Cyber Defense eMagazine June 2020 Edition

More documents

Recommendations

Info

The second group of organizations successfully adopt applicable standards and guidelines and make valiant efforts to abide by them. The problem resides in the interpretation of those resources. These valuable resources are written by industry experts charged with providing detailed explanations of cybersecurity practices at a very concrete level. The organization is left to make their own interpretation that sometimes can lead them into a direction that will be more costly, compared to if they were not to have adopted the standard and guideline in the first place. Thankfully, recent books have been published that provide greater understanding into such cybersecurity areas as: understanding and applying the National Institute of Standards and Technologies (NIST) Cybersecurity Framework, standardized approaches for implementation of cybersecurity controls, understanding cybersecurity risk management and the implementation of risk practices using the NIST Risk Management Framework, implementing guidelines that support cybersecurity management throughout the entire supply chain, and how to make an organization truly cyberresilient. Similarly, educational Institutions have struggled to find the right fit for how to prepare students for careers in cybersecurity. Since the turn of the century many Information Technology programs saw cybersecurity as solely the need to implement technology aimed at protecting information; hence the reason for the old way of referring to the field as “Information Security”. Programs taking on that understanding of the field prepare students with a narrow scope of simply presenting the technologies that protect information. And in many cases those presentations are done through simulated approaches. However, as the field of cybersecurity has evolved, educators cannot take as narrow of an approach to preparing students. Realistically, the field has become much more than just securing information. Rather it is becoming a discipline in and of itself, which encompasses a complete body of knowledge that requires standardized approaches (with well-defined outcomes) to introducing the expanded areas that make up the entire field of cybersecurity. No longer can someone be prepared for work within the field simply by understanding the difference between a router, switch, and firewall. Cybersecurity has expanded to the extent that data security, software security, component security, connection security, system security, human security, organizational security, and societal security should all necessarily be included (from an interdisciplinary approach) within cybersecurity curriculum in order to adequately prepare individuals for work within the field. And to that extent, organizations should endeavor to understand the interdisciplinary knowledge of the individuals that they hire. To support the growing need for standardized and interdisciplinary approaches of educating future professionals in the entire cybersecurity body of knowledge, two standards have been developed to assist educational institutions in the development of their cybersecurity curriculum. NIST published the second version of the “National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework” in 2017. NICE breaks the field of cybersecurity down into specialty areas and specifies what each areas of the workforce should be doing to ensure that security functions of identification, protection, defense, response, or recovery are being carried out properly. Similarly, later that same year, the Joint Task Force on Cybersecurity Education in association with the Association for Computing Machinery (ACM), IEEE Computer Society (IEEE-CS), Association for Information Systems Special Interest Group on Information, Security and Privacy (AIS SIGSEC), and Cyber Defense eMagazine –June 2020 Edition 30 Copyright © 2020, Cyber Defense Magazine. All rights reserved worldwide.
International Federation for Information Processing Technical Committee on Information Security Education (IFIP WG 11.8) was formed and published in December 2019 the Curriculum Guidelines for Post-Secondary Degree Programs in Cybersecurity Education (more commonly known as CSEC2017). The purpose of CSEC2017 is to provide a summary of the underlying topics that encompass eight knowledge areas that define the boundaries of the discipline of cybersecurity. The premise of the guideline is to provide educators an understanding of what topics should be included in cybersecurity curriculum, a common set of outcomes, and provides adequate flexibility into how the topics are introduced and outcomes realized. Much like the earlier discussion related to whether organizations adopt cybersecurity industry standards, the same is true of educational institutions. It is a growing imperative that all cybersecurity curriculum provide greater scope of instruction into the entire body of knowledge, while providing hands-on approaches to introduce and dive deeper into each topic. While standards and guidelines provide the detail of what needs to be