Cyberspace Solarium Commission Highlights the Importance of Digital Resilience

/by

Morning Consult | March 17, 2020

By Ray Rothrock, RedSeal CEO

On March 11, the Cyberspace Solarium Commission released its long-awaited report, which provides more than 80 policy recommendations for “defending the United States in cyberspace against cyberattacks of significant consequences.” While the report is over 180 pages, Senator Angus King (I-Maine) said the report can be summed up in four words — define, develop, defend and deter. I would simplify this further, as these four words can be condensed into one concept: digital resilience.

Read More

How network modeling and cyber hygiene improve security odds for federal agencies

/by

FedScoop | March 16, 2020

Agencies that have built network infrastructure over decades may not be doing enough to manage basic cyber-hygiene practices and stay ahead of modern threats, cautions a new report.

When out-of-date configuration rules lurk on networks, attackers essentially have a back door to walk into government systems. However, modern network modeling platforms, capable of integrating into existing infrastructure, can help agency IT departments identify and manage cyber risks and accelerate essential hygiene practices.

Read More

Why Aren’t Smart Devices Safer?

/by

Forbes | March 6, 2020

We live in a world of rapid technological change. Consumers have adopted smart home devices at amazing (some might say alarming) speeds. Businesses have rushed to the cloud, to digitalization and to the latest artificial intelligence approaches. Each of these changes is driven by big benefits but also comes with a great deal of risk.

Read More

Securing the Cloud with Smart SMB

/by

Sm@rt SMB | February 2020 (Pages 13-14)

Mike Lloyd, CTO, RedSeal says, “There was a lot of fear at first that cloud would be less secure, but those fears were unfounded. In general, cloud providers do a great job, and they do it full time, 24×7. There have been no recent incidents that can be pinned on a cloud provider failing to do their job.”

He cautions that this does not mean the cloud is perfect safe and there certainly have been cloud breaches that were the fault of the company buying those cloud services.

Read More

Cybersecurity Canon Book Review: “Digital Resilience”

/by

Palo Alto Networks Blog | February 27, 2020

I got into cybersecurity because I read books like Winn Schwartau’s “Information Warfare,” William Gibson’s “Neuromancer” and Cliff Stoll’s “Cuckoo’s Egg.” These books gave me a very balanced view of what cybersecurity could be, even though no one called them cyber in the 90s. Until I got Ray Rothrock’s book, “Digital Resilience,” I didn’t have a book I was comfortable with suggesting as a great first read to the next generation of cyber professionals.

If you’ve recently been put in charge of IT or IT operations and didn’t grow up in cyber over the past 20 years, “Digital Resilience” is for you. This book is also equally useful for new CEOs, CFOs or board members who need to understand cyber risk without getting overwhelmed with IT technology or the defeatism of “hackers and nation-states will always get in, so why bother.”

Read More

Charting a Path to Hybrid Cloud Security

/by

Nutanix Blog  | February 20, 2020

The majority of IT pros worldwide consider the most secure IT operating environment to be the hybrid cloud, according to recent research. In a hybrid cloud, some applications and workloads run in private cloud infrastructure, either on-premises or in a third-party hosting environment, while others reside in the public cloud.

…”Competitors that are building clouds all offer different services, with different complex details, and different skills required,” said Dr. Mike Lloyd, RedSeal CTO.

Competing management systems are one issue. Because each vendor innovates and builds its own management layer, effectively maintaining a hybrid environment means that “every IT organization has to become fluent in multiple languages at once,” according to Lloyd.

Read More

Huawei warning: Expert reveals how spy could EASILY hack into UK’s 5G network

/by

Daily Express | February 8, 2020

Boris Johnson’s decision to allow Huawei continued access to the UK’s 5G network could lead to a serious threat to the country, a leading expert has warned.The Chinese firm will be allowed to access 35 percent of the UK’s network, which includes its radio networks. Huawei will also be banned from supplying “sensitive” parts to the network, the UK Government revealed last month.

Mr. Johnson declaring there will be limits to Huawei’s access, speaking to Express.co.uk, Dr. Mike Lloyd, security expert and CTO at RedSeal, warned 35 percent is a “huge amount” for any potential spy.

Read More

14 Top Data Security Risks Every Business Should Address

/by

Forbes | January 30, 2020

6. Managing The Increasingly Complex Digital Business Environment

Data breaches happen because it’s hard to do anything consistently at scale. Our top risk is failing to follow basic rules 100% of the time in a growing, changing, increasingly complex digital business environment. Attackers are like ants in a house—no matter what you do, they always find another way in. We need to manage complexity and apply basic security standards everywhere, all the time. – Mike Lloyd, RedSeal

Read More

10 Hot Cybersecurity Companies To Follow In February 2020

/by

Cybercrime Magazine | January 20, 2020

Cybersecurity is one of the most urgent world issues, meaning February 2020 is no time for indifference. A new year invariably brings new threats as the news cycle is dominated by high-profile hacks and disastrous cases of negligence.

3. RedSeal

San Jose’s RedSeal saw the light of day in 2004 and has spent the intervening years helping companies improve their cyber risk assessments and their scoring and modeling methodologies.

Performing regular vulnerability assessments is critical in modern cybersecurity and the key to staying ahead of emerging threats. That goes double for health care companies (one of RedSeal’s specialties), who are beholden to HIPAA and various other ongoing threat assessment requirements.

Read More

The Latest CISO Headache – IoT

/by

Sm@rt SMB | January 2020 (Page 30)

There’s a saying in the security world : “If it’s on the network, it belongs to the CISO.” Dr. Mike Lloyd, RedSeal CTO, discusses some steps the CISO can undertake where traditional techniques don’t seem to have an answer in securing IoT infrastructure.

Read More