Firmament’s Post

For those who’ve asked about the most common failures in Security Champion initiatives, I covered the basics here: https://lnkd.in/edu8H5Hn Not scratched that itch for you? Want to define, mobilise and get data driven insights? Get in touch. #ekcosecurity #securitychampions #federatedsecurity

Federating security practices… I love this but if you don’t go into it with a clear plan of demonstrating ongoing value it WILL fail. It CAN deliver fantastic, data driven insights and value. I’ve done this a number of times, some instances have persisted and some have tapered off once I’d left for another organisation. Curious? #ekcosecurity #productsecurity #champions #datadriveninsights #ekco

Many great registrants so far! Click below to sign up for the #shipping & #logistics chat #cybersecurity #ciso #votiro #c3 Votiro C3 Technology Advisors Andrew Klos #2024trends #cybersecurityinsights

Challenged with how to identify & manage risk in the firmware & software components of devices? Be sure to check out NetRise at #RSAC2024 to learn more about how their platform can assist - or reach out to me beforehand so we can provide an introduction to the team! Derek McCarthy, Mark Hauptman, Thomas Pace, Steve W.

I never tire of sharing the stage with absolute powerhouses like Allison Giddens, Amy Williams PhD, Justin DePalmo and Poupak Afshar! Hope to see a lot of folks at our pre-intensive session at the National 8(a) Association Small Business Conference in Atlanta, GA on Feb 5th! No shortage of topics to discuss that impact small businesses in the #defense #supplychain - #CMMC looms large, increasing demand for supply chain #security and #resiliency along with increasing pressure for surge capacity and mission assurance; it's enough to make one worry about the future of small businesses supporting the #DoD. Will we solve everything during our panel? It's definitely possible. Far more likely though, we'll at least discuss the strategies we see working amongst the uncertain situation(s) ahead. Will our advice pan out? Well, you won't know if you don't come hear it! See you there! #N8aSBC2024 #cybersecurity #smallbusiness #compliance #dib

Mimecast’s CTPO David Raissipour spoke with Channel Futures on our acquisition of Elevate Security. He details what the move means for Mimecast customers and partners and why human risk must be prioritized by all organizations. Check out the full article here.

Mimecast’s CTPO David Raissipour spoke with Channel Futures on our acquisition of Elevate Security. He details what the move means for Mimecast customers and partners and why human risk must be prioritized by all organizations. Check out the full article here.

The coolest cybersecurity startup is coming out of stealth today. Auguria, Inc., founded by Keith Palumbo (ex-Cylance), and Chris Coulter, (Cylance and SentinelOne alumni), is launching its security data integration, transformation, and analytics platform. It’s like nothing else you’ve seen before. As an industry, we never really solved alert fatigue and data overload. Like anyone suffering from a chronic condition,  we’ve just learned to live with it. It’s mostly the case that the vast majority of data we collect contains no indicators of real breach activity. The problem has always been that we don’t know what is and what isn't relevant to any ongoing incidents until we've reviewed and analyzed it. In the case of continuous threat monitoring, the issue gets even thornier, with data needing to be constantly reviewed and reassessed over long time frames to detect the weak signals of an evasive and wiley attacker. Rule-based deduplication and manual detection tuning can help reduce the data a bit, but quickly hit diminishing returns. See the 2023 SANS SOC Survey for example, where 26.1% of surveyed organizations using SOAR said they have a full-time FTE managing it. The other big challenge is the unsustainable cost of SIEM data ingestion. That's why I love the philosophy behind Auguria so much. It’s a vector-based security analytics platform, but with a unique security ontology and computation engine that creates vector embeddings purpose made to automate security use cases that are based on event classification and ranking. Want to send low-relevance network events to low-cost storage? Need to forward anything highly suspicious involving PowerShell to your SIEM? Or maybe you want to send any high-priority events to your datalake, or even straight to an LLM like an AI assistant or security copilot. And none of this requires any complex rule logic. Auguria helps you with all of that. Auguria seems like a particle accelerator for classifying and prioritizing security data, but in reality, it’s the industry's first vector database designed for security operations. Why is this such a big deal?? Vectors allow a wide range of data operations that are ideally suited for security. Semantic search is a good example. Imagine you perform a search and you don't just find exact word matches. Instead, the search engine returns contextually relevant results, even if they don't contain the exact words you typed. This is especially powerful when an analyst doesn’t have any exact keywords to use like we often find in threat hunting. That’s why I was really excited and jumped at the chance to work with the team on preparing the launch today. If you need to get a grip on your SIEM or data lake costs, want to save yourself a ton of triage time wading through false positives, or want to start laying the infrastructure to transition your SOC to the autonomic age, definitely check Auguria out.

🌟 Elastic is thrilled to announce our sponsorship of the upcoming CYBERFUTURE Summit, where the brightest minds in cybersecurity will converge to discuss the future landscape of digital defense. In the afternoon session, we're honored to host a panel featuring two distinguished HSToday awardees: Bob Kolasky, recognized as HSToday's Strategic Advisor of the Year for 2023, and Dan Daly, the deserving recipient of Homeland's Human Firewall award for his exceptional work at TSA. Joining them are potential winners for next year, including CBP's Scott Davis, IRS's Rick Therrien, and the USCG's Chrishan Francis. Together, they'll share invaluable insights on the evolving challenges in cybersecurity, offering a comprehensive view from both the public and private sectors. As the day unfolds, be sure not to miss our reception hosted by Elastic – a prime opportunity to network, engage with industry leaders, and celebrate the strides we're collectively making in fortifying our digital future. The CYBERFUTURE Summit promises an afternoon brimming with knowledge, innovation, and collaboration, and we can't wait to be part of this dynamic event shaping the future of cybersecurity. See you there! 🔒🚀 Register Here: https://lnkd.in/eV-CCywH #CYBERFUTURE #ElasticSponsors #elastic #search #observe #detect #publicsector #federal #sled #partnerships #RockIT #SearchON #enterprisesearch #observability #cybersecurity #transformation #team #partners #technology #leaders #innovation #energy #networking #cyber #tribal

This event is going to be amazing. Unfortunately, I can not make this one. But if you do go, please make sure Brian Schneble or Erik Wille don't start claiming they invented the phrase "It Depends!" If you're a security or privacy analyst, engineer, architect, leader or any other practitioner role - or you are working on joining the field, please visit the link in the post below for more information and to register. #security #privacy #practitioners #ciso #cio #cto #distillingsecurity #securitydebate #security #infosec #informationsecurity