Marc Crudgington Who I Am
•Download as PPTX, PDF•
0 likes•470 views
The document summarizes the experience and qualifications of an IT leader. It includes over 15 years of experience advising C-level executives and delivering IT solutions. Currently, he serves as the Vice President of Information Security at Woodforest National Bank, where he oversees the information security program, leads regulatory compliance initiatives, and acts as a liaison between IT and other business units. He holds multiple IT certifications and a Master of Business Administration degree. His skills include information security, IT strategy, project management, and risk management.
Report
Share
Report
Share
Recommended
MT118 Risk Intelligence - Making the Right Choices in Cybersecurity
Many organizations think of technology as the answer to cyber threats. But combatting cyber threats has to be driven by risk intelligence: understanding and embracing risk with the confidence so that you are prepared and resilient in the face of adversity. In this session, we'll show how risk can be harnessed to make effective security decisions and reduce compliance overhead by optimizing IT risk management efforts and creating a risk intelligent organization.
ComResource Agency Solutions
ComResource is an IT solutions company based in Ohio that offers infrastructure security and IT support services for businesses. They provide device, network, software, and VOIP protection as well as help with compliance with government cybersecurity regulations. Their services include incident response planning, disaster recovery, auditing, and monitoring to protect against cybersecurity threats. They can help businesses offload IT tasks and implement best practices for networking, security, and disaster recovery in accordance with state data privacy laws.
"Thinking diffrent" about your information security strategy
The document discusses the need for a new security strategy that focuses on data protection rather than infrastructure. It recommends evaluating current security spending and redirecting funds to intelligence-led approaches. A next generation security model is proposed that uses context awareness and data-centric policies to identify and contain advanced threats, including insider risks.
Big Data, Security Intelligence, (And Why I Hate This Title)
The only way to get where we need to be in security analysis is if we use Security Intelligence. This means working harder and understanding the big picture of your data.
ComResource Business Solutions
Focus on your business, not your IT. Allow ComResource to help protect, manage, and answer your day-to-day IT demands.
Hunting for cyber threats targeting weapon systems
While traditional cybersecurity defenses focus on prevention, there are many vulnerabilities and potential attacks against weapon systems. While weapon systems are more software dependent and networked than ever before, cybersecurity has not always been prioritized with regards to weapon systems acquisition.
Threat actors have advanced in their sophistication as they are well-resourced and highly skilled, oftentimes gathering detailed knowledge of the systems they want to attack. Ensuring stronger detection methods is imperative, but because these types of threats are very targeted and advanced, agencies need the capability to proactively hunt.
Mergers and Acquisition Security - Areas of Interest
This document provides guidance on areas of interest (AOI) to evaluate for mergers and acquisitions from an information security perspective. It identifies 22 strategic AOIs that security must scope to understand high risk areas, including application and access management, network/DMZ security, host security, data security and privacy, security policies and training, and security operations. Each AOI includes examples of specific areas to examine to identify strengths needing no attention or areas requiring intervention. The goal is to scope projects to understand risks across a broad scope from an information security standpoint.
A guide to Sustainable Cyber Security
The document provides legal disclaimers and information about sustainable cybersecurity practices. It discusses starting cybersecurity at the administration level by making it cultural rather than technical, based on needs rather than vendor features, iterative and continuous. It also discusses establishing a data protection steering committee and reducing reliance on people by ensuring responsibilities are understood and policies and processes are documented. The document provides recommendations on cybersecurity frameworks, controls, and best practices.
Recommended
MT118 Risk Intelligence - Making the Right Choices in Cybersecurity
Many organizations think of technology as the answer to cyber threats. But combatting cyber threats has to be driven by risk intelligence: understanding and embracing risk with the confidence so that you are prepared and resilient in the face of adversity. In this session, we'll show how risk can be harnessed to make effective security decisions and reduce compliance overhead by optimizing IT risk management efforts and creating a risk intelligent organization.
ComResource Agency Solutions
ComResource is an IT solutions company based in Ohio that offers infrastructure security and IT support services for businesses. They provide device, network, software, and VOIP protection as well as help with compliance with government cybersecurity regulations. Their services include incident response planning, disaster recovery, auditing, and monitoring to protect against cybersecurity threats. They can help businesses offload IT tasks and implement best practices for networking, security, and disaster recovery in accordance with state data privacy laws.
"Thinking diffrent" about your information security strategy
The document discusses the need for a new security strategy that focuses on data protection rather than infrastructure. It recommends evaluating current security spending and redirecting funds to intelligence-led approaches. A next generation security model is proposed that uses context awareness and data-centric policies to identify and contain advanced threats, including insider risks.
Big Data, Security Intelligence, (And Why I Hate This Title)
The only way to get where we need to be in security analysis is if we use Security Intelligence. This means working harder and understanding the big picture of your data.
