability</title><p>CCPA is applicable to for profit organizations collecting personal information from California residents and determining what is done with the data. Additionally, one or more of the following must apply for organizations to be subject to CCPA:</p><ul><li>Annual gross revenue is greater than $25mil</li><li>Personal information from &gt;50k consumers, households, or devices</li><li>Derive greater than 50% of annual revenue generated from the sale of consumer’s personal information</li></ul><p>As with any regulation, the definition of personal information influences the impact on organizations need to comply. CCPA defines personal information as information that identifies, describes, or could be reasonably linked to a consumer or household (regulation section 1798.140(o)). Personal information includes the items listed below. The list is not definitive and can change at any time.</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Personal Information under CCPA</title><p>&nbsp;Personal Information</p><ul><li><strong>Identifiers:</strong> real name, social security number, driver’s license number, email address, postal address, IP address, account ID or online identifier.</li><li><strong>Commercial Information:</strong> personal property records, purchase history and patterns</li><li><strong>Biometric Information:</strong> DNA, fingerprint data, and iris scan data</li><li><strong>Electronic Activity:</strong> search history, browsing history, and cookie data</li><li><strong>Geolocation:</strong> GPS data</li><li><strong>Inferences/Profiling:</strong> behavior, personal preferences, psychological state</li></ul><p>Now that we’ve established what CCPA is and how it applies, the question becomes what do you have to do to prepare for compliance. Those organizations familiar with GDPR will notice these steps.</p><p>&nbsp;</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>Key Considerations For CCPA Compliance</title><p>&nbsp;Key Considerations For CCPA Compliance</p><p>Assess Applicability – Identify the California residents, devices, and households targeted by the organization. Determine whether the organization must comply with the CCPA.</p><p>Perform Data and Processing Inventory – Understand what personal data collected and processed. Additionally, identify the third parties the data is sold to. This critical step will require significant effort if the data inventory and flows don’t exist. The effort is worth it because the output can be used for other privacy initiatives and improves the organization’s ability to protect the data.</p><p>Assess Policies – Include a description of consumer’s rights in the organization’s privacy policy.</p><p>Update Website – The CCPA requires all web sites to contain a link labeled “Do Not Sell My Information”. This link must be conspicuously placed on the web site home page and must enable the consumer to opt out of the sale of their personal information.</p><p>Support Consumer Rights – Make available two methods to allow consumers to submit requests: toll free number and form on website is acceptable. Additionally, implement processes to intake and satisfy requests in a timely manner (45 days from receipt of verifiable request). The process must include a preliminary assessment to verify the request before fulfillment.</p><p>Apply Technical Measures and Controls – Organizations must implement practices to understand the privacy impact as new software is introduced, scope of data collected changes, or processing of personal data changes. Furthermore, leadings practices must be established to protect personal data in the possession of the organization. Data Protection Impact Assessments (DPIAs) are used to assess privacy implications and establish appropriate security controls to manage risk. This is followed up with leading practices such as encryption to protect the personal data of California consumers. This is important to limit the organization and consumer exposure in the event of a breach or data leakage. Additionally, the CCPA allows the California Attorney General to impose significant penalties if breached or leaked data is unencrypted or not redacted. There are many additional considerations for data protection but we’ll stop here for now.</p><p>The CCPA is primarily focused on privacy but the impact is felt throughout many departments in the organization. Understanding what personal information you have, how it’s processed (including the sale of the data), and how it’s protected is on the critical path to establishing CCPA compliance. The first two items are needed to establish the right processes to support consumer rights. The latter item is needed to ensure personal data is handled responsibly – reasonable measures.</p><p>This post provides a basic understanding of the CCPA and what organizations must do to prepare for compliance. The regulation is comprehensive and requires a deeper dive to understand how it applies to your organization and the specific next steps needed to achieve compliance.</p><p>Additional CCPA information can be referenced on the State of California Department of Justice or the Californian’s Consumer Privacy website.</p><p>Before the draft of this post was completed the state of Nevada passed its own privacy law advancing the privacy rights of consumers. The regulation is more narrow than CCPA but will become effective on October 1, 2019. The message here is privacy laws will continue to be passed and organizations will be pressed to comply. Get ahead of the wave and develop a strong privacy framework that enables reasonable consumer/data subject/individual rights based on your business model, and enforce it by adopting privacy by design methods and effective security program to protect the organization’s data and technology assets.