Martin Ryan

🆕 This document contains mappings of the CIS Controls v8.1 and Safeguards to the New York Department of Financial Services 23 NYCRR Part 500. Download here. https://bit.ly/3WJEbao #CISControls #NYCRR #compliance #cybersecurity

5

🆕 This document contains mappings of the CIS Controls v8.1 and Safeguards to the New York Department of Financial Services 23 NYCRR Part 500. Download here. https://bit.ly/3WJEbao #CISControls #NYCRR #compliance #cybersecurity

2

SEC Charges R.R. Donnelley & Sons Co. $2.1 Million Fine for Cybersecurity-Related Controls Violations On June 18th, 2024, the U.S. Securities and Exchange Commission announced that RR Donnelley, a global provider of business communication and marketing services, agreed to pay over $2.1 million to settle disclosure and internal control failure charges relating to cybersecurity incidents and alerts in late 2021. This SEC settlement with RRD highlights critical issues around cybersecurity and internal controls. Key findings include inadequate controls over material non-public information (MNPI), heightened insider trading risks, and violations of the Securities Exchange Act of 1934. Key Allegations: - Inadequate controls to prevent MNPI misuse - Insider trading risks due to poor monitoring - Regulatory violations and insufficient disclosure controls Inadequate Cybersecurity Response: - Between Nov 29 and Dec 23, 2021, RRD's internal intrusion system issued numerous alerts. - Alerts were reviewed by a third-party MSSP and escalated to internal cybersecurity personnel. - Despite escalations, RRD failed to take timely action, leading to unauthorized data exfiltration of 70 GB, including personal and financial information of 29 clients. - Issues identified included lack of prioritization, workflow for alerts, and inadequate auditing of the MSSP's performance. - Only after an external company alerted the CISO did the firm respond effectively. How AdvisorDefense Can Assist Registered Investment Advisors (RIAs): We offer a comprehensive suite of services tailored to help RIAs meet SEC regulations and bolster their cybersecurity defenses. Our mission is to empower RIAs with the necessary tools and expertise to navigate the cybersecurity landscape, ensuring compliance with regulatory requirements and protecting client information. By partnering with AdvisorDefense, RIAs can enhance their cybersecurity posture, ensure compliance, and protect their clients from evolving cyber threats. Protect your clients. Maintain your reputation. Ensure compliance. Contact us to learn more about how we can support your firm. https://lnkd.in/eVKtr3_x #Cybersecurity #SEC #Compliance #RIAs #AdvisorDefense #CyberRiskManagement #FinancialServices #RegulatoryCompliance #CyberThreats #CyberSecurityAwareness #CyberSecuritySolutions

10

1 Comment

Seeking CMMC compliance? Confused about the process? Check out Aspire Cyber’s CMMC Level 1 Mock Assessment video for an informative and funny webinar on this very subject!

5

3 Comments

🔍 #TechTipTuesday Regular security audits are essential for identifying and addressing vulnerabilities. Keep your clients’ systems secure! 🛡️ #MSP #SecurityAudit #TechTips Need help identifying more vulnerabilties? Check out OB360-VA! https://lnkd.in/ebKyu_Ns

1

Data Breach Alert: Fidelity Investments Reports Exposure of 77,000 Clients' Personal Information In today’s digital age, cybersecurity breaches are becoming a pressing concern across industries. Unfortunately, Fidelity has joined the growing list of financial institutions affected by such incidents. In a recent filing, the company revealed that the personal information of approximately 77,000 clients was exposed in a data breach that occurred between August 17 and August 19. While no direct access to client accounts was compromised, hackers leveraged two newly established customer accounts to gain access to personal details of a subset of clients. Fidelity responded swiftly to the breach, terminating unauthorized access on August 19 and launching an investigation with the help of external cybersecurity experts. To reassure affected customers, Fidelity has offered two years of credit monitoring and identity restoration services through Transunion. They also emphasized their commitment to safeguarding client information, stating, “Fidelity takes its responsibility to serve customers and safeguard information seriously.” For those affected, Fidelity encourages continuous monitoring of financial statements and credit reports. Taking proactive steps, such as enrolling in identity protection services, is critical to mitigating the risks associated with data breaches. #DataSecurity #Cybersecurity #FinancialServices #Fidelity #DataBreach #ProtectYourData #CustomerSafety #IdentityTheftPrevention #AdvisorDefense https://lnkd.in/eyZVTxDM

8

Cybersecurity Snapshot: After Telecom Hacks, CISA Offers Security Tips for Cell Phone Users, While Banks Seek Clearer AI Regulations http://ow.ly/hKiE105WiMo

8

https://lnkd.in/gQ-kvMFK Maximizing Your Cybersecurity Skills with SANS Training Discover how SANS training can enhance your cybersecurity expertise in just weeks. Gain valuable knowledge from industry experts through digestible content and comprehensive resources. Don't miss out on this opportunity to upskill and obtain prestigious certifications. #CybersecurityTraining #SANSCertifications #IndustryExperts #UpskillYourself #CybersecuritySkills #ProfessionalDevelopment #ComprehensiveResources #CybersecurityExpertise #SANSInstitute #OnlineTraining

1

Protect your organization from cyber threats with NJTEKS’s Employee Security Awareness Training! Our Phishing Simulator and Security Awareness Training services use real-world social engineering attacks and video-based training to educate employees on security basics. With over 90% of breaches caused by human error, it’s crucial to defend your team against phishing attacks. Our engaging videos and quizzes make learning easy and effective, turning your weakest link into your strongest defense! 🔒 Visit our website to learn more. #NJTEKS #EmployeeSecurityAwarenessTraining #Cybersecurity #PhishingPrevention #ProtectYourBusiness #TechTips

2

📆 May 14th 2:00-6:30pm | 📍Canton, MA Will you be in the Boston area this May 14th? Don't miss the chance to experience a live #ransomware attack firsthand (but without the risk!) Step into the shoes of a decision-maker at #Cohesity's immersive Ransomware Resilience Workshop. Test your abilities in a simulated 'mission control' scenario. Can you recover?

6

Our latest article dives into the specific penetration testing mandates under the #NYDFS Cybersecurity Regulation known as 23 NYCRR 500. We explain what’s required, recent regulatory updates, and how to effectively integrate these requirements into your cybersecurity program to maintain compliance.Get the insights you need—read the full article on our website. #CyberSecurity #Compliance #NYDFS #PenetrationTesting #FinancialServices

4

Join us and GuidePoint Security at GPSec in Philadelphia to hear about upcoming trends in SaaS Security and how you can keep your SaaS stack secure 💪 Get ready to meet our team 👉 Kirra Rice Dustin Crossman Richard Snyder

2

Happening tomorrow - Secure Software Development Attestation Webinar with Adam Winston of ActZero and Eric Matthews of Parabellyx Cybersecurity

9

ISC2's CISSP: Is the Certification Broken? David Malachow interviews Ira Winkler on the Professional CISO Show, discussing Ira's open letter to ISC2 and its implications for CISSP certification. A must-watch for cybersecurity professionals! #ProfessionalCISO ['#ProfessionalCISO', '#Cybersecurity', '#CISSP', '#InfoSec', '#ISC2', '#CybersecurityPodcast', '#InformationSecurity', '#DataSecurity', '#ITSecurity', '#CyberRisk']

17

looking forward to this Conference and having great conversations about Cybersecurity and Compliance.

6