ComResource Business Solutions
Focus on your business, not your IT. Allow ComResource to help protect, manage, and answer your day-to-day IT demands.
Hunting for cyber threats targeting weapon systems
While traditional cybersecurity defenses focus on prevention, there are many vulnerabilities and potential attacks against weapon systems. While weapon systems are more software dependent and networked than ever before, cybersecurity has not always been prioritized with regards to weapon systems acquisition.
Threat actors have advanced in their sophistication as they are well-resourced and highly skilled, oftentimes gathering detailed knowledge of the systems they want to attack. Ensuring stronger detection methods is imperative, but because these types of threats are very targeted and advanced, agencies need the capability to proactively hunt.
Mergers and Acquisition Security - Areas of Interest
This document provides guidance on areas of interest (AOI) to evaluate for mergers and acquisitions from an information security perspective. It identifies 22 strategic AOIs that security must scope to understand high risk areas, including application and access management, network/DMZ security, host security, data security and privacy, security policies and training, and security operations. Each AOI includes examples of specific areas to examine to identify strengths needing no attention or areas requiring intervention. The goal is to scope projects to understand risks across a broad scope from an information security standpoint.
A guide to Sustainable Cyber Security
The document provides legal disclaimers and information about sustainable cybersecurity practices. It discusses starting cybersecurity at the administration level by making it cultural rather than technical, based on needs rather than vendor features, iterative and continuous. It also discusses establishing a data protection steering committee and reducing reliance on people by ensuring responsibilities are understood and policies and processes are documented. The document provides recommendations on cybersecurity frameworks, controls, and best practices.
Dealing with Information Security, Risk Management & Cyber Resilience
The document discusses approaches to information security, risk management, and cyber resilience. It recommends taking a three-pronged approach to information security that includes awareness, technical controls, and periodic reviews. It also suggests adopting a framework for cyber risk management that is appropriate for the organization's needs and risk appetite. Finally, it outlines six key points to achieving cyber resilience: organizational readiness, situational awareness, detection, cyber defense, mitigation and containment, and recovery.
Your Mainframe Environment is a Treasure Trove: Is Your Sensitive Data Protec...
Businesses and governments alike are experiencing an alarming rate of malicious activity from both external and internal actors.
Not surprisingly, mission-critical mainframe applications make for desirable targets with large repositories of enterprise customer sensitive data. Mainframe environments are increasingly at risk opening accesses through the internet, mobile initiatives, big data initiatives, social initiatives, and more to drive the business forward. Additionally, there are some security challenges that are specific to the mainframe - traditional protection methods are no longer enough, insider threats are also on the rise, mainframe environments could be more vulnerable with reliance on privilege users to administer security, silo-ed mainframe IT management, limited ownership visibility, and lack of uniformed security management across the enterprise.
View this on-demand webcast to learn more about specific mainframe data protection challenges, top tips for protecting sensitive data, and key data protection capabilities that you should consider to address these challenges.
Register here for the playback: https://event.on24.com/wcc/r/1461947/D9664CC82EC641AA58D35462DB703470
SAM05_Barber PW (7-9-15)
This document discusses a potential cybersecurity assessment for a customer by a SAM and cloud partner. It provides an overview of what a cybersecurity assessment entails and the benefits it could provide to both partners and customers. For partners, it is an opportunity to strengthen relationships with customers and discuss additional cloud and software opportunities. For customers, an assessment establishes good security practices, prepares their environment to respond to threats, and helps minimize cyber risks and their related costs. The document then outlines UnifyCloud's tools and services that can help customers assess, remediate, and monitor their environment as they migrate workloads to the cloud with Microsoft solutions like Office 365 and Azure.
Cybersecurity Operations: Examining the State of the SOC
Fidelis Cybersecurity commissioned 360Velocity to conduct an enterprise study on the State of the SOC, including current trends and practices of threat detection and response. Join this webinar to listen to security experts Dr. Chenxi Wang of 360Velocity and Tim Roddy, VP of Cybersecurity Product Strategy at Fidelis examine how to standardize processes for threat detection and response & the case for and how to integrate network sensors and endpoint enforcement
Cybersecurity Priorities and Roadmap: Recommendations to DHS
This document provides recommendations to the Department of Homeland Security on cybersecurity priorities and a roadmap. It outlines a phased approach over several years to improve the overall cybersecurity posture. Phase I focuses on establishing a baseline of security across government systems through mandates and best practices. Phase II enhances security controls and expands training and collaboration. The roadmap calls for securing infrastructure, changing culture, improving the IT business model, developing the workforce, and advancing technologies over time to reduce vulnerabilities and attacks on critical systems.
