SMB Tech & Cyber Newsletter | CPF Coaching

The Business Value of Log Analysis and SIEM for SMBs As threats become more sophisticated, robust security measures are paramount, even for small-medium businesses. One critical component of a comprehensive security strategy is log analysis and Security Information and Event Management (SIEM). These tools allow SMBs to detect potential threats early, allowing for timely intervention and mitigation...

Understanding the Importance of Threat Detection in SMBs Small and medium-sized businesses are increasingly vulnerable to cyber threats. To effectively scale and innovate, they must insert cybersecurity mechanisms that secure their assets and data for their customers. In any robust cybersecurity strategy, threat detection certainly needs to be included. This goes above traditional monitoring by hu...

In the digital world today, it is more often than not that small and medium-sized businesses are found turning to open-source code and public software repositories to be able to build and enhance their technological capabilities. On one hand, such resources bring about considerable cost savings and advantages of innovation, but on the other hand, they also bear the potential security risks that mi...

With a digital and cloud-first approach used by Small and medium-sized businesses (SMBs), they face ever-increasing cybersecurity threats. As a cybersecurity leader, it is crucial to implement robust security measures that protect your organization and align with industry standards like the NIST Cybersecurity Framework (CSF). One such measure is Public Key Infrastructure (PKI) encryption. PKI is a...

Discover how Encryption & SSL can strengthen your SMB's cybersecurity posture, align with NIST CSF, and protect against emerging threats. Learn actionable steps to implement these vital security measures. Cybersecurity Leadership & SMB Security Development is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber. Encryption & SSL: Cor...

Discover essential takeaways from yesterday’s cyber outage, including understanding digital supply chain risks, implementing robust change management, and developing a comprehensive incident response plan. Enhance your cybersecurity resilience today. Cybersecurity Leadership & SMB Security Development is a reader-supported publication. To receive new posts and support my work, consider becoming a...

In today's digital age, small and medium-sized businesses (SMBs) face increasing threats from cyber attacks, which can compromise sensitive data and disrupt operations. Desktop security, often overlooked, plays a crucial role in defending against these threats. For SMB leaders, focusing on desktop security not only helps in identifying and detecting potential threats but also aligns with the NIST...

Learn how DDoS protection can safeguard your business by aligning with the Identify and Protect stages of the NIST Cybersecurity Framework. Discover practical strategies and future solutions for SMBs. This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit substack.cpf-coaching.com/subscribe

Understanding and Implementing the NIST Cybersecurity Framework (CSF): A Guide for CISOs and Practitioners In this episode of the Cyber Hub podcast, James Azar and Chris Filone discuss the practical application of the NIST Cybersecurity Framework (CSF) for organizational risk management. They delve into the framework's components, such as Identify, Protect, Detect, Respond, and Recover, and provid...

Join James Azar and Chris Foulon on Friday Conversations podcast to unravel the complexities of cybersecurity frameworks like CIS, NIST, and MITRE. Learn their differences, practical applications, and how they impact cybersecurity strategies. Tune in for expert insights and actionable advice. This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus epis...

Harnessing the Identify and Protect Stages of NIST CSF for Enhanced Threat Protection Explore how identity management is pivotal in the Identify and Protect stages of the NIST Cybersecurity Framework (CSF), offering robust defenses against evolving cyber threats. In today's digital-first environment, managing internal identities efficiently and securely is paramount for organizations across all in...

Explore practical strategies to manage and integrate shadow IT into your secured development processes, enhancing security and compliance without stifling innovation. Learn how MSSPs and security consultants can help your business transform shadow IT challenges into assets for growth and security. See post for more detailed write up: https://substack.cpf-coaching.com/p/mastering-shadow-it-strategi...

Join us live on Fridays at 11 am EST and ask your questions live. If you like a topic covered, send it over to us. The concept of "Trust but verify" within the realm of "Zero Trust" security frameworks is quite intriguing, as it merges a traditional approach to security with a more contemporary, stringent model. Originally, "Trust but verify" was a security principle that emphasized the need for c...

