Virginia – РИСК-АКАДЕМИЯ – АНО ДПО ИСАР

A Conversation with Former CISA Director Christopher Krebs

riskacademy — Mon, 30 Nov 2020 18:47:53 +0000

Guests

Christopher Krebs, Former CISA Director

Christopher Krebs served as the first director of the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA). As Director, Mr. Krebs oversaw CISA’s efforts to manage risk to the nation’s businesses and government agencies, bringing together partners to collectively defend against cyber and physical threats.

Before serving as CISA Director, Mr. Krebs served in various roles at the Department, responsible for a range of cybersecurity, critical infrastructure, and national resilience issues.

Prior to coming to DHS, he directed U.S. cybersecurity policy for Microsoft. Before Microsoft, Mr. Krebs consulted industry and government clients on complex cybersecurity and business risk matters.

He previously served in the Bush Administration, advising DHS leadership on domestic and international risk management and public private partnership initiatives.

Mr. Krebs holds a bachelor’s degree in environmental sciences from the University of Virginia and a J.D. from the Antonin Scalia Law School at George Mason University.

Kearney and Interos Launch INSITE™, the First End-to-End Supply Chain Risk Management Solution for Enterprise Resilience

riskacademy — Sun, 15 Nov 2020 07:16:55 +0000

ARLINGTON, Va., Nov. 12, 2020 (GLOBE NEWSWIRE) — Kearney, a leading global management-consulting partnership in more than 40 countries, and Interos, providers of the leading AI-based supply chain risk management solution, today announced the immediate availability of INSITE. The solution is the first end-to-end offering for early detection of distressed suppliers throughout multi-tier supply chains. It provides rapid triage and response – including actionable insights to meet emergent supplier needs, as well as identification of alternative sources.

“Our extensive experience optimizing supply chains of many industries has given us the knowledge and expertise that help our clients create resilient operations. The global pandemic, new policies and regulations have created unprecedented systemic challenges. This unique combination of Kearney’s industry knowledge and Interos technology platform for early detection and rapid response has become essential for sustained resilience.” said Ryan Elliott, Partner at Kearney.

Already deployed to assist the U.S. Department of Defense and its suppliers in optimizing performance of the most complex supplier ecosystems,…

St Mel’s K, a Catholic academy of the LA Archdioceses for Kindergarten students has partnered with Heed Consulting Group to head up Cyber Risk Management and IT Support – Press Release

riskacademy — Tue, 27 Oct 2020 01:24:18 +0000

St Mel School, a Catholic academy of the LA Archdioceses for kindergarten through 8th Grade students has partnered with California-based tech company, Heed Consulting Group, to take on the responsibility of Cyber Risk Management and IT Support.

The partnership enhances the school’s cybersecurity awareness with Heed, bringing to the table years of experience, expertise, and success in preventing cybercrimes.

As more schools adopt online classes due to the pandemic, cyber-attacks are prone to increase. In one of the most recent cyberattacks on schools, Fairfax County Public Schools in Virginia, one of the country’s largest school districts, was attacked during the first week of classes. The hackers successfully exfiltrated student, staff, and faculty data from the network. As proof, the group uploaded about 2% of the data they stole and demanded payment to restore the systems and the data.

Video Link: https://www.youtube.com/embed/qgkJAxlcX_8

Such cyber incidents are a colossal dent to a school’s reputation as it leads to a whirlwind of students’ mass exodus. As a solution, Heed Consulting Group is fighting…

ECS Ranked #14 on MSSP Alert’s Top 250 MSSP List for 2020

riskacademy — Tue, 13 Oct 2020 16:05:46 +0000

FAIRFAX, Va.–(BUSINESS WIRE)–ECS, a leader in advanced technology, science, and engineering solutions, has been named #14 out of 250 Top Managed Security Service Providers (MSSPs) by MSSP Alert. Published annually, this list spotlights the world’s leading MSSPs. ECS was also named a top public cloud managed service provider (MSP) in 2019 and the #1 vertical market MSP in both 2019 and 2020.

This year’s MSSP list featured companies from 25 different countries. Among this global field, ECS emerged as an industry leader in revenue, growth, and operational excellence. ECS was recognized for its managed detection and response (MDR) and extended detection and response (XDR) services, as well as the company’s in-house security operations center (SOC), providing 24x7x365 protection from cyber threats.

“We are thrilled to be named a top service provider by MSSP Alert,” said Andy Woods, vice president of enterprise managed services at ECS. “This inclusion reflects ECS’ continued success in the design, implementation, partner alignment and management of custom security solutions for a wide range of highly regulated global organizations across the enterprise…

Senate Democrat raises concerns around Universal Health Services breach

riskacademy — Sat, 10 Oct 2020 17:49:31 +0000

Sen. Mark WarnerMark Robert WarnerHillicon Valley: Twitter tightens rules before election | Intelligence chief briefed lawmakers on foreign influence threats | Democrats launch inquiry into Pentagon’s moves on a national 5G network Senate Democrat raises concerns around Universal Health Services breach Hillicon Valley: Congressional antitrust report rips tech firms | Facebook tightens ban on QAnon content | Social media groups urged to weed out disinformation targeting minority voters MORE (D-Va.) on Friday raised concerns around a recent cyberattack on hospital chain Universal Health Services (UHS) that resulted in the data of millions of customers potentially being compromised.

In a letter to UHS Chairman and CEO Alan Miller, Warner, who serves as vice chairman of the Senate Intelligence Committee, asked a series of questions in relation to a ransomware attack on UHS last month that crashed systems at hospital facilities across the nation.