included in cybersecurity curriculum, books on NICE, such as A Guide to the National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework (2.0) and CSEC2017 The Cybersecurity Body of Knowledge The ACM/IEEE/AIS/IFIP Recommendations for a Complete Curriculum in Cybersecurity, have been published that provide specific examples into how they can be implemented successfully. Cybersecurity is not a field that should be approached carelessly. Many organizations and educational institutions have taken that approach and failed to the extent of costing millions of dollars. In a time where many are being forced to rethink their cybersecurity strategies as a result of COVID-19, the use of standards and guidelines accompanied by numerous books that bring standardized topics into context, provide the capability of implementing cybersecurity instruction and practice in a manner that will circumvent the effect of attacks for years to come. Cyber Defense eMagazine –June 2020 Edition 31 Copyright © 2020, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2: Post-COVID-19 Cybersecurity Predict
Page 3 and 4: Ditch Legacy Approaches - Reimagine
Page 5 and 6: @MILIEFSKY From the Publisher… Ne
Page 7 and 8: Welcome to CDM’s June 2020 Issue
Page 9 and 10: Cyber Defense eMagazine -June 2020
Page 23 and 24: Post-COVID-19 Cybersecurity Predict
Page 25 and 26: Indeed, almost all organizations ar
Page 27 and 28: Being Inside the Physical Perimeter
Page 29: Cybersecurity Education and Practic
Page 33 and 34: The Stats on Cyber Security Percept
Page 35 and 36: deliberate around retaining mid to
Page 37 and 38: What is the Justification for This
Page 39 and 40: Mobile App Security in The Midst of
Page 41 and 42: Secure communication: It’s not th
Page 43 and 44: • The risk that critical informat
Page 45 and 46: containing sensitive information as
Page 47 and 48: Speed as an action When a security
Page 49 and 50: Having a positive workplace culture
Page 51 and 52: GDPR Working from Home Checklist in
Page 53 and 54: ● Companies must have taken Data
Page 55 and 56: Cybercriminals can also send phishi
Page 57 and 58: unauthorized access. Face recogniti
Page 59 and 60: executables, teens are known to vis
Page 61 and 62: Cyber Crime is Paying What the Evol
Page 63 and 64: With all of this doom and gloom fro
Page 65 and 66: Lifting Physical Security Measures
Page 67 and 68: a single opcode on the customer env
Page 69 and 70: Building a “Culture of Caring”
Page 71 and 72: clients and employees, guide them o
Page 73 and 74: To rapid response or not to rapid r
Page 75 and 76: In a highly competitive industry su
Page 77 and 78: Over the course of this journey, th
Page 79 and 80: The Devil Inside Insider Threats on
Page 81 and 82:
The devil lives the cloud 39% consi
Page 83 and 84:
36% of organizations are looking at
Page 85 and 86:
as cloud computing, big data, Inter
Page 87 and 88:
Healthcare information systems mark
Page 89 and 90:
What is the motive? First and forem
Page 91 and 92:
In addition to that usage of cloud
Page 93 and 94:
Steps to be taken to ensure the sec
Page 95 and 96:
Women’s Health and Safety Amidst
Page 97 and 98:
Network Monitoring Solutions and Th
Page 99 and 100:
Emergence of smart cities and the s
Page 101 and 102:
spreadsheet-based tracking and manu
Page 103 and 104:
Introducing the Role of The Chief C
Page 105 and 106:
About the Author Matt Cable is VP S
Page 107 and 108:
Not only do IoT devices share some
Page 109 and 110:
How to Secure IT And OT In Industri
Page 111 and 112:
It’s clear that as these vulnerab
Page 113 and 114:
Biggest Obstacles Frustrating Cyber
Page 115 and 116:
You must be current Your knowledge
Page 117 and 118:
There are no perfect candidates Com
Page 119 and 120:
Mitigating Against Ransomware: Don
Page 121 and 122:
Securing data backups This brings u
Page 123 and 124:
Ransomware can be grouped into some
Page 125 and 126:
Jigsaw: it was inspired by the prot
Page 127 and 128:
About the Author Pedro Tavares is a
Page 129 and 130:
Deterministic or Accidental Multi-c
Page 131 and 132:
Cyber Operations Could Cause Trauma
Page 133 and 134:
policies. Apparently, there is stil
Page 135 and 136:
new collapse! Your entire IT asset
Page 137 and 138:
so many inexperienced staffs would
Page 139 and 140:
manager should get capable to termi
Page 141 and 142:
Hackers Are the Future of Cybersecu
Page 143 and 144:
Cyber Crimes Will Increase with Shi
Page 145 and 146:
Cyber Attacks at Sea: Blinding Wars
Page 147 and 148:
The Art of Hacking Navigation Syste
Page 149 and 150:
powered supercarriers. Therefore, a
Page 151 and 152:
national prosperity and power depen
Page 153 and 154:
Cyber Defense eMagazine -June 2020
Page 155 and 156:
Page 157 and 158:
Page 159 and 160:
Page 161 and 162:
Page 163 and 164:
Page 165 and 166:
Page 167 and 168:
You asked, and it’s finally here
Page 169 and 170:
TRILLIONS ARE AT STAKE No 1 INTERNA
Page 171 and 172:
8 Years in The Making… Thank You
Page 173 and 174:
Page 175 and 176:
Page 177:
i https://www.beazley.com/documents
show all

Cyber Defense eMagazine June 2020 Edition

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?