Clar Rosso, NACD.DC

Students can’t learn effectively unless they’re safe! In K–12 education 🏫, it's critical to adopt a layered approach to security. Schools must ensure that both physical and cybersecurity measures are robust and interconnected to protect students effectively. Don Hough, Deputy Associate Director of Cybersecurity and Infrastructure Security Agency’s School Safety Task Force suggests implementing multiple layers of security to reduce single points of failure and build redundancy into the system.   This approach helps schools manage and mitigate the evolving and sophisticated threats they face, ensuring a safe learning environment for all. Read more about the importance of a layered security approach in K–12 education: https://lnkd.in/e6tkREfw #K12 #CyberSecurity #SchoolSafety #Education

25

3 Comments

This episode explores why the long-standing strategy of scaling through vendor standardization is now putting higher ed IT at risk. As costs rise and vendor flexibility shrinks, institutions need a new playbook—one built on diversification and leverage. Drawing from real-world examples, including a survey tool negotiation turned case study, we break down how CIOs can regain control by adopting a “Lexus and Toyota” model across their IT portfolios. Based on Substack article: https://lnkd.in/eY7cG2cZ

10

1 Comment

Cybersecurity Awareness Month As Cybersecurity Awareness Month wraps up, I’m sharing the consistent habits that make the biggest difference in protecting organizations. My advice: verify URLs and senders. Treat every email with care, double-check links, and report anything suspicious. When practiced daily, these habits become instinct. #CybersecurityAwarenessMonth #CyberResilience #InformationSecurity https://lnkd.in/eCbjQRzb

27

Sharing this excellent Nexus contribution from Providence CISO Mike Ratliff on his organization's re-do of its #GRC program. Not only has attack surface management been added to the mix, but the team is tasked with meeting outcomes over reporting. This is a must read for any security leader. Claroty for Healthcare Claroty https://hubs.li/Q03xG9h60

18

This week I was fortunate enough to lead a workshop at an IANS CISO roundtable in Atlanta. Here are some of my top take aways: - You can’t protect what you can’t see—start with full visibility into data flows and access patterns. - Lightweight governance frameworks beat rigid controls in fast-moving environments. - Classify early, enforce smart: build entitlements that prevent exposure before it happens. - Treat AI like a team member by define what data it can access, when, and why. - Centralize metadata to fuel smarter decisions across security, privacy, and compliance. Great conversations at the IANS Atlanta CISO roundtable this week, thanks to all who joined. We are going to cover similar topics at the IANS Toronto Forum May 20th. Register here: https://lnkd.in/g2TAaMzt

53

Grateful for the thought leadership of Belmont’s own Paul Connelly, NACD-DC and Gary Garrison, recently featured in MSN and AOL, who make a compelling case for starting cybersecurity education in kindergarten. Their message is clear: strong digital habits and cyber wellness should begin when kids first go online. It’s a powerful example of our ongoing work to prepare students of all ages to thrive in a connected world. Find links to both articles in the comments below.  

55

10 Comments