Department of Information and Communications Technology’s Post

CIS publishes new report on defining "Reasonable Data Security" The Center for Internet Security (CIS) recently published this guide in collaboration with other cybersecurity and legal experts in an attempt to help organizations understand what "Reasonable Data Security" means and also to provide prescriptive controls that any organization regardless of industry can implement to protect its organization and mitigate harm to others. The CIS calls on regulators to better articulate what their regulations mean when they demand reasonable safeguards. They have done an excellent job of aggregating various federal and state regulations to show that the CIS Critical Security Controls can serve as a standard by providing adequate coverage. The report can be found here: https://lnkd.in/dS2wFU_h..

Bill Alert! US House Bill HR 4910 - State Cyber Resiliency Act Policy: Science, Technology, Communications Status: Bill Introduced Full Details: https://lnkd.in/eEuHf4RA Bill 117 HR 4910, also known as the State Cyber Resiliency Act, is a piece of legislation introduced in the US Congress. The main goal of this bill is to enhance the cybersecurity capabilities of state and local governments across the country. The State Cyber Resiliency Act aims to achieve this goal by providing resources and support to state and local governments to help them better protect their systems and data from cyber threats. This includ...

This joint alert from CISA provides detailed guidance on how to protect global telecom networks that have already been compromised by PRC malware as part of a global espionage campaign. It includes specific guidance on Cisco systems. This compromise was first reported in mid November. #statesponsoredmalware #espionage #cisco #cyberdefense https://lnkd.in/gtqgHWA4

Want to know more about telecom security incidents? The key findings of the 2022 report are:   ❗155 incidents submitted  🕒 Double the amount of user hours lost compared to 2021, reaching 11 209 million hours  ↗ System failures still dominate in terms of impact, reaching 72% of reported incidents  ↙ Human error incidents and malicious actions have decreased compared to past years    Discover more insights 🔗 https://lnkd.in/e8BBUr5a

The EU's Digital Operational Resilience Act (DORA) is set to take effect in January 2025, bringing significant implications for organisations operating within the financial sector. Many people are still unaware of how this will effect them in the near future. Under DORA's mandate, financial entities and their critical third-party technology service providers must implement stringent ICT system guidelines by January 17, 2025. To find out what this means for your organisation, download our free whitepaper today. Download now: https://ow.ly/4Szx50SwIWt hashtag #DORA hashtag #CISO hashtag #SecurityAwareness hashtag #CyberSecurity hashtag #DataProtection hashtag #DataBreach hashtag #SecurityAwarenessTraining

#NIS2 Directive, why bother... As we edge closer to the deadline of the NIS2 Directive, to be applied from October 18th 2024, a lot of companies face the challenge of keeping ahead of these regulatory requirements. Why should you care? - Enhanced #security which is the aim of NIS2 to push for stronger security practices. This isn't just #compliance - it's about protecting our networks from increasingly sophisticated cyber threats. - Operational resilience by implementing these measures making your systems more resilient against attacks, we have all heard how much cyber crime is on the rise... - Failure to comply could result in up to €10 million or 2% of the total worldwide annual turnover of the preceding financial year, whichever is higher. We Are CORTEX is working closely with all #telecommunication clients to help them get ahead with our process automation and orchestration capability. #Scaling organisations often miss on major gaps that are left unnoticed. I haven't booked any time off this summer (August) so if you are free and want to explore what we can do for you - Let me know.

【Empowering Cybersecurity Resilience】 HKT and Sangfor Technologies have signed a Memorandum of Understanding to establish a collaboration in response to evolving cyber threats and the proposed 'Protection of Critical Infrastructure (Computer Systems) Bill' by the government. Numerous enterprises have expressed concerns, even worrying about meeting regulatory requirements. Both parties will work closely and provide comprehensive protection to enterprises, offering a more holistic cybersecurity solution that encompasses threat detection, remote access, and device protection. As Hong Kong's leading network service provider, HKT holds a distinct edge in the network domain. Leveraging its swift capture of cyber-attack intelligence and extensive cybersecurity expertise, HKT delivers optimal solutions for enterprises, covering regulatory compliance, prevention strategies, and security plan formulation to meet the latest legislative mandates. Read more: https://lnkd.in/gmBApKiy #HKTEnterpriseSolutions #DigitalTransformation #Cybersecurity #MSS #NGSOC

#CyberAlert | BeyondTrust security advisory A critical vulnerability has been discovered in BeyondTrust Privileged Remote Access and Remote Support products, which can allow an unauthenticated attacker to inject commands that are run as a site user. https://lnkd.in/edn437Vg This issue is fixed through a patch available for all supported releases of RS & PRA 22.1.x and higher. In addition, we strongly recommend organizations review and implement the Cyber Centre’s Top 10 IT Security Actions: - Consolidate, monitor, and defend Internet gateways - Patch operating systems and applications - Isolate web-facing applications https://lnkd.in/eBqd6hFN Should activity matching the content of this alert be discovered, recipients are encouraged to report via the My Cyber Portal (https://lnkd.in/gTtc3W4D), or by email at contact@cyber.gc.ca.

Worried about the security of your network but unsure how to assess it? Without the right solutions in place, many businesses struggle to maintain connectivity and avoid cyberattacks. Are you worried about whether you have the right measures in place? We have the expert knowledge to assess your network security and help you roll out changes. #BeMoreSecure with SCG, find out more here: https://buff.ly/3NFIvnx #SCG #SCGMidlands #BeMoreSecure #BusinessSolutions

As cyberthreats continue to grow more perilous, enterprise communications security is more critical than ever. Download this report from No Jitter and Oracle Communications for insights into better protecting your business from voice hackers: https://lnkd.in/giEWhb4Q