In many organizations, the CISO will be looked at as the leading expert in incident response, but often has little involvement in the selection, planning, and training for the Enterprise Incident Management Program. Listen to Dawn-Marie, who has navigated organizations as a CISO during crisis and consultant to “play like you practice.”. To view the...
The Cybersecurity and Infrastructure Security Agency is planning to contract with industry next year on a pair of projects: one to further build out the government’s national, multi-stakeholder cybersecurity exercises, and another to develop new analytic capabilities to predict vulnerabilities and threats to the global supply chain.
As if CISOs don’t have enough to focus on, here’s a few more items that should be top of mind – KAR Global CISO, Leon Ravenna, dives into Cyber Insurance and why D&O requirements may be on the horizon, regulatory burdens and what to expect out of the US Government, how the intersection of Security and Privacy is impacting CISOs, and a little securi...
Quickly putting to use its new threat mitigation resource website, HHS is urging public health and healthcare sector entities to prioritize remediation of Apache Log4j vulnerabilities.
But among the most challenging aspects of risk assessment involves third-party suppliers – and fourth- and fifth- party suppliers even ensuring entities with access to networks or information are not exposed themselves.
We asked Dawn Cappelli, CISO at manufacturing giant Rockwell Automation and member of SC Media sister organization Cybersecurity Collaborative, to offer a detailed look at the last week's efforts to safeguard systems and evaluate risk tied to the Log4j vulnerability. "I'm afraid for companies," she said of those in manufacturing that have not paid close enough attention to third-party risk.