</p>','','full_html'),('client_success',0,54,101,'en',0,'<p>DivIHN\'s solution fostered innovation in addition to objectively quantifying project priorities. This helped the CISO improve Service Levels while managing expectations of user/business communities.</p>','','full_html'),('client_success',0,54,680,'en',0,'<p>DivIHN\'s solution fostered innovation in addition to objectively quantifying project priorities. This helped the CISO improve Service Levels while managing expectations of user/business communities.</p>','','full_html'),('featured_article',0,55,102,'en',0,'<p>O pen Source Software (OSS) is freely distributed code and/or binaries that can be used, modified, and redistributed in accordance with its licensing terms.</p><p>The use of open source in the development process is pervasive and will continue to grow over time. Results from the Synopsys 2020 Open Source Security &amp; Risk Analysis Report demonstrates the dependency on open source.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Managing-Risk-in-Open-Source.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"Download PDF button\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,55,135,'en',0,'<p>O pen Source Software (OSS) is freely distributed code and/or binaries that can be used, modified, and redistributed in accordance with its licensing terms.</p><p>The use of open source in the development process is pervasive and will continue to grow over time. Results from the Synopsys 2020 Open Source Security &amp; Risk Analysis Report demonstrates the dependency on open source.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Managing-Risk-in-Open-Source.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"Download PDF button\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,55,266,'en',0,'<p>O pen Source Software (OSS) is freely distributed code and/or binaries that can be used, modified, and redistributed in accordance with its licensing terms.</p><p>The use of open source in the development process is pervasive and will continue to grow over time. Results from the Synopsys 2020 Open Source Security &amp; Risk Analysis Report demonstrates the dependency on open source.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Managing-Risk-in-Open-Source.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"Download PDF button\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,55,389,'en',0,'<p>O pen Source Software (OSS) is freely distributed code and/or binaries that can be used, modified, and redistributed in accordance with its licensing terms.</p><p>The use of open source in the development process is pervasive and will continue to grow over time. Results from the Synopsys 2020 Open Source Security &amp; Risk Analysis Report demonstrates the dependency on open source.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Managing-Risk-in-Open-Source.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"Download PDF button\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,55,455,'en',0,'<p>O pen Source Software (OSS) is freely distributed code and/or binaries that can be used, modified, and redistributed in accordance with its licensing terms.</p><p>The use of open source in the development process is pervasive and will continue to grow over time. Results from the Synopsys 2020 Open Source Security &amp; Risk Analysis Report demonstrates the dependency on open source.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Managing-Risk-in-Open-Source.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"Download PDF button\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,55,522,'en',0,'<p>O pen Source Software (OSS) is freely distributed code and/or binaries that can be used, modified, and redistributed in accordance with its licensing terms.</p><p>The use of open source in the development process is pervasive and will continue to grow over time. Results from the Synopsys 2020 Open Source Security &amp; Risk Analysis Report demonstrates the dependency on open source.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Managing-Risk-in-Open-Source.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"Download PDF button\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,55,538,'en',0,'<p>O pen Source Software (OSS) is freely distributed code and/or binaries that can be used, modified, and redistributed in accordance with its licensing terms.</p><p>The use of open source in the development process is pervasive and will continue to grow over time. Results from the Synopsys 2020 Open Source Security &amp; Risk Analysis Report demonstrates the dependency on open source.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Managing-Risk-in-Open-Source.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"Download PDF button\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,55,613,'en',0,'<p>O pen Source Software (OSS) is freely distributed code and/or binaries that can be used, modified, and redistributed in accordance with its licensing terms.</p><p>The use of open source in the development process is pervasive and will continue to grow over time. Results from the Synopsys 2020 Open Source Security &amp; Risk Analysis Report demonstrates the dependency on open source.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Managing-Risk-in-Open-Source.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"Download PDF button\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,55,849,'en',0,'<p>O pen Source Software (OSS) is freely distributed code and/or binaries that can be used, modified, and redistributed in accordance with its licensing terms.</p><p>The use of open source in the development process is pervasive and will continue to grow over time. Results from the Synopsys 2020 Open Source Security &amp; Risk Analysis Report demonstrates the dependency on open source.