2014 the future evolution of cybersecurity
Cybersecurity is difficult. It is a serious endeavor which over time strives to find a balance in managing the security of computing capabilities to protect the technology which connects and enriches the lives of everyone. Characteristics of cyber risk continue to mature and expand on the successes of technology innovation, integration, and adoption. It is no longer a game of tactics, but rather a professional discipline, continuous in nature, where to be effective strategic leadership must establish effective and efficient structures for evolving controls to sustain an optimal level of security.
This presentation will discuss the emerging challenges as it analyzes the cause-and-effect relationships of factors driving the future of cybersecurity.
The Insider Threat
One of the most critical aspects of safeguarding the IT assets of any corporation is dealing with the Insider's Threat. With so many diversified IT components, it is a real challenge to design an effective IT security strategy. It is critical to recognize this particular threat and take countermeasures to protect your assets. So, this webinar covers: Insider threats, how to mitigate insider threats, how to design an effective IT security strategy, and how to protect your assets.
Main points covered:
• Insider threats
• How to design an effective IT security strategy
• How to protect your assets
Presenter:
The webinar was hosted by Demetris Kachulis. Mr. Kachulis is an expert in the field of Information Security. With over 20 years of Wall Street consulting experience, he has worked with many Fortune 500 companies. He is currently the director of Eldion Consulting, a company offering Security, Trainings and Business solutions.
Link of the recorded session published on YouTube: https://youtu.be/hXe5HHjnBeU
Case Study: The Role of Human Error in Information Security
The document discusses how human error is a major cause of security incidents, accounting for 95% according to IBM. Examples are given of incidents caused by expired certificates, unencrypted emails to the wrong recipient, and phishing emails. Two case studies are described in more detail: a lottery rigging scheme by an IT director that lasted 10 years due to a lack of oversight, and a company security breach enabled by an unconfigured firewall and employee clicking a phishing link. The document advocates for education, separation of duties, documented procedures and infrastructure protection to help address the problem of human error in security.
How to assess and manage cyber risk
1) Risk assessment is the foundation of any security program and can help organizations avoid significant fines and penalties in the event of a data breach or audit findings.
2) A risk analysis involves identifying threats, vulnerabilities, and risks; assessing current security measures; determining the likelihood and impact of risks; and identifying security measures to address risks.
3) Tools and frameworks like NIST, HIPAA, OCTAVE, and those from CompTIA, DHS, and HHS can help organizations conduct thorough and effective risk analyses.
Cyber Security Strategies and Approaches
This document discusses cyber security strategies and approaches used by various governments and organizations. It outlines national strategies from the UK, US, Estonia, and Singapore, as well as approaches at the European Union level. Common themes across strategies include recognizing the interconnected nature of IT systems, moving from attack detection to prevention, and the need for joint public-private collaboration to develop regulations, share intelligence, and protect critical infrastructure and society.
Bob West - Educating the Board of Directors
Most boards of directors don't have someone that understands cyber security issues. As a consequence, they can't provide the proper oversight over the companies they are responsible for. This presentation will cover the issues boards of directors need to understand, what questions board members need to ask and how to communicate with them.
Tripwire Energy Working Group Session w/Dale Peterson
The document discusses how executives ask questions about security risks from a business perspective rather than solely as a technical issue. It focuses on assessing risk as a combination of consequence and likelihood of various incidents. The key message is that organizations should prioritize reducing the potential consequences of incidents, such as compromises of control systems, as this can be a more effective way to manage overall risk than focusing only on reducing likelihoods through technical security controls. Reducing consequences may involve design choices to prevent safety and operational impacts from cyber or other incidents.
Pivotal Role of HR in Cybersecurity
Although a latecomer to the security party, HR organizations can play an important role in protecting assets and influencing good security behaviors. HR leadership can strengthen hiring practices, tighten responses for disgruntled employees, spearhead effective employee security education, advocate regulatory compliance and exemplify good privacy practices, be a good custodian of HR data, and rise to the challenges of hiring good cybersecurity professionals.
The Science and Art of Cyber Incident Response (with Case Studies)
In this joint presentation for the ISSA-LA Summit X in Los Angeles, Jennifer Rathburn, a cybersecurity and data privacy law expert at Foley & Lardner LLP and William Dixon, Associate Managing Director in Kroll's Cyber Risk practice, highlight three incident response scenarios and tips on breach preparation and response.
