Moudy Elbayadi, Ph.D.

Just introduced the next Executive track session « orchestrating cyber resilience across 1st and 3rd party risk » with Kris Lovejoy, Michael Sechrist, Juanita Bates and Pengfei Wang… One key take away is that organizations structure will have to evolve to manage 1st and 3rd party risk together…

7

Tired of Cyber Disneyland? Get the facts and find your way around #Cybersecurity #MDR at the N-able Roadshow in #Anaheim today. Hear from vendors, and join us for an incident response tabletop exercise. As pilots are fond of saying, "If it doesn’t feel right, go around. It’s better to explain why you did than have an investigator discover why you didn’t." TTXs are the best way to figure out what's right, before it goes wrong. @N-able roadshows are free--cyber incidents are costly. Register below: https://lnkd.in/g9A8dt8G

19

Okta signed the Cybersecurity and Infrastructure Security Agency’s Secure by Design pledge at #RSAC to take meaningful steps in adopting #secure by design principles in the coming year. I am excited that we are accompanying our peers in the industry to take the steps needed to prioritize application security. Identity-based #attacks have become a top method for cybercriminals, and according to the Open Worldwide Application Security Project, broken access control is the number one most common web application security risk. It’s putting companies building their applications at risk. This is a priority for Okta. There’s never been a more critical time for us to come together and implement secure design principles to keep the #identity #secure. Learn more about this pledge https://bit.ly/3UQNLbz. Tomorrow is also Okta Showcase! I am excited to join Todd McKinnon, Sagnik Nandy , and others to share the latest product innovations & commitments Okta is making to secure identity. You can tune in here: https://bit.ly/4cLldaI

188

2 Comments

Great story on how to apply Cyber Risk Management to design a more effective Cybersecurity strategies and align security budget and investments with the business.

5

3 Comments

When you work with others your ability to truly engage and listen is paramount. Remove your own agenda. Listen to the other collaborators. Be prepared to sacrifice your “idea” for what’s truly functional. “Ideas are easy - execution is everything.” John Doerr Phasing things in appropriately matters. Start by clearly identifying the “problem” you’re working to resolve. Phase your appproach. Start with what’s possible - Work towards what’s optimal - All throughout you’ll need to truly LISTEN and subordinate your ego.

6

1 Comment

In a recent move, Dell mandated employees return to the office or face consequences, including no promotions or new role opportunities for those choosing to remain remote. Surprisingly, nearly half of the workforce opted to stay remote, prioritizing their quality of life over career advancement. Employees cited increased free time, reduced financial strain, and the impracticality of in-person meetings when teams are globally distributed. This trend underscores a growing sentiment among workers that personal well-being and work-life balance outweigh traditional incentives like promotions, reflecting a significant shift in workplace priorities. While remote work isn't necessarily the right fit for every organization or team, what truly matters is understanding and aligning with what your team values. By accommodating these preferences, whether it's remote work, hybrid models, or in-office presence, companies can foster greater job satisfaction and, ultimately, achieve greater organizational success. Tailoring work environments to meet the needs and values of employees can lead to enhanced productivity, engagement, and loyalty. This article highlights a possible disconnect in that evaluation process. #Leadership #RemoteWork #WorkplaceCulture #HybridWork #OrganizationalSuccess #FutureOfWork #EmployeeEngagement #QualityOfLife https://lnkd.in/gcsePCNN

3

2 Comments

Next Wednesday, July 24th, the SoCal CISO Community is connecting for their final 'Summer Series' Townhall of 2024! Don't miss this interactive virtual session led by Discussion Leaders: -Julie Harris, CISO, PulteGroup -Sunil Agarwal, CISO, VP Information Security and Risk Management, OSI Systems -Desiree Wilson, CISO, Quantum M&A -Hugh Jones, Security Operations Transformation Leader, Palo Alto Networks -Roberta French, Vice President of IT, WD-40 Company -Mike Cushing, Head of Global Information Security, Patagonia For over a decade, security leaders and architects utilized a disparate best of breed point solution framework to solve their security challenges. This resulted in bloated security architectures, overlap in capabilities and significant security architecture and integration failures. These failures impacted organization’s ability to scale to meet business demands and reduced stability of the security architecture as environments and data volumes grew. The use of AI driven detections, automation, endpoint security, attack surface management and real-time threat intelligence application were the moonshot achievements for security solutions like SIEM, but were never achieved. Join this session to discuss: -Scaling to meet business demands and stabilizing your security architecture -Reimagining organizational security operations programs based on standardization -Achieving the impossible with security information and event management Community Members register on the mobile app or at My.Evanta.com! #evantaciso #socalciso #infosec

22

4 Comments

San Diego businesses shore up their defenses with a security risk consultation! Does your San Diego business have a strong #cybersecurity plan? #CybersecurityConsulting Cyberattacks are a growing threat, and it's crucial to identify and address vulnerabilities before they become problems. 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐫𝐢𝐬𝐤 𝐜𝐨𝐧𝐬𝐮𝐥𝐭𝐢𝐧𝐠 𝐜𝐚𝐧 𝐡𝐞𝐥𝐩 𝐲𝐨𝐮𝐫 𝐛𝐮𝐬𝐢𝐧𝐞𝐬𝐬: ☑ Identify weaknesses in your IT systems and security protocols. ☑ Develop a customized security plan to mitigate risks. ☑ Implement best practices for data protection and access control. ☑ Train your employees on cybersecurity awareness. By investing in security risk consulting, you can gain peace of mind knowing your business is protected. Contact a San Diego security risk consulting firm today and take control of your cybersecurity posture! More information: https://lnkd.in/gCY-x3c8 #SanDiegoSecurity #DataProtection #SecurityAwareness #ProtectYourBusiness ️

