Cybersecurity Leadership
Explore content featuring this instructor’s insights and expertise.
In the 1990s government agencies, industry groups, and cybersecurity researchers started creating cybersecurity standards and these standards led to cybersecurity regulations and laws that dictate to organizations what they must do to protect their data. Today, there are now dozens of standards dictating thousands of cybersecurity controls that organizations can consider when building their cybersecurity plans. Every year more standards are released and the confusion grows. To make the problem even more challenging, no two standards are the same, nor do they even cover the same scope of defenses.
In the 1990s, government agencies, industry groups, and cybersecurity researchers started creating cybersecurity standards, and these standards led to cybersecurity regulations and laws that dictate to organizations what they must do to protect their data.
As we head into the last quarter of 2023, three major mandate changes are occurring, each positioned to make a large impact on how businesses, governmental bodies, and critical sector organizations operate. The goal of the SANS Cyber Compliance Countdown is to focus on what you need to know in these complicated and broad requirements and to offer solutions on how to meet these directives.
Balancing the scales between safeguarding information assets and enabling business growth demands not just technical acumen but a strategic mindset.
Every organization professes that risk management is at the heart of its cybersecurity program. Threat modeling is at the heart of this proactive approach: a systematic process that helps organizations identify, understand, and mitigate potential threats. However, with technology's ongoing advancement and the rising complexity of digital systems, constructing exhaustive threat models from the ground up can be daunting.
In an age where cybersecurity threats are ever-present and the regulatory environment is constantly shifting, establishing robust and strategic audit practices is crucial for safeguarding organizational integrity.
In the 1990s government agencies, industry groups, and cybersecurity researchers started creating cybersecurity standards and these standards led to cybersecurity regulations and laws that dictate to organizations what they must do to protect their data.
The webcast "Understanding the Risk Management Mandates in 2024 Cybersecurity Regulations" is designed to enlighten students about the critical updates in cybersecurity regulations, including those defined by ENISA's NIS2 requirements.
In this webcast, we'll be focusing on the advancements in the NIST Cybersecurity Framework (CSF) 2.0. As organizations worldwide have adopted the NIST CSF to prioritize essential cybersecurity safeguards and enhance communication with stakeholders, the release of version 2.0 calls for a governance update and refinement of existing strategies.
This webcast, led by James Tarala, Senior Faculty at the SANS Institute and Managing Partner at Cyverity, is designed to empower small businesses with the knowledge and resources they need to effectively manage cybersecurity risks without breaking the bank.
In this webcast we will delve into the critical process of selecting a Governance, Risk, and Compliance (GRC) software tool that aligns with your organization's needs. In today's complex cybersecurity landscape, the ability to effectively track risks and communicate them to business stakeholder s is essential for informed decision-making and strategic growth.
In this presentation, James Tarala, Senior Faculty at the SANS Institute and Principal Consultant at Cyverity, will introduce an automated cybersecurity risk management model that integrates data analytics with existing security infrastructures.