Michael H.

CISSP is a management-level certification. As an infosec manager, one of the most important concepts to wrap your head around is the difference between accountability and responsibility. We often use these terms interchangeably, so it’s easy to get confused. In this specific context, the distinction is critical, so you need to have a clear understanding of the differences between accountability and responsibility. To learn more, head over to: https://buff.ly/3QwOMmF If you would like to stay one step ahead of cybercriminals or simply enjoy a quick and informative read, you can subscribe to our newsletter here: https://buff.ly/3PokRx4

9

💼 How Much Do Cyber Security Jobs Pay (2024)? 💼 Curious about cyber security salaries? This guide covers how factors like role, experience, and location impact pay in the field—from entry-level analysts to advanced CISOs. 💰🛡️ Read more: https://lnkd.in/efHpvVsr

4

What gaps are you facing when it comes to implementing #NIST CSF 2.0? Our team is diving in on July 18th with a webinar to cover: ➡️ Guidance through core concepts plus practical steps of program implementation ➡️ Industry best practices for a sustainable program and continuous improvement of cybersecurity posture beyond an initial assessment ➡️ Strategies to turn your NIST CSF program into a powerful tool for protecting your organization Last chance to register! Sign up: https://hubs.la/Q02G3m5W0 #CyberSecurity #NIST #HealthISAC #RiskManagement

6

1 Comment

To improve software security and supply chain integrity, the U.S. Government is actively developing and promoting frameworks and guidelines for software producers. One of those coming due this fall is the Secure Software Development Attestation Form. Learn how this could affect you: https://loom.ly/-j8xwy8. #softwaresupplychain #software #technology #federalcontracting

2

Quadratic is a SOC 2 and HIPAA compliant spreadsheet! We are excited to announce that Quadratic has completed its security and compliance audit and is now SOC 2 (Type II) and HIPAA compliant. Check out our blog post https://lnkd.in/gVx2m3Yv #SOC2 #HIPAA #Compliance #spreadsheet #python #sql

22

2 Comments

Common mistakes Cyber Security candidates make in the interview process. For Full Episode w/ Alex Llano - https://lnkd.in/geBienUz To get into Cyber Security, Check out Springboard and use our code "Jobber" for $1000 off their Cyber Course (Job Guarantee)! https://lnkd.in/eGbfhCRr #JobInterviewTips #JobHunting #CareerAdvice #InterviewMistakes #LandYourDreamJob #JobSearchHacks #NailTheInterview #InterviewHonesty TAGS: job interview tips job hunting career advice interview mistakes land your dream job job search hacks nail the interview common interview fails how to ace an interview interview preparation job interview questions interview body language confident interviewing interview professionalism make a good impression honesty in interviews interview integrity background lies

1

CISA and the FBI are telling software companies to check their products for path traversal security problems before they send them out. Path traversal vulnerabilities, also called directory traversal, let attackers mess with important files. They can do things like change files to run their own code or get past security measures like passwords. These weaknesses can also give bad guys access to sensitive information, like passwords they can use to break into systems. CISA and the FBI say these attacks work because companies don’t watch out for suspicious stuff that users might send, which means they don’t protect their customers well enough. #thecyberbulletins #cybersecurity #cisa

2

We've seen an interesting spear-phishing attempt related to a recent job posting and wanted to share more details here with both our colleagues and potential applicants. We have a job posting on Indeed.com with a title of Cyber Security Analyst. Someone is attempting to act as employees of our company using the domain "@https://lnkd.in/gVfbKjXp" and "@milligan-careers.com" stating they will support the hiring and training process for our posted position. They include our position title and use our company logo. They have used multiple pseudonyms such as Blake Jones or Jason White and only contact people via email. These messages are not sanctioned by Milligan Partners and do not represent Milligan Partners in any way. I've reported abuse to the domain registrar and the FTC. It's likely they have just created their own SMTP server to route the emails with falsified domain names. Interestingly "millipartners-careers.com" was registered on July 1st and the registered phone number for the registrant doesn't work. Go figure. The good news is that our applicants are cyber-savvy and are contacting us to validate if these emails are legitimate. The bad news is that the hackers are casting a broad net to people likely with "security" in their job description on LinkedIn. From a mitigation perspective there is not much else we can do. We are open to suggestions from people smarter than us. A real job posting is available on Indeed.com and applicants can safely apply at this link: https://lnkd.in/g7pqwqs6. 

7

8 Comments

🔐 CISSP vs CISA: Which Certification Is Best for You in 2024? 🔐 Are you deciding between CISSP and CISA for your next cyber security certification? Both are designed for experienced professionals who want to deepen their skills in security controls and auditing. This article compares these two prominent certifications, highlighting their differences and similarities to help you choose the best fit for your career goals. Explore the full comparison here 👉 https://lnkd.in/er6BZVEc

3