UHS has more than 400 facilities in the U.S. and United Kingdom, with more than 90,000 employees, and it has previously stressed that there is no evidence any data was stolen or accessed. NBC News reported last week that the incident…

Warner pushes for measures to reinforce cybersecurity in public schools : Augusta Free Press

riskacademy — Sun, 20 Sep 2020 15:32:41 +0000

Published Sunday, Sep. 20, 2020, 9:50 am

Join AFP’s 100,000+ followers on Facebook

Purchase a subscription to AFP | Subscribe to AFP podcasts on iTunes

News, press releases, letters to the editor: augustafreepress2@gmail.com

Advertising inquiries: freepress@ntelos.net

U.S. Sen. Mark R. Warner (D-VA) is raising alarm regarding the need to protect education infrastructure from cyber-attacks following a ransomware incident at Fairfax County Public Schools, the largest school system in Virginia.

In a letter to Education Secretary Betsy DeVos, Sen. Warner urged the U.S. Department of Education to develop guidance and disseminate best practices for K-12 schools and institutions of higher education and to work with school districts to develop a comprehensive, risk-based funding request from Congress.

“A ransomware attack on a school system in normal times can be disruptive and costly; in the context of a global public health emergency, with unprecedented reliance on remote learning, it is debilitating,” wrote Sen. Warner. “Sophisticated cyber-attacks and more opportunistic forms of malware,…

Markel hires Kelly Castriotta as Senior Director, Global Cyber Underwriting

riskacademy — Wed, 02 Sep 2020 20:58:46 +0000

RICHMOND, Va., Sept. 2, 2020 /PRNewswire/ — Markel Corporation (NYSE: MKL) announced today that Kelly Castriotta, Esq., has joined the company as Senior Director, Global Cyber Underwriting.

In this new role, Castriotta will work closely with Markel’s cyber leaders to further strengthen cyber underwriting best practices and standards across all of the company’s insurance divisions. She will also be the lead underwriting project manager for Markel’s US non-affirmative cyber project and provide guidance on product development and enterprise risk management initiatives.

Before joining Markel, Castriotta served as head of cyber underwriting and product development for financial lines at Allianz, where she led non-affirmative cyber mapping and implementation in North America. She also previously held underwriting and claims positions with Arch Insurance and worked for CNA Insurance as a claims attorney.

“Kelly is a recognized thought leader for cyber insurance, and we’re excited to welcome her to Markel. She has more than a decade of experience spanning product innovation, underwriting management, in-house claims consulting, and coverage litigation,” said Kara Owens, Managing…

Palo Alto Networks flags US$265M acquisition of The Crypsis Group

riskacademy — Tue, 25 Aug 2020 02:09:16 +0000

Credit: Palo Alto Networks

Cyber security vendor Palo Alto Networks has entered into an agreement to acquire incident response, risk management and digital forensics consulting firm The Crypsis Group for a total purchase price of US$265 million in cash.

Headquartered in Virginia, US, The Crypsis Group currently operates as part of the ZP Group, an organisation with a portfolio of companies specialising in breach response, national security solutions and IT staffing.

The company has more than 150 security consultants and has a history handling complex and significant cyber security incidents, responding to more than 1,300 security engagements each year.

The Crypsis Group has served more than 1,700 organisations across the healthcare, financial services, retail, e-commerce and energy industries.

The proposed acquisition is expected to close during Palo Alto Networks’ fiscal first quarter, subject to the…

COVID-19 Driving Urgency for Third-Party Risk Visibility, Market Leader Interos Growing Exponentially

riskacademy — Thu, 09 Jul 2020 20:45:37 +0000

ARLINGTON, Va., July 09, 2020 (GLOBE NEWSWIRE) — COVID-19 has dictated that companies across all industries urgently reevaluate third-party risk associated with their complex global supply chains and web of global business partners. Real-time, continuous monitoring of the health and stability of a company’s hundreds or thousands of business partners was virtually impossible before. Interos has cracked the code with the first and only AI-powered multi-tier, multi-factor third-party risk management platform. The company, today, announced unprecedented company and customer growth along with the hiring of a new Chief Technology Officer (CTO) and a new Chief Revenue Officer (CRO).

Since the start of major COVID-19 outbreaks in the US in March 2020, Interos has seen a 500% increase in inbound requests from current and prospective customers, which has played a major role in 961% revenue growth since January 2019. In March 2020, the company also announced plans to triple year-over-year sales growth alongside a $20MM Series B funding round.

“We’ve built the world’s largest business relationship graph, providing organizations with a multi-tiered picture of the level of…

Ransomware: The equal opportunity attacker

riskacademy — Sat, 04 Jul 2020 15:15:46 +0000

When it comes to ransomware, there is good news (sort of) and bad news (definitely).

“Once ransomware hits, the good news is you know about it,” said Eric Cole, founder and executive leader at Virginia-based Secure Anchor Consulting and a former member of the White House Commission on Cyber Security. “You know it’s on your system because you can’t access your data.”

Cole

And the bad news? In a webinar presentation sponsored by Norwalk-based Xerox, Cole — who is also a former chief technology officer at computer security company McAfee and former chief scientist at aerospace and arms company Lockheed Martin Corp. — noted that many people might be working on devices infected with ransomware without knowing their situation.

“We’ve seen a lot of attackers who are actually putting the payload on the system in what we call a ‘time bomb,’” he said. “There’s a probability that you might have ransomware on your system that has not been activated.”

Cole divided the business world’s approach to ransomware into two categories: either spending “a little bit upfront to make sure your data is protected, secured and locked down”…