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Managing-Risk-in-Open-Source.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"Download PDF button\" width=\"236\" height=\"63\"></a></p>','','full_html'),('client_success',0,56,103,'en',0,'<p>Our customer is a large County Government on the west coast of USA. The Cybersecurity Architecture work was carried out in the context of the overall review of the Technology Assets of the county.</p>','','full_html'),('client_success',0,56,681,'en',0,'<p>Our customer is a large County Government on the west coast of USA. The Cybersecurity Architecture work was carried out in the context of the overall review of the Technology Assets of the county.</p>','','full_html'),('featured_article',0,57,104,'en',0,'<p>R ansomware continues to be a real threat to business operations across all industries, no organization is safe from this threat.</p><p>The combination of widely available exploit kits on the dark web, limited resources and skills needed to execute attacks, and potential financial gain makes ransomware attractive to bad actors.</p><p>The intent of this guidance is to provide insight into the ransomware threat and the actions that should be taken to reduce it.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Ransomware-Threat-Management.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,57,133,'en',0,'<p>R ansomware continues to be a real threat to business operations across all industries, no organization is safe from this threat.</p><p>The combination of widely available exploit kits on the dark web, limited resources and skills needed to execute attacks, and potential financial gain makes ransomware attractive to bad actors.</p><p>The intent of this guidance is to provide insight into the ransomware threat and the actions that should be taken to reduce it.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Ransomware-Threat-Management.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,57,134,'en',0,'<p>R ansomware continues to be a real threat to business operations across all industries, no organization is safe from this threat.</p><p>The combination of widely available exploit kits on the dark web, limited resources and skills needed to execute attacks, and potential financial gain makes ransomware attractive to bad actors.</p><p>The intent of this guidance is to provide insight into the ransomware threat and the actions that should be taken to reduce it.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Ransomware-Threat-Management.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,57,267,'en',0,'<p>R ansomware continues to be a real threat to business operations across all industries, no organization is safe from this threat.</p><p>The combination of widely available exploit kits on the dark web, limited resources and skills needed to execute attacks, and potential financial gain makes ransomware attractive to bad actors.</p><p>The intent of this guidance is to provide insight into the ransomware threat and the actions that should be taken to reduce it.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Ransomware-Threat-Management.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,57,390,'en',0,'<p>R ansomware continues to be a real threat to business operations across all industries, no organization is safe from this threat.</p><p>The combination of widely available exploit kits on the dark web, limited resources and skills needed to execute attacks, and potential financial gain makes ransomware attractive to bad actors.</p><p>The intent of this guidance is to provide insight into the ransomware threat and the actions that should be taken to reduce it.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Ransomware-Threat-Management.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,57,393,'en',0,'<p>R ansomware continues to be a real threat to business operations across all industries, no organization is safe from this threat.</p><p>The combination of widely available exploit kits on the dark web, limited resources and skills needed to execute attacks, and potential financial gain makes ransomware attractive to bad actors.</p><p>The intent of this guidance is to provide insight into the ransomware threat and the actions that should be taken to reduce it.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Ransomware-Threat-Management.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,57,456,'en',0,'<p>R ansomware continues to be a real threat to business operations across all industries, no organization is safe from this threat.</p><p>The combination of widely available exploit kits on the dark web, limited resources and skills needed to execute attacks, and potential financial gain makes ransomware attractive to bad actors.</p><p>The intent of this guidance is to provide insight into the ransomware threat and the actions that should be taken to reduce it.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Ransomware-Threat-Management.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,57,523,'en',0,'<p>R ansomware continues to be a real threat to business operations across all industries, no organization is safe from this threat.</p><p>The combination of widely available exploit kits on the dark web, limited resources and skills needed to execute attacks, and potential financial gain makes ransomware attractive to bad actors.</p><p>The intent of this guidance is to provide insight into the ransomware threat and the actions that should be taken to reduce it.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Ransomware-Threat-Management.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,57,539,'en',0,'<p>R ansomware continues to be a real threat to business operations across all industries, no organization is safe from this threat.