Alphonsus (Al) Quan-Hin’s Post

🌟 #TGS' inclusion in the first-ever #IDC MarketScape focusing on U.S. National Government Professional Security Services (#PSS) truly shines a light on our status as a cleared contractor and a major player in the very crowded and competitive #government space. This placement is a huge validation of the quality of our people and the quality of our work.   Discover how we can help your government agency build resilience, navigate mounting regulations, combat nation-state attacks, and reduce threat visibility: 

Insightful read from CRN Media on Insider Threat Awareness Month! This article dives into the importance of recognizing and addressing insider threats to safeguard your organization. A must-read for anyone interested in enhancing their security posture. #InsiderThreat #CyberSecurity #AwarenessMonth

Third party risk management in your supply chain is key to securing your business #supplychain #thirdpartyrisk

Australian Department of Home Affairs Secretary Stephanie Foster recently issued a series of formal directions under the Protective Security Policy Framework (#PSPF) instructing each federal government body to identify and mitigate potential cyber risks amidst rising concerns for foreign interference. Matt Waite, Director for Technical Account Management, breaks down how Tanium's real-time visibility and control of IT environments offers a breadth of capability, including several functional areas, which are directly relevant to the goals of PSPF Direction 002-2024. #GovernmentICT #australiangovernment #publicsector #cybergov #endpointmanagement #SBOM #cyberhygiene #endpointvisibility #incidentresponse #riskmanagement #nationalsecurity

The escalating complexity of cyberattacks and the increasing vulnerability of public #ITsystems necessitate strong crisis management strategies and risk reduction measures. In the midst of cyber crises, disruptions to IT can severely impact vital infrastructures and essential services, making urgent intervention imperative to prevent physical, economic, and reputational harm. Cyberattacks now play a pivotal role in intelligence, military operations, and criminal endeavors. In the absence of adequate safeguards, nations, municipalities, and critical infrastructures remain exposed to these threats, underscoring the vital link between #cybersecurity and #safety for industries, governments, and beyond. At QA&TEST Safety and Cybersecurity, we will delve into the convergence of safety and cybersecurity, equipping ourselves to navigate this fluid and critical domain. 👉 https://n9.cl/l95p6 Through dialogues with industry leaders, we will explore effective strategies, tools, and approaches for securing crucial assets and safeguarding the welfare of individuals and communities.

The breach that exposed 225,000 UK military personnel reportedly occurred on an external contractor payroll system which contained information on military personnel going back several years. This has highlighted the importance of ensuring that third parties maintain the same or better cyber security standards and controls the organizations are contracted to enforce. The rise in the dependency on third parties has meant that any organization, private or public, is only as strong as its weakest supplier, vendor, or service provider. That is why traditional third-party risk management is no longer good enough. For example: Conducting point-in-time third-party assessments is no longer enough. Continuous assessment, combined with business/organizational risk, cyber threats, and environmental context, is needed to ensure that third-party risks are managed across the entire lifecycle - From onboarding to off-boarding/termination. Want to find out more? #thirdpartyrisk #vendorrisk #riskmanagement #tprm

Findings just released by the US Government Accountability Office show that despite the Federal Information Security Modernization Act (FISMA) being implemented in 2014, only 8 of 23 civilian government agencies have security programs today, classed as 'effective.' There are 2 key recommendations; 1) The Director of the Office of Management and Budget (OMB), in collaboration with partners from the U.S. Department of Homeland Security (DHS), should create FISMA metrics. These metrics should specifically address the root causes of ineffective information security programs identified by inspectors general, such as issues related to management accountability and deficiencies in standards and quality control. 2) The Director of the Office of Management and Budget, in collaboration with partners from the Department of Homeland Security and the Council of the Inspectors General on Integrity and Efficiency (CIGIE), should enhance the Chief Information Officer and Inspector General metrics under FISMA. The improvement should involve establishing a clear connection between these metrics and performance goals, addressing workforce issues, accounting for agency size, and effectively addressing risk. Full article below 👇 #cybersecurity #FISMA #cio #federalagencies

The breach that exposed 225,000 UK military personnel reportedly occurred on an external contractor payroll system which contained information on military personnel going back several years. This has highlighted the importance of ensuring that third parties maintain the same or better cyber security standards and controls the organizations are contracted to enforce. The rise in the dependency on third parties has meant that any organization, private or public, is only as strong as its weakest supplier, vendor, or service provider. That is why traditional third-party risk management is no longer good enough. For example: Conducting point-in-time third-party assessments is no longer enough. Continuous assessment, combined with business/organizational risk, cyber threats, and environmental context, is needed to ensure that third-party risks are managed across the entire lifecycle - From onboarding to off-boarding/termination. Want to find out more? #thirdpartyrisk #vendorrisk #riskmanagement #tprm

While the stats depicted are for EU, the topic and reality is likely no different in the USA. I have heard on a number of occasions, "Why would I pay for a vulnerability assessment when DHS will do it for free?" Fair point. Have you ever examined what your wait time will be? Also, given the wait times, how would you demonstrate the RA controls for vulnerability assessment and management if you cannot define a consistent cadence? Koren Wise Ryan B. Allison Giddens Vincent Scott Kyle Lai Michael A. Echols MBA CISSP Joy Belinda Beland QTE, CISM, CMMC PI CCA Ozzie Saeed Will Dohr James Goepel https://lnkd.in/gnSgi68r