Fortress Information Security’s Post

Feeling overwhelmed by cyber threats? ️ Our latest article offers 9 actionable tips for CISOs and decision makers to reclaim control & achieve a sustainable work style. Read here: https://lnkd.in/dz5adRrp #CISOs #wellbeing #Maymentalhealthawareness #StaySafe #StaySecure #XRATOR

There’s a lot of debate going on about the effectiveness of psychological nudges lately. While nudges can be great for getting immediate results, their impact tends to fade without continuous reinforcement/engagement. This doesn’t mean they’re useless—it just means they aren’t a one-stop solution for behavior change. The truth is, nudges work well in specific situations, helping with momentary decisions. However, relying solely on these for lasting behavior modification in cybersecurity isn't enough. Understandably, the concept of "it works with some people, sometimes" can sound like a nightmare to people whose expertise is in technology. But when it comes to human behavior, there is no one size fits all solution. Instead of dismissing nudging outright, a better response is to find ways to integrate it effectively with other security measures, and discover the circumstances under which it is most effective in a cybersecurity context. Such research is going to be absolutely critical to improving the global cyber resilience. #cybersecurity #humanriskmanagement #nudging #praxissecuritylabs #research #cyberpsychology Thea Mannix Kai Roer

🚀Case Study: East Midlands Mental Health Trust Boosts Cyber Security with Maple’s 24/7 Fully Managed Detection and Response (MDR)🚀 At Maple, we partnered with a major NHS Trust in the East Midlands to tackle significant #cybersecurity challenges with our #MDR service, built on #MicrosoftSentinel. The Challenge: 📈 Overwhelming alert volumes consuming valuable time and resources 🛡️ Pressure to demonstrate compliance (DSPT) 🚨Difficulty in monitoring the environment and investigating incidents Our Solution: 🚦Customised Microsoft Sentinel for their specific needs ⚠️ Streamlined alert management 📢 Automated #DSPT reporting The Results: 📉 Reduced alerts from 900 to 60 per month 💰 Achieved cost savings through tool consolidation 🔐 Enhanced overall security posture Read the full case study and find out what the Trust's Security and Compliance Manager had to say. #HealthcareSecurity #CaseStudy https://hubs.ly/Q02JdZ_R0

What is the cyber human factor? The human factor has less to do with actual error and more to do with inadequate security cultures and the exploitation of human behaviour and goodwill. By better understanding the way in which people operate in the workplace, as well as how malicious actors set out to exploit classic human traits, it is possible to identify and address areas of human fallibility. Remember: ·     Be aware: Regularly assess your cyber risks and prioritise actions based on impact and budget ·     Be proactive: Remember security basics and proactively test for vulnerabilities ·     Be prepared: Have your incident response plan in place, your workforce prepped, and alternatives decided ahead of time #riskculturelab #riskculture https://lnkd.in/dkJAGYv

𝐃𝐞𝐚𝐫 𝐋𝐢𝐧𝐤𝐞𝐝 𝐅𝐚𝐦𝐢𝐥𝐲,  After observing the difficulties of Analysts in my team and the ones who ask for support in my inbox and their questions. I’ve concluded that majority of the analysts in the field of cyber security are missing out on measure mind set about “I𝐧𝐯𝐞𝐬𝐭𝐢𝐠𝐚𝐭𝐢𝐨𝐧𝐬”, “𝐃𝐞𝐭𝐞𝐜𝐭𝐢𝐨𝐧𝐬”, and “𝐂𝐨𝐧𝐜𝐥𝐮𝐬𝐢𝐨𝐧” about true or false positive nature of a threat from security controls. They looks unclear about their “I𝐧𝐯𝐞𝐬𝐭𝐢𝐠𝐚𝐭𝐢𝐨𝐧𝐬”, “𝐃𝐞𝐭𝐞𝐜𝐭𝐢𝐨𝐧𝐬”, and “𝐂𝐨𝐧𝐜𝐥𝐮𝐬𝐢𝐨𝐧 about their suspicious and unsuspicious nature. So, keeping these things in view. I’ve decided to post a series of my articles related to the mindset of investigations and detections using security controls. The first series will include the strong basics related to 𝐀𝐜𝐭𝐢𝐯𝐞 𝐃𝐢𝐫𝐞𝐜𝐭𝐨𝐫𝐲, which will include: • 𝐂𝐨𝐫𝐞 𝐜𝐨𝐧𝐜𝐞𝐩𝐭𝐬 𝐨𝐟 𝐀𝐜𝐭𝐢𝐯𝐞 𝐃𝐢𝐫𝐞𝐜𝐭𝐨𝐫𝐲. • 𝐀𝐭𝐭𝐚𝐜𝐤𝐬 𝐨𝐧 𝐀𝐜𝐭𝐢𝐯𝐞 𝐃𝐢𝐫𝐞𝐜𝐭𝐨𝐫𝐲. • 𝐋𝐨𝐠𝐢𝐜 𝐁𝐮𝐢𝐥𝐝𝐢𝐧𝐠. • 𝐃𝐞𝐭𝐞𝐜𝐭𝐢𝐨𝐧 𝐨𝐟 𝐀𝐭𝐭𝐚𝐜𝐤𝐬 𝐨𝐧 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐧𝐭𝐫𝐨𝐥𝐬. 𝐎𝐮𝐭𝐜𝐨𝐦𝐞: Hopefully after this series of articles you will have developed strong logic related to security , active directory and the detection of attacks on your event management system "SIEM" and other solutions. Hope it will be beneficial for everyone to whom these articles will be reached. The first article will be here very soon. #ActiveDirectory #socinvestigations #attacksdetection #Mitre #cybersecurity #socanalyst