</p><p>The combination of widely available exploit kits on the dark web, limited resources and skills needed to execute attacks, and potential financial gain makes ransomware attractive to bad actors.</p><p>The intent of this guidance is to provide insight into the ransomware threat and the actions that should be taken to reduce it.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Ransomware-Threat-Management.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,57,601,'en',0,'<p>R ansomware continues to be a real threat to business operations across all industries, no organization is safe from this threat.</p><p>The combination of widely available exploit kits on the dark web, limited resources and skills needed to execute attacks, and potential financial gain makes ransomware attractive to bad actors.</p><p>The intent of this guidance is to provide insight into the ransomware threat and the actions that should be taken to reduce it.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Ransomware-Threat-Management.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,57,614,'en',0,'<p>R ansomware continues to be a real threat to business operations across all industries, no organization is safe from this threat.</p><p>The combination of widely available exploit kits on the dark web, limited resources and skills needed to execute attacks, and potential financial gain makes ransomware attractive to bad actors.</p><p>The intent of this guidance is to provide insight into the ransomware threat and the actions that should be taken to reduce it.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Ransomware-Threat-Management.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,57,766,'en',0,'<p>R ansomware continues to be a real threat to business operations across all industries, no organization is safe from this threat.</p><p>The combination of widely available exploit kits on the dark web, limited resources and skills needed to execute attacks, and potential financial gain makes ransomware attractive to bad actors.</p><p>The intent of this guidance is to provide insight into the ransomware threat and the actions that should be taken to reduce it.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Ransomware-Threat-Management.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"Download Now button image\" width=\"236\" height=\"63\"></a></p>','','full_html'),('featured_article',0,57,850,'en',0,'<p>R ansomware continues to be a real threat to business operations across all industries, no organization is safe from this threat.</p><p>The combination of widely available exploit kits on the dark web, limited resources and skills needed to execute attacks, and potential financial gain makes ransomware attractive to bad actors.</p><p>The intent of this guidance is to provide insight into the ransomware threat and the actions that should be taken to reduce it.</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p><a href=\"https://cms.divihn.com/sites/default/files/2024-03/Ransomware-Threat-Management.pdf\" target=\"_self\"><img src=\"https://cms.divihn.com/sites/default/files/2024-03/Download-PDF-Button-James-Alexander-Michie-1.png\" alt=\"Download Now button image\" width=\"236\" height=\"63\"></a></p>','','full_html'),('webinar',0,60,111,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p><strong>Meet the speakers</strong></p>','','full_html'),('webinar',0,60,114,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p><strong>Meet the speakers</strong></p>','','full_html'),('webinar',0,60,115,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p><strong>Meet the speakers</strong></p>','','full_html'),('webinar',0,60,116,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p><strong>Meet the speakers</strong></p>','','full_html'),('webinar',0,60,117,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p><strong>Meet the speakers</strong></p>','','full_html'),('webinar',0,60,118,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p>&nbsp;</p>','','full_html'),('webinar',0,60,119,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p>&nbsp;</p>','','full_html'),('webinar',0,60,123,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p>&nbsp;</p>','','full_html'),('webinar',0,60,146,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p>&nbsp;</p>','','full_html'),('webinar',0,60,264,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p>&nbsp;</p>','','full_html'),('webinar',0,60,461,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p>&nbsp;</p>','','full_html'),('webinar',0,60,462,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p>&nbsp;</p>','','full_html'),('webinar',0,60,528,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p>&nbsp;</p>','','full_html'),('webinar',0,60,529,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p>&nbsp;</p>','','full_html'),('webinar',0,60,543,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p>&nbsp;</p>','','full_html'),('webinar',0,60,618,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p>&nbsp;</p>','','full_html'),('webinar',0,60,734,'en',0,'<p><strong>About Webinar</strong></p><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p>&nbsp;</p>','','full_html'),('webinar',0,60,745,'en',0,'<h4 class=\"WebinarHeading\"><strong>About Webinar</strong></h4><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p>&nbsp;</p>','','full_html'),('webinar',0,60,860,'en',0,'<h4 class=\"WebinarHeading\"><strong>About Webinar</strong></h4><p>The world of business is changing quickly. Organizations that are best able to adjust and adapt will thrive, while those that evolve too slowly will struggle. In order to succeed in the face of rapid and accelerating change, you must become a Dynamic Organization. Cloud solutions and web-based communications, collaboration and productivity platforms can dramatically enhance and support your development and growth.