Stan Stahl, PhD

🔐 𝗜𝗻𝘁𝗲𝗿𝗳𝗮𝗰𝗲 𝗜𝘀𝘀𝘂𝗲 𝟲𝟲: 𝗣𝗲𝗼𝗽𝗹𝗲-𝗹𝗲𝗱 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 Ralph Hogaboom, CISO at Washington State Department of Natural Resources talks creating a people-led cybersecurity function defined by long-term thinking, commitment to the vision, and keeping empathy at the forefront. 𝙍𝙚𝙖𝙙 𝙩𝙝𝙚 𝙛𝙪𝙡𝙡 𝙨𝙩𝙤𝙧𝙮: https://bit.ly/4qe0HWE In partnership with: Keeper Security, Inc., Structured Communication Systems #cybersecurity #digitalsecurity #transformation

4

How do you make sense of NIST CSF 1.1 vs. 2.0 scorecards when the math isn’t mathing? Senior Security Consultant Stephanie S. walks us through how the two versions compare and methodologies for getting an accurate comparison. Read it now on our blog! #security #blog #NIST #compliance https://lnkd.in/gJpyKjH2

5

RAVEN ELITE PROTECTION LLC - Strategic Threat Awareness Executive Threat Overview Open-source reporting this week highlights continued volatility across the domestic threat environment. Recent mass casualty incidents reinforce persistent risks to public venues and large gatherings. Federal enforcement actions targeting cyber-enabled fraud networks underscore the continued exploitation of digital ecosystems by criminal actors. At the same time, emerging counter-UAS capabilities are being deployed to address evolving aerial security and surveillance threats. Key Intelligence Themes • Targeted violence risks to public venues and high-visibility gatherings • Federal law enforcement disruption of cyber-enabled fraud networks • Expansion of counter-UAS technologies supporting homeland defense • Continued vigilance messaging regarding threats to houses of worship and community events Operational Assessment These developments reflect the continued convergence of physical security threats, cybercrime activity, and emerging technologies shaping today’s threat landscape. Strategic risk awareness supports informed decision-making. Virginia DCJS #11-17774 #RiskManagement #ExecutiveProtection #CyberSecurity #RavenEliteProtection

5

What’s the relationship between threat modeling and risk management? It’s one of the most common questions asked and the answer often surprises people. Threat modeling isn’t just a subset of risk management, it often precedes it. In fact, we handle the majority of threats through good engineering long before formal risk quantification even starts. Risk becomes essential only when we hit edge cases: when threats are unavoidable, when costs get high, or when regulators demand it. Most of the time, we’re building bridges, not running insurance calculations. If you're still approaching security through the lens of “what's the risk?”, it might be time to zoom out. Start with threat modeling. Here's a helpful read from 😷 Adam Shostack on the topic. Check it out. https://lnkd.in/e8g3h32R

7

The National Institute of Public Safety (NIPS) has unveiled a new series of BSIS-certified training programs, designed to help California security professionals meet licensing requirements and enhance operational readiness. https://hubs.li/Q03xY3zY0

At HSDF's Cybersecurity Symposium, Jason Hill OSCP, GPEN dicusses utilizing technology to meet FedRamp goals and adapting to evolving cyber threats. As a former CISA member and military veteran, his insights on navigating the sea of cybersecurity tools in a resource-limited environment are invaluable. #Cybersecurity #FedRamp #TechSolutions #HSDF

5

DigiCert has announced its participation in the National Institute of Standards and Technology (NIST) National Cybersecurity Center of Excellence (NCCoE) project focused on Secure Software Development, Security and Operations (DevSecOps) Practices: https://loom.ly/80r_vko #UKSecurity #SecurityNews #SecurityIndustry #CyberSecurity

2

Loving some of the Easter Eggs in the DoD FAQ: C-Q12: What qualifies as a "significant change" that would require an Organization Seeking Assessment to undergo a new evaluation under the CMMC Program? LAST SENTENCE 👉 ".....Failure to sufficiently demonstrate adherence to the previous SSP may result in a future failed assessment." So important ⚠️ Minor changes using proper change control - Okay. ✅ Major changes - Reassessment or failed future assessment and noncompliance in the meantime. 🚨 And YES! THEY TOOK A STAB AT DEFINING SIGNIFICANT CHANGE: #CMMC #CCP #CCA #C3PAO #DIB Carter Schoenberg Kyle Lai Brian Rhodes Melvin Scott Alexy J. Jeff Baldwin, DSc, Jacob Hill, Mike Bramm, Fred Tschirgi, Fernando Machado, CISSP, CISM, CCA, CCP, Daniel Akridge, Joy Belinda Beland, James Goepel, Matthew Titcombe, Matt Hoeper, Katherine "Kat" Adams, Scott Singer, CAPT USN (Ret), Thomas Graham, PhD, CISSP, MBA, Robert J. Teague, MBA, CCA, CCP, Nancy Laney, CMMC Coach, Stuart Itkin

61

9 Comments

Nevada hit: CISA is providing incident response support to the state following an online attack that disrupted local agency systems, amid signs of a surge in ransomware and data theft affecting cities and counties. https://lnkd.in/erA6dy49

2

The next era of resilience will be built on anticipation, not reaction. Explore the Predictive Security Architecture framework. #Resilience #PublicSafety #NationalSecurity https://lnkd.in/gYqBfPD9

3

1 Comment

Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications 11/24/2025 2:30 PM EST CISA is aware of multiple cyber threat actors actively leveraging commercial spyware to target users of mobile messaging applications (apps).1 These cyber actors use sophisticated targeting and social engineering techniques to deliver spyware and gain unauthorized access to a victim’s messaging app, facilitating the deployment of additional malicious payloads that can further compromise the victim’s mobile device....

1