Tobias Musser’s Post

CMMC Level 2 Assessment Objective: Mobile Code PRACTICE: Organizations must control and monitor the use of mobile code, which includes Java, JavaScript, ActiveX, Postscript, PDF, Flash animations, and VBScript. ASSESSMENT: An organization must ensure mobile code is authorized to execute in company systems only in accordance with policy and technical configuration, and that unauthorized mobile code is not. The organization should monitor the use of mobile code through boundary devices such as firewalls, audit logs, or security utilities such as mobile device management or advanced end point protection. The organization should implement remediation activities as needed. Be prepared! Your assessor could ask to 🔍 EXAMINE system and communications protection policy. 🗣 INTERVIEW system or network administrators. 📝 TEST organizational process for controlling, authorizing, monitoring, and restricting mobile code. (CMMC Assessment Guide: Level 2 Version 2.11, page 233) #CMMC #DoD #cybersecurity #NIST #InformationSecurity

Paraskevidekatriaphobia. It’s a fancy word that means “Fear of Friday the 13th.” Why is Friday the 13th considered unlucky in western cultures? That’s not clear. But decades ago, if you weren’t super vigilant about maintaining your computer systems, Friday the 13th was unlucky indeed. Back in 1987, engineers detected one of the first, and quite destructive, computer viruses. (The virus was detected in Israel, which is why it’s also known as the Jerusalem Virus.) The virus infected executable files, slowing computer systems and deleting random files until it struck the final blow on—you guessed it—Friday the 13th. On that day, the virus exploded into action and deleted every program that was run on the system. Luckily, the virus used low-level DOS functions and has become obsolete. But its lessons remain very much alive: · Run regular system checks · Use the latest antivirus software · Maintain safe internet habits Stay vigilant today and always! #BestAdvice #RiskManagement #cybersecurity #technology #preparedness

CMMC Level 2 Assessment Objective: Collaborative Device Control PRACTICE: Organizations must prohibit remote activation of collaborative computing devices and provide indication of devices in use to users present at the device. ASSESSMENT: Collaborative computing devices include networked whiteboards, cameras, and microphones. Notification that a device is in use can include an indicator light that turns on or a specific text window that appears on screen. If a device does not have the means to alert a user when in use, the organization should provide manual means. Be prepared! Your assessor could ask to 🔍 EXAMINE system and communications protection policy. 🗣 INTERVIEW system or network administrators. 📝 TEST mechanisms supporting or implementing management of remote activation of collaborative computing devices. (CMMC Assessment Guide: Level 2 Version 2.11, page 231) #CMMC #DoD #cybersecurity #NIST #InformationSecurity

Want some insight into how to implement a successful operational technology (OT) security posture?   Be sure to join us today for a webinar with our new partner Dragos, Inc.   You’ll learn about the top 5 controls for OT and how you can implement them. We’ll also have some great tips about how your teams can help executives understand the risks and rewards of OT security.   We hope you’ll join us!   Title: 5 Critical Controls for World-Class OT Cybersecurity Date: Thursday, September 5 Time: 2 p.m. Eastern   Speaker: Chuck Weissenborn , Chief Technology Officer, Dragos Public Sector   Register here: https://lnkd.in/eEs7vA23   #cybersecurity #assessment #BestAdvice #leadership #technology

CMMC Level 2 Assessment Objective: CUI Encryption PRACTICE: Organizations must employ cryptography validated by the Federal Information Processing Standard (FIPS) when used to protect the confidentiality of controlled unclassified information (CUI). ASSESSMENT: FIPS-validated cryptography means the cryptographic module has to have been tested and validated to meet FIPS 140-2 requirements. Simply using an approved algorithm is not sufficient. The module—software and/or hardware—used to implement the algorithm must be separately validated under FIPS 140. Be prepared! Your assessor could ask to 🔍 EXAMINE system and communications protection policy. 🗣 INTERVIEW system or network administrators. 📝 TEST mechanisms supporting or implementing cryptographic protection. (CMMC Assessment Guide: Level 2 Version 2.11, page 229) #CMMC #DoD #cybersecurity #NIST #InformationSecurity https://bit.ly/4czvndi

I wish everybody a relaxing and enjoyable Labor Day weekend. Did you know that this year marks the 130th anniversary of the Congressional Act that designated Labor Day as an official holiday? In an attempt to alleviate a crippling boycott of Pullman railway cars and repair ties with American workers, President Grover Cleveland signed Labor Day into law in 1894. This weekend is a great time to reflect on the contributions and achievements of American workers. I especially am very grateful to all of our staff at MNS Group, who work hard every day to keep our great country safe from cyber threats. #team #leadership #work #industry #company #history