</p><p><strong>Join us to learn:</strong></p><ul><li>What exactly is a Dynamic Organization, and why should you want to be one?</li><li>What do you need to do to become a more Dynamic Organization?</li><li>How can cloud-based solutions and platforms help you be adaptive and resilient?</li></ul><p>&nbsp;</p>','','full_html'),('featured_article',0,61,120,'en',0,'<p>C ybersecurity can be a complex and overwhelming discipline.</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"><title>Cybersecurity Rationalization</title><style>\r\n    body { font-family: Arial, sans-serif; line-height: 1.6; padding: 2rem; background-color: #f9f9f9; color: #111; }\r\n    .container { max-width: 800px; margin: 0 auto; background: #fff; padding: 1.5rem 2rem; border-radius: 8px; box-shadow: 0 2px 6px rgba(0,0,0,0.08); }\r\n    p { margin-bottom: 1rem; }\r\n  </style><div class=\"container\"><p>There is much written about every aspect ranging from how to effectively train your workforce to the re-identification of anonymized data to threat detection. Adding to the cybersecurity fog is complex technology environments that constantly change to accommodate the pace of business and digital transformation needed to remain competitive.</p><p>The intent of this post is to share thoughts on how to rationalize cybersecurity (governance, technical controls, and processes) and focus on what’s important to your business while blocking out the noise. Management of cyber risk is at the center of cybersecurity. Understanding the cyber threats to your business, the likelihood of them materializing, and their potential impact (financial, reputational) is fundamental. Casinos, steel manufacturers, hospitals, research organizations all face cyber threats. Granted, some of the threats may be more pronounced and the impact more catastrophic, but they all must understand the risk technology brings to their business.</p><p>The Cybersecurity Rationalization diagram describes the rationalization process at a high-level. Thoughtfully addressing these areas will help you effectively manage risk. Does this guarantee there will be no cybersecurity incidents or breaches? Absolutely not. Technology environments are too complicated, some technologies (e.g., TCP/IP) are inherently insecure, and humans, well, are humans. Taking these steps will reduce the number of incidents and their impact on your business.</p></div><p><em>Cybersecurity Rationalization</em></p><img src=\"/sites/default/files/inline-images/cybersecurity-taxonomy-2.png\" data-entity-uuid=\"c28835cb-fb21-44c2-9476-d6785b33f992\" data-entity-type=\"file\" width=\"900\" height=\"391\"><p>&nbsp;</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"><title>Cyber Risk Understanding</title><style>\r\n    body { font-family: Arial, sans-serif; line-height: 1.6; padding: 2rem; background-color: #f9f9f9; color: #111; }\r\n    .container { max-width: 900px; margin: 0 auto; background: #fff; padding: 1.5rem 2rem; border-radius: 8px; box-shadow: 0 2px 6px rgba(0,0,0,0.08); }\r\n    ol { padding-left: 1.5rem; }\r\n    li { margin-bottom: 1rem; }\r\n  </style><div class=\"container\"><ol><li>To understand cyber risk we must first identify the data collected and technology services provided. The sensitivity of data collected and critical nature of services influence business risk tolerance.</li><li>Business leaders must determine their business risk tolerance. Will a breach or cybersecurity incident lead to reputational damage and significant loss of revenue? Will a breach result in significant harm to individuals (e.g., expose extremely sensitive information)? If so, the business risk tolerance should be low.</li><li>Business risk tolerance influences the level of cybersecurity controls implemented. Cybersecurity controls range from identity and access management to endpoint protection to cloud security. Security monitoring (threat detection) and incident response is also included in the scope of cybersecurity controls. Risk averse organizations may require more extensive cybersecurity controls to reduce cyber risk.</li><li>Threats to data and technology services are another factor that influence cybersecurity controls. A reasonable understanding of bad actors and associated threats to your business is required. This is important because it helps to identify blind spots.</li><li>Vulnerabilities increase cyber risk. The importance of vulnerability management can’t be overstated. Bad actors exploit some type of weakness be it technical or human-based to accomplish their goal. Identifying, prioritizing, and remediating vulnerabilities is critical. Proactively addressing technical debt reduces the vulnerability management challenge.</li><li>Regulatory (e.g., HIPAA) and customer contractual requirements contribute to business risk as non-compliance can result in fines and other damages. These requirements must be considered but should not drive definition of cybersecurity controls. Leading practices, relevant threats and risk tolerance should guide effective cybersecurity.</li><li>If the disciplines outlined above are addressed in a thoughtful manner, the outcome is effective cyber risk management. A continual focus on threats, vulnerabilities, and effectiveness of controls while considering business risk tolerance will create the right culture. Combining this with cybersecurity governance will ensure alignment as the business needs change.