🔒 In today's digital landscape, small to medium businesses (SMBs) face increasingly sophisticated cyber threats. The need for strong cybersecurity measures is critical as attacks become more frequent and complex. However, many SMBs struggle to hire and retain the necessary expertise due to a pervasive skills gap. IT decision-makers must choose between outsourcing cybersecurity services or investing in in-house training for their teams. Learn More: https://bit.ly/48yMZ8g 👈 #ABSWindsor #windsor #windsorontario #windsoressex #essexcounty #chathamontario #chathamkent #sarniaontario #yqgbusiness #windsorsmallbusiness #yqg

Under 48 hours to go before we kick off 2024 with our next webinar, and it`s one that definitely has something for everyone! We`re going deep into the human psychology, how trust is formed as infants, and why its essential to remember 2 key facts about cyber security awareness: 1) Awareness alone will not drive Change, and 2) Knowledge is not the same as Behaviour See you there, we kick off at 10am! https://lnkd.in/g2hF_rkW

According to Forrester in 2024 the involvement of a human factor will be present in 90% of data breaches. Data breaches may occur due to various factors, encompassing situations where individuals contribute to the incident through errors in handling information, intentional misuse, the compromise of credentials, or the strategic use of social engineering tactics. In these scenarios, the breach is a result of lapses in security, whether inadvertent or intentional, emphasizing the diverse vulnerabilities that organizations face in safeguarding their sensitive data. Reach out to us for an effective security awareness and training program! Let's work together to minimize the chances of your staff inadvertently becoming the entry point for malicious actors. #cybersecurity #cybersecurityawareness #cybersecuritytraining #cybersecuritysolutions #informationsecurity #datasecurity

"Done everything by the book and still facing a cyber hiccup? 📚✅ It only took one click on 'Remittanceadvice.html' for the unexpected to unfold. Here's the reality check: 1️⃣ Your SOC should be on alert. Are they? 2️⃣ Prevention tools - are they stopping these clicks? 3️⃣ Incident response - is your plan robust enough? 4️⃣ Employee accountability - what does that look like? Fusion Computing Limited specializes in turning these questions into solutions. Let's ensure your IT defense is impenetrable. 🛡️ Dive deeper with us. #CyberSecurity #ITSupport #RiskManagement #FusionComputing"

Have I got this right? Analysis helps. Analysis with the objective of improving processes. Not with the objective of apportioning blame. Analysis with the intent of improving the status quo. Not with the intent of buck passing. Uncompromising in ensuring that the real causes, often deep seated, are unearthed. But what should be analysed? Virtually every shortcoming of any sort. An asset does not have an agent installed. A pen test comes up with findings that you are not aware of. An external attack surface management tool reports an IP address that you didn’t know existed. A vulnerability management tool reports a finding that you thought was fixed. The SOC does not detect an incident. All this and more should be analysed. But most importantly the findings have to be acted upon equally uncompromisingly. Otherwise you are wasting your time and efforts. What do you think? #haveigotthisright #cybersecurity