National Society of Compliance Professionals’ Post

🔍 𝐑𝐞𝐚𝐝𝐲 𝐟𝐨𝐫 𝐂𝐌𝐌𝐂? Join us at the Taste of IT Conference for a valuable session led by Matt King and Sarah Trimble-Oliver, sharing 𝐁𝐞𝐥𝐜𝐚𝐧'𝐬 𝐉𝐨𝐮𝐫𝐧𝐞𝐲 𝐭𝐨 𝐂𝐌𝐌𝐂 𝐉𝐨𝐢𝐧𝐭 𝐒𝐮𝐫𝐯𝐞𝐢𝐥𝐥𝐚𝐧𝐜𝐞! 🎯 𝐒𝐞𝐬𝐬𝐢𝐨𝐧 𝐇𝐢𝐠𝐡𝐥𝐢𝐠𝐡𝐭𝐬: Matt and Sarah will unpack Belcan's approach to CMMC readiness, detailing the path to their DIBCAC High Onsite Joint Voluntary Assessment and how it paves the way for CMMC compliance. This session provides a unique look from both a leadership and technical standpoint, with actionable insights for every organization facing CMMC requirements. 𝐊𝐞𝐲 𝐓𝐚𝐤𝐞𝐚𝐰𝐚𝐲𝐬: 📈 𝐈𝐦𝐩𝐚𝐜𝐭 𝐨𝐧 𝐎𝐫𝐠𝐚𝐧𝐢𝐳𝐚𝐭𝐢𝐨𝐧𝐬: With CMMC affecting over 75,000 organizations at level 2, understanding its implications and being prepared is crucial. 📋 𝐏𝐫𝐞𝐩𝐚𝐫𝐢𝐧𝐠 𝐟𝐨𝐫 𝐀𝐬𝐬𝐞𝐬𝐬𝐦𝐞𝐧𝐭: Discover the essential steps that organizations need to take to be ready for the CMMC assessment process. 📝 𝐃𝐨𝐜𝐮𝐦𝐞𝐧𝐭𝐚𝐭𝐢𝐨𝐧 𝐯𝐬. 𝐏𝐫𝐨𝐜𝐞𝐬𝐬𝐞𝐬: Learn the importance of aligning documentation with real practices to ensure smooth assessments and compliance. Prepare your organization to meet CMMC head-on with insights from leaders who’ve walked the path. Don’t miss it! 𝐑𝐞𝐠𝐢𝐬𝐭𝐞𝐫 𝐟𝐨𝐫 #𝐓𝐎𝐈𝐓𝟐𝟒 𝐚𝐭: https://lnkd.in/dks3jaGr #TOIT24 #CMMC #Cybersecurity #UniteDaytonTech #ConnectStrengthenChampion

#Infosec24: Hall of Fame CISO Advises on Best Practise to be a Great Security Le... - SC Media UK: #Infosec24: Hall of Fame CISO Advises on Best Practise to be a Great Security Le...  SC Media UK #CyberSecurity #InfoSec #SecurityInsights

What role do #Incentives play in #ZeroTrust? John Kindervag, the Godfather of Zero Trust, explains in his @FinancialTimes article how well-structured incentives can unlock the full potential of Zero Trust #Cybersecurity. Discover why aligning these incentives with a Zero Trust executive order is the key to truly transforming organizational behavior! 🚀💼 #CyberSecurity #Innovation #OrganizationalChange #Leadership #DigitalTransformation

