New IIROC Cybersecurity Risk Management Guides – Voluntary?

On December 21, 2015, the Investment Industry Regulatory Organization of Canada (IIROC) published two excellent resources to help IIROC-regulated firms address cybersecurity threats. The resources are aimed, in particular, at small and medium-sized securities dealers. Although developed for dealer members of IIROC, the resources are useful for all small and medium-sized enterprises in the extended financial industry. The quality of the guides reflects the fact that IIROC consulted with external experts for their development. For the full article click here 

from cyber security caucus http://ift.tt/1O0scvg
via IFTTT

5 sins cybersecurity executives should avoid

With the advent of 2016, I was tempted to touch upon my thoughts on what the future of the cyberlandscape will hold, prognosticating trends and shifts and what the next big threat would be.  However, upon deeper reflection and further review of 2015, I’ve decided to focus on what we as cybersecurity executives have control of and can influence, as those have a direct and more profound impact on the organizations we steward.

The “Five Sins” may seem hyperbolic but given the fact that organizations are continuing to make the same mistakes without trying to rectify them, I think it’s fitting particularly at the end of the year when we aspire to be better than we were yesterday, but not as good as we hope to be tomorrow.

Trying to be perfect. The one constant in cybersecurity is that the bad guys have a marked advantage over the good guys. Network defenders try to remain vigilant against an onslaught of automated and targeted attacks that seek to exploit vulnerabilities to gain unauthorized access into their networks. For the full article click here 

from cyber security caucus http://ift.tt/1OGTzxP
via IFTTT

Post navigation 2016: Cybersecurity, Corporate Ebola and CASL

Take the word “risk”. Four letters, such a small word, but those four letters support entire industries, form the basis of global compliance programs and have as many conflicting interpretations as there are words in the thesaurus.

Ask the average person what “risk” means and the answer will be something like, “the chance that something bad might happen”. That’s as good a definition as any for everyday life, but the Risk Management world uses that word in fundamentally different ways.

This definition of risk from investopedia  tells the reader everything and at the same time absolutely nothing. It’s a vague idea, requiring context to be properly understood. For the full article click here 

from cyber security caucus http://ift.tt/1JT4iOw
via IFTTT

6 predictions for federal IT in 2016

The end of a year always brings thoughts of the next. For any community of experts, that’s bound to lead to predictions as people think about the topics and trends that dominated the last year and what they think (and hope) will be the focus of the next 12 months.

As a reporter, this means an inbox full of predictions from sources and would-be thought leaders. Here are some of the ones I found most interesting:

Note: I’m also interested in hearing more predictions for next year. Read through the list then add your own in the comments section.

Cyber crime legislation goes global

Trend Micro’s Senior Vice President and General Counsel Felix Sterling noted the prevalence of cyber crime in 2015 and predicts 2016 will be the year Congress and legislative bodies around the world take bolder action. From a blog post on Trend Micro’s site: For the full article click here 

from cyber security caucus http://ift.tt/1NWmCtQ
via IFTTT

Southern Utah University to offer cyber security master’s

ST. GEORGE, Utah (AP) – Southern Utah University is planning to offer a master’s in cyber security starting this spring.

The Spectrum newspaper in St. George reports (http://bit.ly/1RTsCHL ) that university say the program is being created to fill a growing national need for cyber security specialists.

For the full article click here 

from cyber security caucus http://ift.tt/1NWmCdt
via IFTTT

Hedge Fund Compliance Increasingly Focused On Cybersecurity

Where Are All The Women In White Hats?

America needs cyber talent — especially among women. Without a capable workforce to secure the smartphone in your hand or the highly classified networks our government operates within, our economy and national security will be at risk.

We need to nurture a pool of interested young men and women to go into science, technology, engineering and math (STEM) programs. The troubling news is that we are already behind the curve — and more women than men feel they are not qualified.

Were it not for a simple homework assignment that involved my own dad some years ago, I may not have ended up with a career in one of America’s most lucrative and burgeoning tech fields: cybersecurity. For the full article click here 

from cyber security caucus http://ift.tt/1SpOLg4
via IFTTT