ActiveCyber
18Aug

Cyber Readiness Needs a Holistic Assessment Approach at the Edge

Posted by: CyberSecurityChief Categories: Articles Operational Technology
No comments

I have been seeing quite a number of references lately to the terms “cyber ready” and “cyber readiness.” Some of these references reflect an enterprise view of readiness – defined as “…the state of being able to detect and effectively respond to computer security breaches and intrusions, malware attacks, phishing attacks, theft of data and […]

Read more
Tags:
21Jun

Learn How Advances in Cybersecurity Metrics Research Moves Holistic Approach for Cyber Defenses Forward in This Active Cyber™ Interview

Posted by: CyberSecurityChief Categories: Spotlight Spotlight - Interviews Spotlight - Research & Standards
No comments

For several years I have been honored to be a guest at the annual Forum on Financial Information Systems and Cybersecurity: A Public Policy Perspective organized at the University of Maryland by Larry Gordon, EY Alumni Professor of Managerial Accounting and Information Assurance; Martin Loeb, professor of accounting and information assurance and a Deloitte & […]

Read more
Tags:
10May

The Authenticity of Cyber Attribution – Who Do You Believe?

Posted by: CyberSecurityChief Categories: Authenticity Intel-Based Defenses
No comments

I have been thinking a lot lately about the accuracy of cyber attack attribution. Most cyber forensic analysts and threat intelligence specialists will tell you that cyber attack attribution done right is a laborious, time-consuming process that is often fraught with multiple dead ends and sometimes requires a leap of faith in the end. The […]

Read more
Tags:
29Oct

Active Cyber™ Interviews Djenana Campara – CEO of KDM Analytics – On How Integrated Software Assurance Can Reduce Cyber Risk

Posted by: CyberSecurityChief Categories: Spotlight Spotlight - Interviews
No comments

Assuring the secure adoption of a new technology, assessing your software supply chain for risks, hunting for vulnerabilities in your infrastructure are all complex and challenging tasks – but ones that are critical to securing your business or government agency. Having specialized, automated tools that are seamlessly integrated using standard methods and interfaces can significantly […]

Read more
Tags:
29Oct

KDM Analytics’ Blade Risk Analysis Solution Powers A Secure Software Development Life Cycle and Supply Chain

Posted by: CyberSecurityChief Categories: Spotlight Spotlight - Product Reviews
No comments

Agile risk assessment at industrial scale Operational technology (OT) systems now connect operations and maintenance equipment to information technology (IT) infrastructures. Doing so enables increased automation and real-time, data-driven decision making. Increased connectivity also amplifies risk, exposing critical infrastructure systems—and entire operations—to new opportunities for cyber attack. Traditionally, assessing system risk has been a manual […]

Read more
Tags:
8Oct

Active Cyber Crosswalks EO 14028

Posted by: CyberSecurityChief Categories: Spotlight Spotlight - Cybersecurity News & Events Spotlight - Research & Standards
1 Comment

In my last article on the EO 14028 I mentioned that I thought there were several parallels between what the EO was calling out and some of the concepts and technologies that I discussed in my interviews and articles over the last 6 years. I constructed this crosswalk to reflect these relationships. I also added […]

Read more
Tags:
4Oct

Active Cyber Reviews Executive Order 14028 – Improving the Nation’s Cybersecurity

Posted by: CyberSecurityChief Categories: Spotlight Spotlight - Cybersecurity News & Events
1 Comment

Early this past summer 2021 a friend of mine was asking me about Executive Order 14028 on Improving the Nation’s Cybersecurity and I had to admit that I had largely ignored it. Frankly, I have experienced many similar bureaucratic moves in the past when it comes to cybersecurity and none seemed to have the impact that was […]

Read more
Tags:
9Jul

What Roles Do Provenance and Reputation Play in “Authentic-By-Design” Approaches to Digital Content?

Posted by: CyberSecurityChief Categories: Authenticity Spotlight - Research & Standards
No comments

People make decisions every day that involve risk and uncertainty. Generally, we reconcile a variety of decision models using risk criteria often provided by organizational policies and/or guided by a variety of personal belief and trust systems. Many times we are forced to address ambiguous situations in uncertain ways, using uncertain terms and with uncertainty […]

Read more
Tags:
« Older posts
Newer posts »