Derrick Coston, CISA, CISSP, GIAC

-

I think that we are now starting to see begin to take this serious.  The problem is real and hopefully we will finally begin looking at Cybersecurity differently.  I am reposting Paul German’s article found in Security Magazine.h This Article was written in 2018 and things appear to be getting worse vice better.  I think the time is now to begin thinking about the approaches to CyberSecurity.



source https://derrick-coston.com/2019/04/01/derrick-coston-cisa-cissp-giac-5/

Comments

Post a Comment

Popular posts from this blog

Derrick Coston, CISA, CISSP, GIAC

-
It’s amazing to see on a weekly basis, that organizations are still not taking steps in teh right direction to protect information that it has on its customers and employees.  Kacy Zurkus identified a troubling gap in her article “ Nearly Half of US Orgs Not Ready for CCDA ”   Despite how there was a push by organizations, about a year or so ago, to be compliant with the EU General Data Protection Regulation (GDPR), there now appears to be a less push or concern.  Is it because of the ability to enforce compliance.  Well Politico has identified an alarming fact in their article “ How one country blocks the world on data privacy ”  The GDPR is the world’s toughest standard for data privacy. But nearly a year later, its chief enforcer has yet to take a single action against major tech firms like Facebook and Google.  I applaud the State of California for their efforts, however, will the state be able to use its power to enforce compliance?  On paper...
Read more

Derrick Coston, CISA, CISSP, GIAC

-
This is one of the first analysis I have seen regarding the 2018 Cyber Security Breaches.  BakerHostetler’s Security Incident Response Report, is a step in the right direction as we look differently at how we improve our cyber security going forward.  I am sure more analysis are coming. However,  Help Net Security identified that a lack of understanding of the need for business and technology resilience among other leaders across an organization was identified as a key factor in pressuring CIOs and CISOs to make compromises in their efforts to maintain resilience against disruption. This article shows the ongoing struggle CIO and CISO, face when determining how to balance business needs against Cyber security requirements. The saga continues. source https://derrick-coston.com/2019/04/09/derrick-coston-cisa-cissp-giac-6/
Read more

Derrick Coston, CISA, CISSP, GIAC

-
I have always had my issues with Sales Teams.  CNBC reports that Cyber Security Vendors are driving the hacking new cycle.  Its a shame  because those of us who are consultants and trying to ensure that organizations and people stay aware of the Cyber threat landscape, we have some exploiting it.  This article is interesting because as I try to find important information to share with those in my sphere of influence.  My only concern with this article is that it states that “breaches that actually cause damage are relatively rare. As a result, vendors often try to make a big deal out of minor breaches that don’t expose important company or customer information.”  I disagree with this because they fail to address the actual breaches that were made public.  Privacy Rights.org showed that in 2018, there were 828 documented breaches totaling over  1,371,001,709 confidential data records that were breached or exposed.  This number is higher bec...
Read more