Webinar Topic: Ransomware: Threats, Understanding, and Prevention Date: March 25, 2024 Time: 1:30 p.m. – 2:30 p.m. EST   In today's rapidly evolving digital landscape, SMBs face unique challenges and threats. This webinar series aims to equip participants with essential knowledge to navigate these challenges effectively. Our upcoming session will delve into the critical topic of Ransomware, shedding light on the prevailing threats, strategies for understanding Ransomware, and proactive measures for prevention.   This session will feature insights from experts at CISA alongside industry leaders, offering invaluable perspectives and practical advice. Moreover, we encourage active participation by providing dedicated time for questions and answers, ensuring that attendees can engage directly with the presenters.   Who should attend? This webinar is tailored for federal, state, local, and private sector stakeholders interested in gaining a deeper understanding of the risks associated with critical infrastructure systems and their interdependencies.   Don't miss out on this opportunity to enhance your cybersecurity posture and safeguard your organization against evolving threats.   Join Now View More

Hi all! I have a client who has an imminent need to expand their company's threat landscape to include a high-risk jurisdiction (from a data perspective), and I’d really value any insights or recommendations you may have on the topic.  In particular, I’m looking for recommendations for two scenarios: Enabling their employees based in the high-risk jurisdiction to work with considerably limited access to the wider org's data. Securing corporate data for employees traveling between our current office locations and the high-risk jurisdiction My initial thinking is along the following lines: For an employee based in a high-risk jurisdiction: Locked-down laptops providing access only to a virtual desktop environment, strong MDM controls, segregated collaboration/storage (e.g., a separate SharePoint branch), etc. For travelers from our current locations: Burner phones and laptops, MDM enforcement, hardware-based MFA (e.g., YubiKeys), and related controls. That said, this is a new ask for me, so I’d could be way off course, so I'm anxious to hear what the community is willing to share...alternative approaches, lessons learned, or “watch-outs” you’ve encountered in similar situations. This is somewhat time-sensitive, as I’ll need to present my findings in meetings next week and the week after. Any guidance you’re able to share would be greatly appreciated. Thanks in advance! View More

Have you ever received an email and weren’t sure if it was legitimate or a scam? I’m running a quick survey to understand how people make email decisions. It has an interesting quiz. 👉 Take the survey here:https://feedback.surveylab.com/34f/b2b2ea7d/ 🎯 Even better: share with your network — the more voices, the richer the insights! View More

Participants Needed for Research Study Adoption of AI-Driven Cybersecurity Tools in Small and Mid-Sized Businesses   Purpose of the Study This research explores how cybersecurity decision-makers in high-risk small and mid-sized businesses (SMBs) view and approach the adoption of AI-based cybersecurity tools. The goal is to better understand the barriers and enablers that influence adoption. This study is part of the researcher's doctoral education program.   Inclusion Criteria 1. Hold a role with cybersecurity decision-making authority (e.g., CISO, IT Director, Security Manager). 2. Are currently employed in a small to mid-sized U.S.-based business (fewer than 500 employees). 3. Work in a high-risk sector - specifically healthcare, finance, or legal services. 4. Are 18 years of age or older. 5. Are willing to participate in a 45-60-minute interview via Zoom.   Exclusion Criteria 1. Have been in your current cybersecurity decision-making role for less than 6 months. 2. Are employed at an organization currently involved in litigation, investigation, or crisis recovery. 3. Have a significant conflict of interest (e.g., multiple board memberships). 4. Are unable to provide informed consent in English. 5. Are employed by a government or military organization.   Participation Details - One 45-60 minute interview via Zoom. - Interview questions will explore organizational readiness, leadership support, and environmental influences related to AI cybersecurity adoption. - No proprietary or sensitive information will be collected. - Interviews will be audio recorded for transcription and analysis. - Confidentiality will be maintained using pseudonyms and secure data storage.   To Volunteer or Learn More   Contact: Glen Krinsky Email: gkrinsky@capellauniversity.edu IRB approval from Capella University is pending. Final approval will be confirmed before interviews begin. View More

Are you a CIO, CISO, IT VP, IT Manager, Information/Cyber Security Manager, or Security Program Lead working in a Small or Medium Enterprise (SME)? I am conducting research for my PhD dissertation at Dakota State University, and I would appreciate your insights to help develop and evaluate a tailored Information Security Culture Framework for SMEs. The study involves an anonymous survey with approximately 52 questions and takes approximately 25 minutes to complete. Your participation will help enhance security practices for SMEs. DSU Institutional Review Board (IRB) approval number for this research is - DSUIRB-20250626-22 Click or copy + paste the link below into your browser to participate in the survey: https://dsuoiea.co1.qualtrics.com/jfe/form/SV_9oFne79PH6AEH9I Your input will remain confidential, and your expertise is vital to the success of this research. Don’t hesitate to contact me at victor.ishola@trojans.dsu.edu if you have any questions. Thank you in advance for your support and participation! #InformationSecurit #Cybersecurit #SMEs #PhDResearch #Survey View More