The constantly evolving cyber risk landscape presents a formidable challenge to organizations, as businesses transform, scopes and boundaries shift, and bad actors develop new tactics and techniques to exploit vulnerabilities and compromise systems.
With the rate of risk velocity increasing faster than the resources of most risk-focused teams, collaboration and working together smarter is one of the only ways to keep up. Creating solid partnerships, embracing transparency, and developing consistent strategies for mitigating cyber risk is essential to navigating this complex landscape.
Read more…
Source: Auditboard
Related:
- How much security is enough?
January 9, 2023
According to a prominent Soviet science fiction writer, beauty is a fine line, a razor’s edge between two opposites locked in a never-ending battle. Today, we would put it less poetically as an ideal compromise between contradictions. An elegant, or beautiful, design is one that allows reaching that compromise. As an information security professional, I like ...
- CISA Releases Three Industrial Systems Control Advisories
January 5, 2023
CISA released three Industrial Control Systems (ICS) advisories on January 5 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations: ICSA-23-005-01 Hitachi Energy UNEM ICSA-23-005-02 Hitachi Energy FOXMAN-UN Read more… Source: U.S. Cybersecurity and Infrastructure Security Agency
- New York Adopts Law Protecting Power Grid from Cyber Attacks
January 4, 2023
New York Gov. Kathy Hochul signed legislation to create cybersecurity protections for the state’s energy grid. The legislation (designated A.3904B/S.5579A) will require utilities to prepare for cyberattacks in their annual emergency response plans, just as they would for storm or other hazards. The new protections also give the Public Service Commission enhanced auditing powers to ensure ...
- NATO Agency signs important cyber security agreements
January 2, 2023
The NATO Communications and Information Agency (NCI Agency) signed two multiple award, Indefinite Delivery Indefinite Quantity (IDIQ) contracts with King ICT Croatia and IBM Belgium, for the provision of cyber security deployment and configuration services across the NATO Enterprise. Following an open competition, the Cyber Security Services Framework (CSSF) contracts were signed on 12 December 2022 ...
- The mounting death toll of hospital cyberattacks
December 28, 2022
Cyberattacks are getting deadlier — and hospitals on the frontline are straining under increasing attacks. As the Covid-19 pandemic swept the world over the past three years, cybercriminals took advantage of the chaotic situation and repeatedly shut down hospitals’ networks at a time when they were least able to respond. That has meant curtailed emergency services, ...
- Patch now: Serious Linux kernel security hole uncovered
December 23, 2022
Just what every Linux system administrator wants just before the holidays: A serious Linux kernel security bug. The Zero Day Initiative (ZDI), a zero-day security research firm, announced a new Linux kernel security bug. This hole allows authenticated remote users to disclose sensitive information and run code on vulnerable Linux kernel versions. How bad is it? ...