Dawn Sizer

State, County, and Local Governments in Florida, are you aware of the mandatory cybersecurity awareness training and cybersecurity for executives and managers? The Arruda Group is here to help you check this off your to-do list with a compliance logo for your website. Contact us today at (813) 382-0859 or training@arrudagroup.com to schedule your training and get your compliance logo. Let us help you focus on your job as a network fire fighter. #Florida #CybersecurityAwareness #ComplianceLogo #cybersecuritytraining

4

A business risk assessment will identify the challenges and opportunities inside your organization. We do all kinds of IT business assessments. Visit us at https://lnkd.in/duJ7mSF or call (901) 572-1355 to start the conversation! #draytonknowsit #It #technology

1

It's official! The Maryland Online Data Privacy Act has passed and become law. Here are some questions that Maryland businesses should be able to answer to be compliant with MODPA. If you're not quite sure where to start, or if you already have data privacy policies and procedures in place and need a third-party assessment, let me know, and we can schedule a quick call to discuss your needs. ·        Data Inventory and Processing Activities o  What personal data does your business collect, and for what purposes? o  How do you document and manage data processing activities? o  Can you provide a map or inventory of where consumer data is stored and how it flows through your organization? ·        Consumer Rights and Requests o  What mechanisms allow consumers to access, correct, delete, or transfer personal data? o  How does your business handle consumer requests to opt out of data processing, such as for targeted advertising or the sale of their personal data? o  What is the average response time to consumer data requests, and how do you ensure compliance with legal timeframes? ·        Privacy Notices and Policies o  How do you inform consumers about collecting, using, and sharing data? o  Is your privacy policy aligned with current data protection laws and accessible to consumers? o  How often do you review and update your privacy notices or policies? ·        Data Security Measures o  What administrative, technical, and physical security measures are in place to protect personal data? o  How do you assess the effectiveness of these security measures? o  Have there been any data breaches in the past two years, and how were they managed? ·        Third-party Management and Contracts o  Do you share consumer data with third parties, and if so, for what purposes? o  What criteria do you use to evaluate third-party service providers regarding data protection? o  How do you ensure data processors and third parties comply with privacy obligations? ·        Training and Awareness o  What type of data protection training do employees receive? o  How frequently is data privacy and security training provided to staff? o  Are designated personnel such as a Data Protection Officer responsible for data protection compliance? ·        Legal Compliance and Data Protection Impact Assessments o  Have you conducted data protection impact assessments for processing activities that pose a high risk to consumer privacy? o  How do you ensure ongoing compliance with data privacy laws and regulations, including sector-specific requirements? o  Are there processes to handle changes in data protection laws or the legal landscape? ·        Data Integrity and Minimization o  How do you ensure the accuracy of the personal data you collect and maintain? o  Do you have policies in place for data minimization and retention? How do you determine the lifespan of the data you collect? #MODPA #GDPR #DataPrivacy #HumanRights