Just had the opportunity to watch an enlightening session by Ava DuVernay on the power of reframing our thinking, especially in facing and overcoming trauma. It's a reminder that confronting our challenges directly is the first step towards overcoming them. The discussion also touched upon the concept of "caste" and drew poignant comparisons between historical and systemic forms of discrimination, such as African American women wearing head wraps and Dalit individuals having to sweep their shadows. These narratives drive home the reality of social stratification and its impacts. Regarding preparation and adaptability, the distinction between "Soft Prep" and "Hard Prep" resonated with me, especially as we navigate the complexities of cybersecurity. This leads me to the importance of risk assessments in our field. Effective risk management is not just about hardening our defenses but also about understanding and preparing for potential vulnerabilities through comprehensive assessments. In leadership, being "direct" doesn't only mean giving explicit instructions; it's about guiding with clarity and supporting your team to foster collective resilience. A servant leadership approach, where leaders serve their teams by directing thoughtfully and supportively, is crucial in our fast-evolving cybersecurity landscape. This session reinforced the value of resilience, defined as the ability to adapt and pivot, which is critical for all of us in cybersecurity. As we face various challenges, from data breaches to compliance issues, embracing these pivots becomes our strength. I'm also looking forward to watching "Origin" and seeing how these themes of adaptation and resilience continue to play out in new narratives. Let's take this insight back to our teams and strategies: embrace our limits, rethink our approaches to risk, and leverage our collective strength to innovate within our fields. What are your thoughts on integrating these human-focused strategies into our risk management practices? #Leadership #Cybersecurity #RiskManagement #AvaDuVernay #Resilience #CyberCommunity

Happening at the Chicago CIO Executive Summit on May 15th with Evanta, a Gartner Company Sharing a VERY popular peer-led session hosted by Governing Body members, Rajesh David M.S., MBA, VP, Global CISO, Molex and Kevin Boyd, AVP and CIO, University of Chicago. Technology leaders are facing an important task as they navigate the SEC’s recently adopted rules designed to improve the disclosure of cybersecurity risk management, strategy, governance and incidents by public companies. How is your organization adapting to the shift? You still have time to join this session to: - Working with legal to develop your organization's standard of "materiality" - Disclosing processes for assessing, identifying and managing material risks from cybersecurity threats - Determining where in each executive's reporting structure responsibility ultimately lies Message me or use the link below to log in / apply to join! #Evantacio #SEC #boardrooms #leadership

Obtaining meaningful statistics on board knowledge and the topics that is creating angst is quite difficult. Boards have little appetite to provide insights into their burning bridges and challenges and rightfully so. As a leadership advisory firm Heidrick and Struggles helps organizations develop leaders and improve their culture, having a little more insights than most into board pain points. https://lnkd.in/eaFGSSs2 Cyber and governance are up there as concerns for European Boards. With "boards struggling to draw reasonable boundaries and consider their responsibilities in the midst of .....geopolitical uncertainty and conflict, emerging tech and cyber [sic]" "....Board directors need both breadth of experience and a depth of expertise in particular topics, as well as the abilities to ask great questions and operate with agility and a willingness to learn.” Problems that are exacerbated by the introduction of cyber regulation in the EU and US. It is a reason Veritas GRC designs and delivers board cyber governance education programs and advisory services. Supporting boards work through their obligations to demonstrate reasonable and adequate compliance. Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Rachel V. Rose, JD, MBA Heidrick & Struggles #cybersecurity #cyberriskmanagement #boardcybergovernance

After an inspiring three days at the Gartner Security and Risk Management Summit 2024, I am feeling energized and motivated to continue our work at VA in securing Veterans’ data. Reflecting on Bear Gryll’s keynote “Never Give Up,” I am reminded of the importance of resilience in the face of failure. Bear emphasized the “4 F’s” that have shaped his resilience: 1) Failure, 2) Fear, 3) Fire, and 4) Faith. While all the “4 F’s” resonate with me, I acknowledge that not everyone embraces Failure easily. It's crucial for individuals and organizations to understand that embracing difficult moments leads to growth and evolution during challenging times. What resonates most with you? I look forward to incorporating these insights into our work at VA, as we continue to push the boundaries of cybersecurity together! #GartnerSummit #CyberSecurity #Innovation

Top down leader is critical-and it has to force cultural change and well as technical and security change

Here’s how to create a #security culture that adheres to the new #SEC regs >> https://buff.ly/3L0djxz #cybersecurity #infosec #cyberthreats #cyberattacks #databreaches #business #leaders #leadership #management #governance #CISO #CIO #CTO #CEO #regulation #regulators #reporting #compliance #securityculture #cyberculture #corporateculture

When we form a common, almost visceral understanding of what a risk means to the business, what happens? Culture improves and matures. Teams coalesce around what really matters. 👈 The organization's mission becomes threat-informed. Execution becomes imbued with confidence. Business results become more predictable. CRQ isn't just about numbers. It's about aligning gut ➡️ to head ➡️ to group ➡️ to goal. #crq #culture #cybersecurity #risk