Sekoia.io’s Post

Interesting discussions going on today on the needed skills in the Defense Sector for the coming years. An important topic for us at Solita to understand, as we are supporting several parties in the #defence ecosystems with building their future capabilities to secure our country borders and raise awareness about security. It’s not only about using more and more advanced tech. Capabilities also require the right knowledge and skills to reap the right benefits and advantages. Also, increased skills in process management, information management and architecting resilient, secure and stable platforms are key. Yeah, this is what we do. #defence_and_security #defsec #solita Eva Sula Janne Niinivaara Karin Nissfolk

An interesting report on CISO compensation in the U.S Brian D. McCarthy. One suspects that over the next 1 - 2 years the picture will change. As cyber regulation places regulatory compliance and legal burden on CISOs, and they start to be named as accountable executives to cyber regulators. Demand for security professionals will rise as corporate legal and compliance risk rises. The pool of CISOs will fall as the civil and criminal liabilities get tested and the realization of cyber compliance requirements, and the talent gap becomes harder to fill. One suspects as the role of the CISO is professionalized along side that of their peers, we will see changes in the market place. One should remember that some roles such as the Chief Financial Officer, General Counsel, Chief People Officer, Chief audit Officer have requirements for professional accreditation. As yet the CISO does not, as they may find themselves named as an accountable executive to cyber regulators boards maybe looking to assure competencies. Increasing CISO compensation? Ted Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Bob Dix #cybersecurity #cyberriskmanagement #cyberregulation #theaugustagroup

With the looming advent of the GDPR, and the continuing menace of breaches, the salary for CISOs at some top European firms is slowly reaching the €1 million mark. Those are of course exceptions. In Europe the CISO salary ranges from 110-300 K€. Take some examples: 110-150 K€ France 120-150 k£ UK (140-170 k€) 130-190 k€ Spain 140-160 k€ Germany 140-300 k€ Ireland And yet in Middle East 500-700 kAED Dubai (150-180 k€) Still a lot different than in the US. In Portugal apparently the reported median average salary of the CISO is 80-100 K€… allthough it’s announced as one of the 10 best paid jobs in website Portugal.com from 110-140 K€… Perhaps, as it happens in real estate, we need also to attract foreign CISOs to reach the average EU compensation. #cciso #cisosalary #informationsecurityleadership #scorpionshield

When talking about the Cybersecurity Maturity Model Certification (CMMC), the term information flow refers to the flow of data as well as connectivity from one system to another, or from one security domain to another. The authorization granting permission for information flow comes from a control authority granting permission to an entity, asset, role, or group. The CMMC practice Control CUI Flow (AC.L2-3.1.3) requires defense contractors and subcontractors to control the flow of Controlled Unclassified Information (CUI) in accordance with approved authorizations. #CMMC #ITCompany #GovernmentIT #DoDIT #BreaBusiness #UnlimitedITSupport #AnaheimIT #FullertonIT #BreaIT #SantaAnaIT #IrvineIT #CoronaIT #OntarioCaliforniaIT #AntelopeValley #Lancaster #Palmdale #RiversideCounty #OrangeCounty #LosAngelesCounty #California #ElSegundo #Aerospace #Manufacturing #Anaheim #Placentia #Fullerton #Lahabra #SanDimas #Claremont #RanchoCucamonga #InlandEmpire #SanBernardinoCounty #AppleValley #FAA #ITCompliance #CMMCCompliance  

New skills and capabilities are key to future proof defence in upcoming years. Starting from people and processes, digging deeper to mission based capabilities, interoperability and information sharing with advanced technology and AI are some but closely tied.

KillMilk, the leader of pro-Russia hacktivist collective 'Killnet' has supposedly been doxed after a Russian news outlet published personally identifiable information, including the full legal name, of a man believed to be the threat actor. Gazeta cited several hacktivist groups as sources for this information, including Abbadon and Net-WorkerAlliance. It was claimed that KillMilk is the online name for Nikolai Nikolaevich Serafimov, a prominent figure in the Russian-speaking hacktivism sphere.  Killnet has claimed responsibility for a wide range of high-profile attacks during Russia's "Special Military Operation" in Ukraine, which began in February 2022. Targets have included NATO, the US Federal Tax Service, and the Swift banking system. Serafimov has many opponents within the Russian hacking community, who have accused him of a variety of offences, such as scamming the administrator of a darknet forum for one million rubles, while promising to transfer half of the money to “orphanages of the Russian Federation”. There was no confirmation of this having happened, and Serafimov then justified the deception by claiming the forum was allegedly "supervised by the Ukrainian special services". #threatintelligence #cybersecurity #hackingnews https://lnkd.in/eZEXAAmd

On this Eid, may your life be filled with prosperity, spiritual growth, and good health. Eid Mubarak!