Andy Ozment on the New Mind-Set in Cybersecurity

“How long does a bad guy dwell or live on your network before you catch them? Three or four years ago, sophisticated companies had dwell times that were in the hundreds of days, or years.

“Now a sophisticated company gets their dwell time down to seconds.…They kick the bad guy off before they can cause any real harm. That’s the kind of resilience that we’re looking for. And it’s also this mind shift in the defenders, to accept that somebody’s probably already broken into your network. What do you do about it then? Rather than this, ‘I’m going to keep everybody out. And I’m going to believe that I can be 100% effective.’” For the full article click here 

from cyber security caucus http://ift.tt/1UiTfC3
via IFTTT

New SAP Cybersecurity Report

Onapsis has released a new SANS report, “Blueprint for CIS Control Application: Securing the SAP Landscape”, that maps SAP cybersecurity to the CIS Critical Security Controls for Effective Cyber Defense.

The SANS Institute was established in 1989 as a cooperative research and education organization. The CIS Critical Security Controls are a set of internationally recognized standards outlining the most important cyber hygiene actions that every organization should implement to protect their information technology (IT) networks. The standards are developed, refined, validated, and updated by cyber experts who pull data from a variety of public and private threat sources and advices on approaching key controls that block known attacks and find the ones that get through. For the full article click here 

 

from cyber security caucus http://ift.tt/1sqzaUd
via IFTTT

CAIT bats for a Cyber Commission to enhance cyber security; writes to PM

New Delhi, June 1 (KNN) In the wake of growing need of cyber security, the Confederation of All India Traders (CAIT) has suggested Prime Minister Narendra Modi to form a Cyber Commission to strengthen cybersecurity in both public as well as private sectors.

In a letter to the Prime Minister, the traders’ apex body highlighted that India is emerging as one of prominent technology hub globally with steep rise in usage of internet and mobile commerce which may pose certain threats to cyber security.

To enhance cyber security in the country, CAIT has suggested the PM to form a Cyber Commission to strengthen cybersecurity in both public as well as private sectors while protecting privacy; ensuring public safety , economic and national security; fostering discovery and development of new technical solutions; enhancing partnership between Centre, State, Local Self Government and the private sector for development of cybersecurity technologies, policies and best practices.

CAIT National President B.C.Bhartia & Secretary General Praveen Khandelwal, in the letter, suggested that the proposed Cyber Commission may identify and study actions necessary to further improve cybersecurity awareness, risk management and recommend steps for adoption of best practices in private sector and at all levels of Government. For the full article click here 

from cyber security caucus http://ift.tt/1Y2xlJo
via IFTTT

Fidelis Cybersecurity to Speak at the Cowen and Company 44th Annual Technology, Media & Telecom Conference in New York City

York City on June 1 -2, 2016. Fidelis Cybersecurity President and CEO Peter George will speak during the panel session “Next-Gen Security: How New Attacks, Insider Threats and Cloud Are Changing the Security Landscape” at 11:00 am on June 2.

EVENT: Cowen and Company 44th Annual Technology, Media & Telecom Conference
SESSION: Next-Gen Security: How New Attacks, Insider Threats and Cloud Are Changing the Security Landscape.
TIME & DATE: 11:00 am on June 2, 2016
LOCATION: The Lotte New York Palace Hotel, New York City
TO ATTEND: The invitation-only conference is open to Cowen and Company’s institutional, venture capital and corporate clients.

“Fidelis Cybersecurity is honored to be among the respected and innovative companies participating in the Cowen and Company Annual Technology, Media and Telecom Conference,” says Fidelis Cybersecurity President and CEO Peter George. “In a world where threats are evolving at a rapid pace, cybersecurity is no longer an afterthought. C-level executives and boards understand it’s a critical business priority to minimize risk for their business and their customers, and protect their brand reputation.”