</li></ol></div><p>This is a high-level view into how to approach cybersecurity and manage cyber risk. In reality, each one of these disciplines (e.g, threat management, vulnerability management) require a focused effort to implement the needed capability. The challenge is balancing cybersecurity with cost, productivity, and user experience to reasonably protect data and services, and minimize the risk to people, society, and business. There is no easy answer to meeting this challenge, it’s a journey not a destination.</p><p>We live in a hyper-digital age and technology is critical in all aspects of our lives. Effective cybersecurity is more important than ever!</p>','','full_html'),('featured_article',0,61,121,'en',0,'<p>C ybersecurity can be a complex and overwhelming discipline.</p><p>There is much written about every aspect ranging from how to effectively train your workforce to the re-identification of anonymized data to threat detection. Adding to the cybersecurity fog is complex technology environments that constantly change to accommodate the pace of business and digital transformation needed to remain competitive.</p><p>The intent of this post is to share thoughts on how to rationalize cybersecurity (governance, technical controls, and processes) and focus on what’s important to your business while blocking out the noise. Management of cyber risk is at the center of cybersecurity. Understanding the cyber threats to your business, the likelihood of them materializing, and their potential impact (financial, reputational) is fundamental. Casinos, steel manufacturers, hospitals, research organizations all face cyber threats. Granted, some of the threats may be more pronounced and the impact more catastrophic, but they all must understand the risk technology brings to their business.</p><p>The Cybersecurity Rationalization diagram describes the rationalization process at a high-level. Thoughtfully addressing these areas will help you effectively manage risk. Does this guarantee there will be no cybersecurity incidents or breaches? Absolutely not. Technology environments are too complicated, some technologies (e.g., TCP/IP) are inherently insecure, and humans, well, are humans. Taking these steps will reduce the number of incidents and their impact on your business.</p><p><em>Cybersecurity Rationalization</em></p><img src=\"/sites/default/files/inline-images/cybersecurity-taxonomy-2.png\" data-entity-uuid=\"c28835cb-fb21-44c2-9476-d6785b33f992\" data-entity-type=\"file\" width=\"900\" height=\"391\"><p>&nbsp;</p><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"><title>Cyber Risk Understanding</title><style>\r\n    body { font-family: Arial, sans-serif; line-height: 1.6; padding: 2rem; background-color: #f9f9f9; color: #111; }\r\n    .container { max-width: 900px; margin: 0 auto; background: #fff; padding: 1.5rem 2rem; border-radius: 8px; box-shadow: 0 2px 6px rgba(0,0,0,0.08); }\r\n    ol { padding-left: 1.5rem; }\r\n    li { margin-bottom: 1rem; }\r\n  </style><div class=\"container\"><ol><li>To understand cyber risk we must first identify the data collected and technology services provided. The sensitivity of data collected and critical nature of services influence business risk tolerance.</li><li>Business leaders must determine their business risk tolerance. Will a breach or cybersecurity incident lead to reputational damage and significant loss of revenue? Will a breach result in significant harm to individuals (e.g., expose extremely sensitive information)? If so, the business risk tolerance should be low.</li><li>Business risk tolerance influences the level of cybersecurity controls implemented. Cybersecurity controls range from identity and access management to endpoint protection to cloud security. Security monitoring (threat detection) and incident response is also included in the scope of cybersecurity controls. Risk averse organizations may require more extensive cybersecurity controls to reduce cyber risk.</li><li>Threats to data and technology services are another factor that influence cybersecurity controls. A reasonable understanding of bad actors and associated threats to your business is required. This is important because it helps to identify blind spots.</li><li>Vulnerabilities increase cyber risk. The importance of vulnerability management can’t be overstated. Bad actors exploit some type of weakness be it technical or human-based to accomplish their goal. Identifying, prioritizing, and remediating vulnerabilities is critical. Proactively addressing technical debt reduces the vulnerability management challenge.</li><li>Regulatory (e.g., HIPAA) and customer contractual requirements contribute to business risk as non-compliance can result in fines and other damages. These requirements must be considered but should not drive definition of cybersecurity controls. Leading practices, relevant threats and risk tolerance should guide effective cybersecurity.</li><li>If the disciplines outlined above are addressed in a thoughtful manner, the outcome is effective cyber risk management. A continual focus on threats, vulnerabilities, and effectiveness of controls while considering business risk tolerance will create the right culture. Combining this with cybersecurity governance will ensure alignment as the business needs change.</li></ol></div><p>This is a high-level view into how to approach cybersecurity and manage cyber risk. In reality, each one of these disciplines (e.g, threat management, vulnerability management) require a focused effort to implement the needed capability. The challenge is balancing cybersecurity with cost, productivity, and user experience to reasonably protect data and services, and minimize the risk to people, society, and business. There is no easy answer to meeting this challenge, it’s a journey not a destination.</p><p>We live in a hyper-digital age and technology is critical in all aspects of our lives. Effective cybersecurity is more important than ever!</p>','','full_html'),