10

Registered Provider Organizations (RPOs) offer a range of services to small contractors seeking CMMC certification. These services include: 1️⃣ Consulting: RPOs can provide consulting services to help small contractors understand the CMMC requirements and develop a roadmap for achieving certification. They can assess the contractor's current cybersecurity practices, identify gaps and weaknesses, and provide guidance on implementing the necessary controls. 2️⃣ Training: RPOs offer training programs and workshops to educate small contractors on the CMMC framework, cybersecurity best practices, and the specific requirements for each level of certification. These training sessions can help contractors build internal capabilities, enhance their cybersecurity knowledge, and prepare for the certification process. 3️⃣ Gap Analysis: RPOs can conduct a thorough assessment of the contractor's current cybersecurity posture and compare it against the requirements of the desired CMMC level. This gap analysis helps identify areas where additional measures or improvements are needed to meet the certification criteria. 4️⃣ Documentation Support: Achieving CMMC certification requires proper documentation of cybersecurity policies, procedures, and controls. RPOs can assist small contractors in developing and organizing the necessary documentation, ensuring that it aligns with the CMMC requirements and provides evidence of compliance. 5️⃣ Readiness Assessments: RPOs can perform readiness assessments to evaluate the contractor's preparedness for the formal CMMC assessment. These assessments simulate the certification process, identify any potential issues or gaps, and provide recommendations for improvement. 6️⃣ Remediation Support: If gaps or weaknesses are identified during the gap analysis or readiness assessment, RPOs can provide guidance and support in remediating those issues. They can help small contractors implement the necessary cybersecurity controls, policies, and procedures to meet the CMMC requirements. 7️⃣ Continuous Monitoring: RPOs can assist small contractors in establishing and maintaining a continuous monitoring program to ensure ongoing compliance with the CMMC requirements. This includes monitoring and assessing the effectiveness of cybersecurity controls, conducting regular assessments, and addressing any identified vulnerabilities or risks. Working with an RPO can provide small contractors with expert guidance, specialized knowledge, and a structured approach to achieving CMMC certification. RPOs can customize their services to the specific needs and capabilities of the contractor, helping them navigate the certification process and enhance their cybersecurity posture. 💼💻🌱 #CMMC #cybersecurity #governmentcontracts

1

Safeguarding your business from cyber threats and data breaches is crucial. That's why our Cyber Insurance and advanced Zero Trust Solutions are designed to protect your network's integrity and give you peace of mind. With our expertise, you can focus on growing your business while we handle the security. Visit cyberussystems.com to learn more. #viral #cyber #cybersecurity #safety #internetsafety

4

Interested in Cybersecurity and hardening your infrastructure? Did you know that the Department of Homeland Security and specifically the Cybersecurity and Infrastructure Security Agency offer a ton of free online courses and programs. I'm adding a link specifically to the Assessment Evaluation and Standardization (AES) Program but there are a lot of resources available as well as free evaluations for organizations to harden themselves against threats. #Cybersecurity #InfrastructureSecurity #CISAServices #DHS #FreeTraining #OnlineCourses #CyberThreats #SecurityEvaluation #BusinessProtection #ITSecurity #CyberAwareness #TechTraining #CyberSafety #DataProtection #CyberDefense #ITInfrastructure #SoftStackers https://lnkd.in/g6_aKANZ

8

The countdown is on! 🕒 Heading to the Cybersecurity and Privacy Professionals Conference on May 1–3 in Minneapolis. Ready to dive into dynamic discussions with industry leaders and peers about safeguarding higher education institutions. Don't let this opportunity pass – register now!  https://lnkd.in/dT9Fq8Jq #CybersecPrivacy24

68

5 Comments

Analyzing Phishing Email Headers: Protect Yourself from Online Scams Discover how to analyze phishing email headers in this informative video. Learn how to identify urgent or alarming language, generic greetings, suspicious links, and more. Stay safe from online scams and protect your personal information. #OnlineSafety #PhishingScams #EmailSecurity #CyberSecurity #ProtectYourself #StaySafeOnline #PhishingAwareness #OnlineScamPrevention #EmailFraud #InternetSafety

8

ControlCase’s SOC 2 Compliance and Attestation Webinar is now available on our YouTube channel. Check out the webinar to learn from well-known cybersecurity experts everything there is to know about SOC 2.   https://lnkd.in/dQ3Cu5Qx #ControlCase #Webinar #SOC2 #Cybersecurity

41

*** CCP May 20-24, 2024 *** Happy Mother's Day from WTI! All MOMS (even of puppies and kitties) can use the COUPON CODE "MOMSROCK" to receive $300 off our upcoming CCP course on MAY 20, 2022. This class is filling up and I urge anyone who needs to get meet the requirements and better understand the CMMC Program to attend. There is no better way to save your company significant costs in CMMC prep. Of course, there is no better way to become an important part of this ecosystem and work towards becoming a much-needed Assessor. Come find out about the CCP course with tons of "real-world" talk. Learn from active assessors and implementors. #CMMC #INFORMATIONSECURITY #NIST800171 #CCP #CYBERSECURITY #DIB https://lnkd.in/dh6czitz

11

1 Comment

Please share this Cybersecurity Bootcamp info session invitation from Evolve Security Academy with anyone interested in transitioning to cybersecurity.