Cowen and Company’s conferences are major industry events attracting top institutional investors and leading companies in healthcare, technology, media and telecommunications, IT, consumer, energy and other sectors. These events include company presentations, on-stage interviews, panel discussions and management breakout sessions to provide institutional investors with direct contact with senior management and industry experts, and provide an introduction to dynamic emerging companies. For the full article click here 

from cyber security caucus http://ift.tt/1Y2xxIA
via IFTTT

U.S. Offshoot of Germany’s SAP Focuses on Cybersecurity, ‘Information Fusion’

Last week, I wrote a post about SAP NS2 and its CEO Mark Testoni, and how the German software giant managed to gain a foothold in providing technology for secure and sensitive U.S. government operations. What warrants elaboration here is the general nature of some of the work SAP NS2 is doing and, just as importantly, the amazing work SAP NS2 is doing to serve U.S. military veterans.

As I noted in that post, SAP NS2 was established in 2011 as a U.S. company that is independent of SAP, so it’s just as American as any other U.S. technology vendor. To further explain that, Testoni described the organization structure this way:

We have a board of directors that I work for, chaired by Frances Townsend, former Bush and Clinton administration [national security] appointee. We have three other outside board directors, and I’m one of three who are inside. The board provides the management structure over the company — SAP does not have the ability to do that. What SAP gets are the business results of what we do. It’s a really interesting model — it gives me what I would consider to be the best job in the world, because I have the ability, with the support of the board, to have wide-reaching authority to prosecute the business, to make investments. For the full article click here 

from cyber security caucus http://ift.tt/1Y2xRXP
via IFTTT

ServiceNow buys cybersecurity startup BrightPoint Security

ServiceNow has acquired cybersecurity startup BrightPoint Security as it looks to expand its own portfolio of cloud security offerings. Exact terms of the all-cash deal were not disclosed, however ServiceNow said it will reveal more details of the transaction in its next quarterly financial report.

Founded in 2011 by a former CSO of Merrill Lynch, BrightPoint offers businesses a distributed analytics approach to cybersecurity prevention and detection. Its sales pitch is that it can help customers understand the level of an attack and how to act against it.

The San Mateo, California-based startup used to be known as Vorstack until it changed its name about a year ago.

As for ServiceNow, the IT management services company intends to use BrightPoint to bolster the security operations platform it released in February. ServiceNow said BrightPoint’s technology will enable the platform to offer users “controlled information sharing to rapidly prioritize and better remediate threats.” For the full article click here 

from cyber security caucus http://ift.tt/1Y2xr3C
via IFTTT

First Midwest Bancorp, Inc. Deploys TopSpin Security to Meet Growing Cybersecurity Needs

HERZLIYA, ISRAEL–(Marketwired – Jun 1, 2016) – TopSpin Security, Inc., a provider of intelligent malware deception and detection solutions, today announced that First Midwest Bancorp, Inc. (“First Midwest”), one of the largest independent bank holding companies based in the United States Midwest, selected DECOYnet to meet its need for proactive security protection.

First Midwest is a growing organization in a highly regulated industry, and when it comes to creating a cybersecurity architecture, it faces a high level of complexity as it continues to add new lines of business and incorporate third-party applications. To meet its growing needs, First Midwest implemented TopSpin Security’s DECOYnet to obtain real-time security visibility and meet compliance requirements, such as those put forth by the Gramm-Leach-Bliley Act (GLBA) and Federal Financial Institutions Examination Council (FFIEC).

“The Bank selected DECOYnet because it provided the capabilities we needed, without having to add additional team members,” said Weston Nicolls, SVP, Information Security Manager, First Midwest. “We especially appreciate the level of visibility we receive and the solution’s ability to provide alerts that are easy to take action on. DECOYnet enables us to protect the critical assets of First Midwest without impacting the high level of service our clients expect.”

DECOYnet is a defense strategy solution comprised of a network of decoys that lure attackers looking to steal valuable information. Once an attacker has been discovered, DECOYnet provides a complete forensic trail of the attacker’s movements and deceives, confuses and defeats the attack in progress. It also observes activity in a network, analyzes communication between assets and remote locations and correlates the collected intelligence into accurate, actionable alerts. Immediately after deployment within First Midwest’s network, DECOYnet began to map data activity throughout the bank’s communication channels, endpoints and applications. It quickly identified complex behavioral patterns throughout the network, as well as potential blind spots. For the full article click here 

from cyber security caucus http://ift.tt/1Y2yhx6
via IFTTT