Procellis Technology Inc

Interested in learning more about managing cybersecurity and privacy risk? NIST offers free courses for those new to risk management by introducing publications related to the NIST Risk Management Framework.    Learn more about the courses offered, topics and content, certificate of completion and course credit: https://lnkd.in/gKDGuu-C   #Cybersecurity #RiskManagement #Privacy #InformationTechnology #ComputerSecurity 

Is the CrowdStrike outage covered by my #CyberInsurance policy? Maybe. But it depends on the severity of the issue. If you don't want to watch the video, here's the gist of it: There's this coverage on #comprehensive #cyber #coverage known as DEPENDENT NETWORK/BUSINESS INTERRUPTION. Here's the definition, typically, in plain language: "A company’s losses and rectification costs from a loss sustained in connection with cloud computing interruption." But cyber policies tend to cover #DataBreaches, not patching problems, so you'll definitely want to check the language on your policy as to how they define an incident. (It's probably not covered) BUT, even if it was, as a first party coverage, DNI/DBI is a #FirstPartyCoverage and therefore most likely has a waiting period of 8-12 hours depending on the policy. Even if this event WAS covered, if it's truly due to an update, and it gets patched and fixed within the next few hours (it may be already?) then the coverage probably wouldn't kick in anyways. Hopefully that helps? Don't listen to the goofballs saying "should have had a better cyber insurance policy" when this may not have even been covered by it in the first place... (ok, you SHOULD have a good cyber insurance policy anyway.) #DataLoss #BusinessInterruption #Insurance #MSP #MSSP #ManagedServices #ManagedServiceProvider #Outage #NetworkOutage Wilson Henry Andy Runyan Travis Kroger Abe G. FifthWall Solutions

What is NARA? A quick Google search pops up 15 various links directing you to the National Archives and Records Administration (archives.gov). This is a fascinating site because there are eight main tabs that categorize the thousands of topics related to national archiving. For instance, if you are a military veteran, you can select the link under “I Want To….” labeled “Get My Military Record.” This page allows a person to find their own military information, or a next of kin record. Perhaps you are not interested in any veteran records but there are categories for: Citizen Archivists, Genealogists, Members of Congress, Preservation, The Press, America’s Founding Docs……and one of my recent favorites….CUI (Controlled Unclassified Information). What is CUI? According to the Honorable David S. Ferriero, Archivist of the United States, CUI is sensitive information that requires protection under laws, regulations, and government wide policies. But how does that affect the general population? To answer that question look at the CUI categories list at https://lnkd.in/g2DCrRNG. This list has 20 organizational index group and associated CUI categories for each group. For instance, the first two groups are Critical Infrastructure and Defense. The Critical Infrastructure contains 11 categories and Defense contains 5 categories. Selecting any of the links will bring you to a number of items for further investigation. The area of CUI that is interesting to my current topic is the Organization Index Group of Privacy. This group has 9 CUI categories: ·       Contract Use ·       Death Records ·       General Privacy ·       Genetic Privacy ·       Health Information ·       Inspector General Protected ·       Military Personnel Records ·       Personnel Records ·       Student Records In my current capacity at Procellis Technology Inc. student records need identified for protection. The category description of Student Records: “As per 20 USC 1232g, the Family Educational Rights and Privacy Act of 1974 (FERPA), an education record which is comprised of those records which are directly related to a student.” For any educational facility that receives funds under an applicable program of the U.S. Department of Education must protect student records. My question to you (active audience) is have you completed a NIST SP 800-171r2 assessment (Department of Education is leaning towards this assessment) to ensure that student records are protected?

I’m happy to share that I’ve obtained a new certification: Certified CMMC Professional from The Cyber AB!