Anthony Bendas

Security awareness and training is still being under-supported and even misunderstood in so many organizations across multiple sectors for reasons ranging from inconvenience, not a priority, lack of funding, or it's just an annual check box. The fact is each and every member of an organization is a target for threat actors when they come looking for an opportunity to breach their next network victim. The cybersecurity posture and strength of your organization is only as good as your weakest link. And the weakest link in the cybersecurity chain is typically the human with an email address on your domain. All the best of breed technology in the world will NOT prevent this type of attack. At ISA Cybersecurity, we offer our Security Awareness service to help your staff recognize how malicious actors target them and provide tools and knowledge to take appropriate action when attacked. Our cloud-based, multilingual, turnkey program employs training tools to measurably increase your team’s recognition of phishing, spear-phishing, malware, and social engineering-based attacks. Contact us today for more information and help reduce your cyber risk. https://lnkd.in/gKPn5sGq

19

Want to succeed in cybersecurity - sharpen your soft skills Evgeniy Kharam, a friend of mine recently wrote a great book on this subject (read the CyberVoices article to find out where you can purchase it). While some may believe AI will lessen the need for soft skills, I believe the need for soft skills will grow even more. A study from MIT Sloan Management Review highlights that "as AI takes over repetitive and data-driven tasks, employees will need to enhance their interpersonal skills, including leadership, adaptability, and effective communication, to complement the work that AI cannot do." What are your thoughts? https://lnkd.in/eVnkUj8Y #ccn, #cybersecurity, #canada, #softskills

12

2 Comments

“…we see a huge disconnect between academia and employers. Lots of academic programs and funding are being pulled together with little to no business support or buy in. Students are being churned out with little to no chance of landing #cybersecurity employment upon graduation.” Francois offers a clear eyed look at #cybersecurityeducation in #Canada in this piece. As he says, the problem isn’t talent, Canada is bursting with it. The problem is the massive gap between #education and industry in our country. That we sell cyber as a get employed quick and make bank move for compsci grads is part of this systemic failure. A stem degree is a great indicator of compliance and consistency. Two things that anyone in cyber wouldn’t list in the top 5 needed skills. Self directed, problem driven detective reflexes are much more valuable.

9

Our national CyberTowns 2024 results for the best places to live and work in Cybersecurity in Canada came out yesterday. The results are not based on the biggest concentrations of cybersecurity workers but on the best places for cybersecurity workers to live and work. Some interesting surprises. Full report to come out in a few weeks. Read the press release to understand more and feel free to get in touch. https://lnkd.in/gpXuYrxp #cybertowns, #ccn, #canadiancybersecuritynetwork, #canada

48

16 Comments

I feel vindicated. I have been stressing the importance of this. Cyber and crisis exercises are crucial components of any cybersecurity strategy. No one wants to listen to your opinions, Lester. But let's take a cue from Kevin Mandia. He shared his insights during the FS-ISAC Canadian Cyber Security Event. And his key takeaway? "Run your tabletop exercises." That was definitely the highlight of my week. So let me reiterate. Cyber and crisis exercises are essential for your cybersecurity program. Here are 10 reasons why: 1. Show operational readiness 2. Evaluate preparedness levels 3. Engage stakeholders 4. Foster better collaboration 5. Showcase capabilities 6. Offer reassurance 7. Enhance training 8. Provide a safe learning environment 9. Effective teaching tool 10. Demonstrate return on investment

7

An interesting look at the costs of data breaches in Canada that leaves me with more questions than answers. Why are the average costs of a breach going down while the number of breaches are going up? If compromised credentials account for 16% of points of entry in attacks and phishing for 15% what are the other 69%? Businesses are raising the cost of goods and services as a result of cyberattacks, by what percentage? These a few of the questions this article on the IBM report raise for me. #cybersecurity

4

2 Comments

Job Alert & resume customization tips! Do you want to improve your resume game and increase your chances of landing that cyber job? Below you will find a job posting for a SOC Analyst I position at eSentire in Waterloo, ON, , and some tips on how to customize your resume! The posting highlights the following Technical Skills: Intrusion Detection Systems (IDS), specifically Snort/Suricata Packet Capture (PCAP) Analysis using Wireshark Windows system internals knowledge, basic PowerShell skills Linux Kernel understanding & basic scripting in Bash/Python Soft Skills: Analytical mindset & strong attention to detail Strong customer-facing written & verbal communication skills Ability to thrive in a fast-paced time-sensitive environment Commitment to quality of service & effective communication of complex security concepts As you update your resume to showcase your skills and experiences for the lists above, it may be helpful to ask yourself the following questions: Have I highlighted my experience with IDS (Snort/Suricata) and PCAP analysis using Wireshark? Do I showcase my knowledge of Windows system internals and basic PowerShell skills? Have I included my understanding of Linux Kernel and scripting in Bash/Python? Have I emphasized my analytical skills and attention to detail? Did I demonstrate strong communication skills, especially in explaining complex security concepts? Have I mentioned my ability to work effectively in a fast-paced environment with flexible hours? Did I highlight any relevant certifications or training related to cybersecurity? Have I included examples of my problem-solving abilities in previous roles? Did I showcase my commitment to continuous learning and development in the cybersecurity field? Have I tailored my resume to align with the specific requirements and responsibilities of the SOC Analyst I role at eSentire? All job posting are a great peak into the industry, what's required and who the employers are. Make sure you learn more about the company itself before you apply and most definitely to prepare for an interview. Here are some way you can learn more about a eSentire or any other company: Visit eSentire's official website and explore their About Us section, mission, and values. Read press releases or news articles related to eSentire Connect with current or former employees on professional networking platforms like LinkedIn to gain insights into the company culture. Follow eSentire on social media platforms to stay updated on company news, events, & initiatives. Attend virtual or in-person events hosted by eSentire You don't need to meet every single requirement to apply bu the more you customize you resume the better your chances will be. https://lnkd.in/grcDvJe8 #Cyberjobs #Resumetips #Cybersecurity

30

5 Comments