Riskonnect, Inc.’s Post

#Crowdstrike goes #Cyberevolution in Frankfurt. Join the session today from Technology Strategist - for Central Europe, Aris Koios "Risk assessment the attacker way! How secured are your assets in reality?"

Have you been searching for the 🔑 to continuous validation? Look no further. With PlexTrac Priorities, the industry's first context-based scoring engine, you can prioritize flaws based on real business impact. By knowing which flaws to tackle first, you can speed remediation and retesting and make a more significant impact on your risk posture (or your stakeholder's risk posture). Ready to get started? 🙌 https://hubs.li/Q02qZ4XX0 #ContextIsKey #Pentesting #OffensiveSecurity

Interested in condensed threat insights that assist in mitigating #EASM risk and improving external attack surface governance? Explore CybelAngel's 2024 State of the External Attack Surface Report infographic, with distilled insights extracted from 192 trillion data points. Learn more via our infographic: https://bit.ly/4cnO44C

How can CAX help your organisation? Providing insights into patterns and changes over time. Communication Axiom functions like an in-house risk team, highlighting communication patterns and sentiment changes over extended periods. This helps risk teams detect early signals of movement that may be interesting to them, thereby better informing their first line of defence.

What are the best forecasting models to forecast the future trajectory of emerging incidents, developments, and trends? If you’ve been at CSO 36O in Berlin today, you might have seen Healix’s Global Risk Intelligence Manager, Andrew Devereux deliver a presentation on emerging risks and predictions – the road to 2030. The team are around for the rest of the day, if you want to pop over to their stand to say hello! #CSO360 #RiskRadar2024 #SecurityRisk 

When P&U utility companies ask for Risk Quantification at a granular level, the first focus is typically on the risk for each asset in their infrastructure. However, if the quantification is done properly, much more insights can be generated at a granular level. In this video we are showing that you can easily analyze granular Threat Actions as well across your business or asset portfolio, using the example of Gas Pipeline Digin risk. This way security stakeholder who can mitigate specific Threats can assess which part of the infrastructure is most sensitive to these threats. It also becomes easy to explain to business stakeholders what potential Risk Events or Business Impacts can be generated by the analyzed Threats, or who the key Threat Actors are. The ManageXValue Risk Quantification platform enables our clients to slice and dice the entire Risk Landscape from multiple dimensions, Business Structure, Attack Surfaces (which represents the asset infrastructure typically for a P&U company), Threat Actions, Risk Events, and Impacts. This video is from a larger one of our P&U series. You can see the link to the original, long format video at the end. If you are interested in learning more about how a Scalable Risk Quantification solution can help you to better manage your risk, please head over to www.managexvalue.com and request a demo.

Here we go for 3 days of #quantum talks in Q2B23 Santa Clara - Silicon Valley 🇺🇸. Happy to be here with Paul Chammas to represent QuRISK - Quantum Risk Advisory and meet the innovative quantum ecosystem to discuss the future and security of #QuantumComputing #riskmanagement #adoptquantumsafely #bequantumsafe

Know Your Attack Surface with Randori Recon Forrester predicts that up to 30% of attackable assets on organizations networks are unmanaged or unknown – offering easy targets for attackers and risking unintended data exposure Find out more here - http://arw.li/6047R6JWh #riskmanagement #cyberrisk #digitaltransformation #asm

Something all of us should be asking ourselves as we look at potential mitigations for the Crowdstrike update issue is how we balance the need for timely updates with operational stability. As a counter example, what if the update in question was a significant detection/prevention for a fresh zero-day vulnerability that was being exploited live in the wild and your IT team did NOT allow it to download and update? In that scenario, the potential disruption is also significant, but in this case the operational threat is from a real threat actor, not a bug. There are lots of ways to deal with updating critical systems (and ALL of them are being discussed, believe me...), but I think the mechanism and proceedure here need to take a back seat to the governance question about balance and throughtful risk mitigation. It's very easy to react to the most recent catastrophic risk event, but imagine that there are reasons folks wanted Crowdstrike updates to be happening as quickly as possible, and address those reasons as you move forward as well as the contemplated current mitigation issue. This is a perfect time to do real, considered and considerate root cause analysis that addresses the event and why things are the way they are. Work with your teams, and assume good intentions and competency as a baseline.

For those of you fortunate enough to have access to rradar, they've just published some useful advice and guidance on managing civil disturbances, including: ➡ Protecting your buildings and premises  ➡ Protecting employees ➡ Employees who are anxious or injured ➡ If your business cannot operate ➡ If one location cannot operate ➡ Employees and annual leave ➡ Employees who are arrested ➡ Protest as a philosophical belief ➡ Employees and social media https://lnkd.in/eFy86z4U #rradar #riskmanagement #commercialinsurance