Miguel Blanco Jimenez

The World Economic Forum "Centre for Cybersecurity" has published an important white paper today: Elevating Cybersecurity: Ensuring Strategic and Sustainable Impact for CISOs It outlines how the growing complexity of the cyber landscape is reshaping the CISO role and highlights how diverse the responsibilities have become across organizations. While little in the paper will surprise practitioners, I appreciated the clarity of this conclusion: "The evolution of the CISO role provides an opportunity for top leadership to actively engage with cybersecurity issues and reframe cybersecurity as a strategic driver of value." Worth a read for executive managers and cybersecurity professionals alike.   https://lnkd.in/dkH9qJ5s

240

2 comentarios

Strengthen Your Third-Party Risk Management with a Comprehensive Security Assessment Checklist In today’s interconnected business environment, managing third-party risks is paramount. This Shared Security Assessment-based checklist covers vital areas to ensure your vendors align with your organization's security and compliance requirements. Key Focus Areas: - Vendor governance, risk assessments, and clearly defined information security programs - Enforcement of secure policies covering privacy, personnel, physical and network security - Controls for access management, operational security, and mobile device integration - Insurance coverage evaluation including cyber liability and breach response services - Robust encryption and secure communication practices safeguarding sensitive data Using such a thorough assessment tool can significantly reduce third-party vulnerabilities and help maintain regulatory compliance. For organizations committed to managing supply chain security rigorously, this checklist is an essential resource. The attached document is provided and owned by Infosec Train #TPRM #GRC #ISO27001 #RiskManagement

191

16 comentarios

📝 When we want to implement an #ISMS in a complex IT infrastructure, we think about different paths. There are also different implementation methods, such as #ISO27001, #NIST, #BSI IT-Grundschutz, #CISv8 or other frameworks or standards. 👉 With this roadmap, we can better understand which methods to use or What path do we have ahead? #ISMSRoadmap: This image shows what we will need at each stage from start to finish. I am convinced that an overview of the implementation is very crucial, especially in critical technical networks with diverse assets and multiple vulnerabilities & modern Threats same as #AI ( 💠 Don't ignore the threats posed by artificial intelligence.) 💡Please note which framework or standard is needed at which stage? ISO27001 is very good, but we need a technical and procedural guide. For example, ISO27001 requires training, but not the method. Or the requirements in ISO27001 listed in Section 8 of Appendix A Technological Controls. 📌 As you know, implementing an information security management system(#ISMS) in large companies with a lot of equipment takes six months to a year, so we must be very careful when implementing or preparing requirements. (Time is gold, time is money💸 🪙 💰) ✅Cisco Security Reference Architecture: https://lnkd.in/dGWiUAVA ✅CISv8 Benchmark for Hardening(💠Very very important and complete for hardening): https://lnkd.in/gWEMiwrm ✅NIST SP 800-50r1: https://lnkd.in/d6TUdGan ✅NIST Zero Trust Architecture NIST.SP.800-207: https://lnkd.in/d2VF55Ht ✅Microsoft Zero Trust: https://lnkd.in/dh_u7sg8 ✅Google BeyondCorp(Zero Trust): https://lnkd.in/dPSXf5f5 ✅Palo Alto Zero Trust Enterprise: https://lnkd.in/dQChKG8s ✅ Cybersecurity & Information Security Risk Managemnet: https://lnkd.in/dZQ3jiti ✅BSI IT-Grundschutz-Compendium Edition 2022: https://lnkd.in/duqpkpN2 Thank you Hootan Yousefi for sharing. #iso27001 #iso27002 #iso27005 #nist #cis #microsoft #paloalto #zertrust #itinfrastructure #itsecurity #informationsecurity #cybersecurity #securritystandard

75

3 comentarios

💬The Language Every Business Leader Must Learn: Risk 🎬 Proud to be part of the GTIA - Global Technology Industry Association #GTIACyberBites campaign for Cybersecurity Awareness Month. Check out the short video below where I break down the Language of Risk and show how MSPs & SMBs can use it to reframe conversations in their business.  🔊 Risk speaks in four voices 1️⃣ Business - disruption, dollars, downtime 2️⃣ Technical - vulnerabilities, systems, and controls 3️⃣ Compliance - exposure if unchecked 4️⃣ Human - every employee is a risk owner The key is this: While risk looks different in each category, the language that connects them is universal. 💡 Risk is the common currency every leader can understand. Let’s grow stronger together. 💪 #CybersecurityAwarenessMonth #GTIA #WatchNow #GTIACyberBites #WeAreGTIA

47

7 comentarios

AI is accelerating business and cyber risk at the same speed. Attackers are already using GenAI to craft convincing phishing lures and map networks faster than most defenders can react. If your security strategy is rigid, outdated, or treated like a necessary evil, you are the soft target they are counting on. The companies that win will be the ones that build security into their AI roadmap from the start with flexible networks that adapt as fast as the threats. Bottom line: AI is only as powerful as the security keeping it in check.

68

8 comentarios

In two years, boards won’t be asking, “Did we run a pentest?” They’ll be asking, “Which AI agents continuously validate our stack?” The companies preparing for AI-native security today will be the ones ahead of regulation, compliance, and resilience tomorrow.

160

13 comentarios