1

Take Two Minutes to Learn What's New in NIST CSF 2.0, and Why You Should Care... Check out PART ONE of this three-part Infoseries, as we delve deeper into NIST CSF 2.0 to better understand the recent changes and how they impact you. In the short video below, Christopher Hills summarizes why the NIST Cybersecurity Framework is so important, along with five reasons why following it can help you stay more secure and reduce your risk. For more information, you can also check out our dedicated landing page, which features free resources and advice on all things NIST. https://lnkd.in/eJATTCFm P.S. Keep an eye out for Part Two, when Chris will take a closer look at all of the individual tenets of the framework, including the newest sixth addition! #NIST #NIST2 #NISTFramework #Cybersecurity #Compliance #BeyondTrustInfoSeries #Governance

1

A Data Breach at LA County Health Services 🏥 , shows that Phishing continues to be a huge threat should businesses stop using email internally? 2023 Was the Worst Year for Phishing on Record, we need to think of future solutions and this breach highlights very publically the risks Hackers gained access to LA County Health Services employee emails through a phishing campaign, potentially compromising patients' personal and health information.  23 employees had their credentials stolen in a February attack. Documents and e-mails in the compromised mailboxes included patients' personal and health information, including a combination of: • first and last name, date of birth, home address, phone number(s), e-mail address, medical record number, client identification number, dates of service • medical information (e.g., diagnosis/condition, treatment, test results, medications), • and/or health plan information. After discovering the breach, L.A. County Health Services disabled the impacted e-mail accounts, reset and re-imaged the compromised employees' devices, and quarantined all suspicious incoming e-mails. It also circulated awareness notifications to all employees, reminding them to always be vigilant when reviewing e-mails, especially those with attachments or links. ✔ A sensible approach showing they had a strategy to deal with incidents like these, which is great! This incident reminds everyone of the importance of robust cybersecurity measures, especially for organizations handling sensitive data. But how do we stop phishing attacks? 🤔 The obvious thing to do is to: • Educate employees on identifying phishing attempts. • Implement multi-factor authentication. • Regularly update and patch systems. • Have a clear communication strategy for employees when they suspect a Phishing attack. But what else is working? do you think the future for businesses is not using email for internal communications? If you are concerned and want to learn more here is the data breach notice: https://lnkd.in/epBfDvSm Some great analysis on Phishing here https://lnkd.in/eiRaJBMJ #cybersecurity #security #StopPhishing

5

Cybersecurity Alert: Protecting Our Schools 🏫 A recent article has reported a significant data breach at the Los Angeles Unified School District (LAUSD). The threat actor claims to have stolen databases containing records of millions of students and thousands of teachers. This incident highlights the urgent need for robust cybersecurity measures in our educational institutions. The stolen data reportedly includes sensitive information such as Social Security Numbers and Passport data. This breach is a stark reminder that cyber threats are real and can have far-reaching consequences. As business owners, we must prioritize the security of our data and invest in comprehensive cybersecurity measures. Let’s stand together in the face of these threats and ensure the safety of our digital assets. #Cybersecurity #DataBreach #LAUSD #Education #DataProtection

2

It’s 2024: As a leader you need to recognize your biggest assets go home in the elevator. Not your IP, not a physical product, not a building, it’s your people. You invest in assets, you invest in your people! PS - Investing in your people has virtually unlimited ROI! 🚀

22

1 Comment

Big moves in the MSP world! ConnectWise acquires Axcient and SkyKick, shaking up the cybersecurity and data protection landscape. What does this mean for MSPs and the future of integrated tech stacks? Read our in-depth analysis to hear what industry leaders are saying about this game-changing consolidation. https://bit.ly/4d1oWjk ConnectWise Progressive Computing, Inc. 7tech Cybersecurity CorpInfoTech Sagacent Technologies #MSP #TechAcquisition #Cybersecurity

123

1 Comment

Shout out to all my security friends here at #GartnerSec! Ping me and let’s connect on-site! Oh and if you want to see some crazy math, ask me about fundamentally disrupting the economics of cyber! #mobildefense #mobilesecurity

131

10 Comments

#Excited to join Rodney Clark and Cisco today to discuss leading with the customer, changes in buying behavior, hyperscalers, ecosystems, marketplaces, and what makes an Ultimate Partner! Looking forward to diving into these critical topics and exploring how we can drive growth and innovation together. #Cisco #Hyperscalers #Ecosystem #Marketplace #Partnerships #Innovation

116

12 Comments

In this clip from part two of this five-part series, Xantrion CEO Anne Bisagno, and Fractional CIO Sean McLean, PMP, talk about another outsourcing myth; "An external team might not be as responsive to my needs." See the full video here: https://lnkd.in/gQTHvQaW #MSP #outsourcing #techtalent

12

1 Comment