Tim Callan

🚀 Big news from GSA! #FedRAMP is launching FedRAMP 20x, a new cloud-native approach to streamline & automate authorizations—making them simpler, faster & cheaper while enhancing security. Traditional agency authorizations will still be supported. Stay tuned! #CloudSecurity https://ow.ly/j6ZC50VnJeI

283

9 Comments

Security leaders don’t need more vendors telling them what’s “next.” They need providers who understand their needs, have technical depth, and are committed to delivering outcomes for the problems they have right now. That’s why Jason Rebholz is joining Expel as an Advisory CISO. From probing nation-state threats at Mandiant (part of Google Cloud) to building multiple cybersecurity firms from the ground up, Jason understands what it takes to keep organizations secure. Most recently, Jason served as CISO at Corvus by Travelers (where he was an Expel customer) and is currently the co-founder and CEO of Evoke Security. He’s seen how we operate and the outcomes we deliver, so he’s agreed to lend us his expertise not to promote Expel, but to bring an objective voice to the broader security conversation. A voice that’s grounded in real experience, focused on outcomes, and clear on what CISOs are actually up against. We’re honored to have his perspective in the mix.

63

2 Comments

Sharing evidence shouldn't be a security risk. From permissions and audit logs to automated redactions, this blog explores 5 ways combining your VMS with a digital evidence management system can simplify how you collect, store, and share evidence, without compromising integrity 👉 https://bit.ly/3ZQH4sl Looking to go beyond evidence sharing? Our free ebook outlines 5 VMS must-haves that can help you close cases faster. Download your copy 📘 https://bit.ly/4l1ZYov #ProtectTheEveryday #VMS #Investigations #DigitalEvidenceManagement

79

At #FedTalks, Shane Barney, CISO at Keeper Security, Inc., discussed the growing list of cyber threats public organizations face today. Shane outlined how modern access control can defend government technology against its unique set of threats and circumstances. He also emphasized how cybersecurity is not merely meeting compliance standards and regulatory minimums and challenged us all to go beyond the minimum checklists when it comes to sensitive government systems.

53

1 Comment

Modern regulatory frameworks—like FedRAMP, CMMC, SOC 2, DORA, and NIS2—demand operational resilience, proactive risk reduction, and auditable security controls at every layer of the software lifecycle. RapidFort simplifies compliance alignment across development and production environments through: * Automated, audit-aligned reporting across CI/CD

 * Continuous runtime visibility for persistent compliance posture

 * Vulnerability risk scoring and prioritization using the RapidRisk Score

 * Integrated protection workflows tied to real application behavior
 From secure builds to runtime enforcement, RapidFort helps organizations meet compliance mandates with greater speed, efficiency, and control. Curious to learn how we're transforming the global software supply chain? Get in touch with our team today: https://bit.ly/4jrXP3R #Compliance #DORA #NIS2 #RiskManagement #AuditReadiness #RapidFort

98

DMI combines human and machine intelligence to optimize security operations workflows and maximize your organization's investment. DMI also automates risk prioritization and orientation through consolidation of detection tool findings. Through our security operations center, we use Comprehensive Security Incident and Event Management (SIEM) and Security Orchestration Automation Response (SOAR) to detect threats and vulnerabilities and provide incident management and response.  Our security operations center provides key benefits:  • Advanced cyber analytics that incorporate machine learning and behavior analytics to uncover hidden threats and suspicious behavior across diverse data sources  • Faster response and mitigation to minimize losses and disruptions   • Security orchestration and workflow automation Learn more: https://lnkd.in/enJYtpiJ  #DMIDoMore #Cybersecurity #DigitalInnovation 

33

What drew a seasoned security leader to Sentra? Let him tell you himself. In his new blog, Ward Balcerzak, CISSP reflects on nearly two decades in security, and the one challenge that kept surfacing no matter the industry or role: 👉 Truly understanding your data - what sensitive information you have, where it’s stored, how it flows, and who has access. Check it out here ⬇️ https://lnkd.in/dMvw6aSv

40

Catch the domino before it starts the chain reaction. On Perspectives by Splunk, Field CTO Anthony Pierce is sharing how to minimize third-party risk to keep your internal systems secure. Stay one step ahead with the latest. 👉 https://splk.it/3W9bV1q

32

Security maturity isn’t about passing a test. It’s about building something that lasts. 💪 At Vanta, we built our own maturity model using NIST CSF 2.0 + CMMI scoring. Now we revisit progress every quarter—with leadership at the table. Hear from Alex Weber, CISA on our GRC team about how we track and measure our program's maturity, and how you can too using our Cybersecurity Maturity Assessment Template. Find it here: https://bit.ly/466wvoX

47

5 Comments

📢 New Feature Release | Automated Endpoint Compliance It’s not just a launch. It’s a leap forward! Scalefusion Veltar introduces Automated Endpoint Compliance—because chasing down misconfigurations and non compliance is so last year. ✔️Enforce CIS benchmarks with precision ✔️Auto-remediate policy violations ✔️Gain real-time compliance visibility ✔️Leverage Apple-specific compliance controls Explore the feature: https://hubs.la/Q03kst3p0 #Veltar #ComplianceAutomation #EndpointSecurity #UEM #CISBenchmarks #macOSManagement #EnterpriseIT #Scalefusion

24

1 Comment

The story of security’s evolution, from the perspective of Kumar Sokka, acre's Head of Intrusion and comnet. He had the pleasure of sitting down with the SVIP podcast, hosted by Taylor May, MBA. The security industry is undergoing a generational shift. Seasoned leaders are passing the torch, and new innovators are shaping the future. Kumar sees himself as part of this transition—working alongside industry veterans like Joe Grillo while leading the charge in cloud adoption, AI-driven security, and next-gen intrusion solutions. What role does acre play in bridging legacy systems with future-proof solutions? And what drives Kumar, one of the industry’s most exciting new leaders? Find out in this conversation packed with insights, bold ideas, and a glimpse into what’s next. 🎧 Listen to the full #podcast on YouTube: https://lnkd.in/g9KUYERK

70

4 Comments

Attackers aren't slowing down, and neither should your defenses. Our July Vulnerability Review covers the latest high-risk CVEs, active exploits, and what they mean for MSPs managing client environments. Understand the risks. Prioritize the right fixes: https://hubs.ly/Q03BSn1B0 #Cybersecurity #MSP #VulnerabilityManagement #ThreatIntel #BlackpointCyber

21