The "Assume Breach" pillar of the Zero Trust model is grounded in the understanding that security breaches are not just possible; they are inevitable. This pragmatic approach dictates that organizations should plan and build their security architectures as if the attackers are already inside their network. Here’s a detailed exploration of the critical strategies under this pillar: 1. Detect and Re...

Discover how EPSS transforms vulnerability management for business leaders, offering strategic insights into cybersecurity's most pressing challenges and future-proof solutions. Originally posted here : https://substack.cpf-coaching.com/p/mastering-vulnerability-management-e45 This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit subs...

Audio Version | Discover the critical role of container security in managing vulnerabilities and shaping the future of cybersecurity for business leaders. Gain actionable insights and explore forward-thinking solutions in our guide. Originally posted here: https://substack.cpf-coaching.com/p/understanding-container-security This is a public episode. If you'd like to discuss this with other subscri...

Two CISOs Talking Cyber Podcast - Zero Trust Security: Least Privilege James Azar and I discussed the first tenet of Zero Trust Architecture in today’s podcast. I will include additional resources and references for those looking to go deeper down the Rabbit Hole. Previous blogs on the topic from me: NIST SP 800-207 https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-207.pdf Summary:...

Fortify Your Digital Frontiers: The Power of API Security Explore the critical role of API (Application Programming Interface) security in safeguarding your applications and business. Understand its tasks, challenges, and future solutions through our comprehensive guide designed for business leaders. Originally posted here: https://substack.cpf-coaching.com/p/unlocking-the-power-of-api-security Th...

In an era where digital innovation is king, the integrity of application development processes has never been more critical. At the heart of this digital fortress lies Source Code Supply Chain Security, a linchpin in safeguarding our digital assets against the ever-evolving threats of the cyber world. This introductory dive explores the unseen vulnerabilities within our applications and unveils th...

The conversation, hosted by James Azar on the Cyber Hub Podcast, delves into the concepts of zero trust and least privilege in cybersecurity. With contributions from speakers including Chris Foulon, they explore the multifaceted approach to access and data management within the framework of zero trust, providing insights into practical implementation and the underlying philosophy guiding these pri...

Co-produced with James Azar - Exploring NIST CSF 2.0: A Fresh Perspective on Cybersecurity Frameworks A Dive into the Enhanced NIST Cybersecurity Framework This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit substack.cpf-coaching.com/subscribe

Introduction to NIST Cybersecurity Framework (CSF) Before exploring the changes, let's understand the NIST Cybersecurity Framework. Consider it a comprehensive guide for organizations to manage cybersecurity risks. Like a detailed map that helps you navigate an unknown city, the NIST CSF helps organizations navigate the complex landscape of cybersecurity threats and practices. Transitioning from N...

Imagine your business as a modern-day fortress in an era of digital warfare, where threats don't march in broad daylight but lurk in the shadows of the digital world. Traditional moats and walls (perimeter-based security) are no longer sufficient in this landscape. Enter Zero Trust is a strategy not just of defense but of intelligent, dynamic warfare against cyber threats. This blog post deciphers...

Lists of books mentioned Start-Up Secure: Baking Cybersecurity into Your Company from Founding to Exit https://www.amazon.com/Start-Up-Secure-Cybersecurity-Company-Founding/dp/1119700736 Project Zero Trust: A Story About a Strategy for Aligning Security and the Business https://www.amazon.com/Project-Zero-Trust-Strategy-Aligning/dp/B0BG6D1J26/ A Data-Driven Computer Defense: THE Computer Defense Y...

Discover the critical importance of inventorying open-source components in your application security program. Learn how this practice can safeguard your business from vulnerabilities and enhance your software's integrity. This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit substack.cpf-coaching.com/subscribe