7

How to lessen the impact of complying with DFARS CUI requirements (DFARS 252.204.7012) or the CMMC program assessment you may be required to meet. Yes, the costs will be high esp. for an SMB. The answer is a business answer and not a cybersecurity answer at all. When I study P&L statements and balance sheets with my financial review team (these days that means by myself :p), I see large expenses that are spread out across months and quarters. This is how to avoid that large lump payment that hurts. The same for the DFARS and CMMC preparations. Spread out your workload across 12-18 months. Pay for services as you need them in small affordable amounts. For example, make a $30k CMMC preparation a $1600/Month expense over 18 months. There is another secret benefit to this approach - most compliance experts will tell you that it takes that long anyway if you are to truly implement a proper and passable cybersecurity program. So many of the answers to managing a cybersecurity program can be found in the daily business practices you already are doing. I have been studying how to lessen the burden on SMB's to achieve compliance and have some controversial ideas that I have been slowly unwinding here. They include: 1. [Executive Leadership] CEO emotional intelligence (EQ) - no this is not an attack but a concept for executive leadership if you have read anything about it [Subtopic Executive Coaching] 2. [Team Building] Team Transparency and commitment. 3. [Project Management] Use of tools like OKR's to keep the 18-month program on track and accountable to each other (another sign of EQ). Trust is good but verification is better. 4. [IT Planning and Management] Putting together the right mix of tools (yes you might choose to buy some software for parts of this) that will help you cover a majority of the security controls and requirements without overlap. 5. [Board Room Discussion] Consideration of your IT architecture and migrations to platforms that will ease the compliance burden. 6. [HR} Find a compliance SME that your team can work with over the 18 months and beyond. Get the right consultant on the bus and get the wrong consultant off the bus. Food for thought. #CW #ceomindset #CMMC #cybersecurity #DFARS

2

1 Comment

Are you running those IR tabletop exercises and implementing the gaps you identify? https://lnkd.in/eKMSsCXy #incidentresponse #tabletopexercises #cybersecurity

16

🔔 Cybersecurity and Infrastructure Security Agency's Justin Forbes  shares his thoughts about CISA's mission, cyber on hardware, and having a business while being a federal employee. 🔊 Take a listen to the latest episode of the Best8(a) Podcast! #cisa #govcon #podcast #cybersecurity #smallbusiness (All comments and opinions expressed in this podcast are personal and do not represent CISA or any government agency) https://lnkd.in/d8X_Qvr4

10

Zoinks!! Here are 5 tips for Hurricane Preparedness in IT for all businesses: 1. Data Protection: Create extra backups of your data 24 to 36 hours prior to the storm’s predicted arrival. 2. Equipment Safety: Relocate computers away from windows and doors and elevate them off the floor on the final day before the office is closed due to the storm. 3. Power Disconnection: Disconnect power cords and surge protectors, and raise them off the floor on the last working day before the storm. 4. Window Security: Ensure all windows are securely boarded up on the final day before the office is closed. 5. Essential Hardware: Make certain that your team takes any crucial computers with them when they evacuate. This is especially important for computers that have locally installed business-critical applications such as QuickBooks, AutoCAD, or bespoke software. Gang -If you’ve got any groovy tips or tricks on the topic, don’t be shy! Share ‘em with the gang! ...And if you want customized recommendations for your organization or industry, reach out for a free chat, and I will help you solve the mystery! #ITPreparedness #HurricaneSafety #DataProtection #BusinessContinuity #DisasterRecovery #MosherConsultingLLC

8

2 Comments