To learn more, contact Jennifer or William at:
Jennifer Rathburn, Foley & Lardner LLP
jrathburn@foley.com; 414-297-5864
William Dixon, Kroll, a Division of Duff & Phelps
william.dixon@kroll.com; 213-247-3973
Dynamic Cyber Defense
Presented by: John Fleker, HP
Abstract: The cyber threat landscape is continually evolving. More and more, the critical infrastructure of our nation is at risk. Whether by nation-state actors, criminal organizations, hacktivists or any number of hackers looking to prove their skills, our safety and economic prosperity is threatened. There are four things that must be considered in order to address the evolving threats:
1- Becoming more proactive in our cyber defense efforts through intelligence
2- Better user behavior management
3- Assessing risk using meaningful metric
4- Resilience – operating through an intrusion
We need to look at the threat picture differently – in a proactive way – to ensure that CEO’s and CIO/CISO’s are on the same page regarding the threat, to allow those leaders to make better resourcing decisions and to be better prepared to mitigate adversaries when they arrive at the security perimeter. We need to integrate a wider set of intelligence into our thinking. This is critical to taking a more proactive stance in defending your networks. Combined with what you know of your own network, cyber intelligence strategically helps make solid resource planning decisions and functionally, helps your network operators better defend, mitigate and operate through cyber intrusions. The Operational Levels of Cyber Intelligence paper by the Intelligence and National Security Alliance details a better way of using intelligence.
www.insaonline.org/i/d/a/Resources/CyberIntel_WP.aspx
Additionally, we must increase info sharing across the board. Executive Order 13636 - Improving Critical Infrastructure Cybersecurity is leading critical infrastructure that direction.
Cybersecurity solution-guide
The document provides an overview of cybersecurity, explaining why it is important for businesses to implement security measures to protect their data, networks, and systems from cyber threats in order to avoid economic losses, reputational damage, and regulatory penalties. It discusses the components of cybersecurity including identity and access management, security information and event management, endpoint security, network security, and data security. The document also covers cybersecurity compliance regulations and best practices organizations should follow.
GSA's Presentation on Improving Cyber Security Through Acquisition
GSA's Presentation on Improving Cyber Security Through AcquisitionGovernment Technology and Services Coalition
the Defense Department and General Services Administration report on improving cyber security and resilience through acquisition. This report, developed as part of the President’s Executive Order on Cyber Security, forms the baseline for a fundamental shift in federal procurement policy. In short, going forward cyber security is going to be a core consideration in federal procurements. Contractors will likely find cyber security obligations embedded in their contracts, and may even find themselves excluded from the procurement process if certain cyber security benchmarks are not met.
The report spells out six key recommendations:
1) Institute Baseline Cybersecurity Requirements as a Condition of Contract Award for Appropriate Acquisitions
2) Address Cybersecurity in Relevant Training
3) Develop Common Cybersecurity Definitions for Federal Acquisitions
4) Institute a Federal Acquisition Cyber Risk Management Strategy
5) Include a Requirement to Purchase from Original Equipment Manufacturers, Their Authorized Resellers, or Other “Trusted” Sources, Whenever Available, in Appropriate Acquisitions
6) Increase Government Accountability for Cyber Risk ManagementAdvanced Cybersecurity Risk Management: How to successfully address your Cybe...
Main points covered:
• Understanding the inverted economics of cyber security, the incentives for cyber crime and its effect on the growing threat
• Inefficiencies with the traditional approaches to cyber risk assessment and why we are not making more progress in enhancing cyber defenses
• Resetting roles and responsibilities regarding cyber security within organizations
• Developing empirical, cost-effective cyber risk assessments to meet the evolving threat
Our presenter for this webinar is Larry Clinton, the president of the Internet Security Alliance (ISA), a multi-sector association focused on Cybersecurity thought leadership, policy advocacy, and best practices. Mr. Clinton advises both industry and governments around the world. He has twice been listed on the Corporate 100 list of the most influential people in corporate governance. He is the author of The Cyber Risk Handbook for Corporate Boards. PWC has found the use of this Handbook improves cyber budgeting, cyber risk management and helps create a culture of security. The Handbook has been published in the US, Germany, the UK and Latin America. He is currently working on a version for the European Conference of Directors Associations as well as versions for Japan and India. Mr. Clinton also leads ISA, public policy work built around their publication “The Cyber Security Social Contract” which the NATO Center of Cyber Excellence in Estonia asked for a briefing on.
Recorded Webinar: https://www.youtube.com/watch?v=8qVtoqi37X8
Jeffrey Sweet - Third Party Risk Governance - Why? and How?
In this session information will be presented on Third Party Risk Governance. The presenter will provide a better understand of the what’s, why’s and how’s of a Third Party Risk Governance program and provide some suggestions on sources for a program as well as some of the typical “gotchas”. This presentation will also provide common objections from the recipients of assessments and how to overcome those objections as well as discuss contract language that can be added to your products and services contracts.
How to Build Your Own Cyber Security Framework using a Balanced Scorecard
Presented by: Russell Thomas, George Mason University
Abstract: Two aspects of cyber security that everyone struggles with are metrics and business impact. How do we measure it to improve and how do we make it meaningful to business decision makers? This gap appeared again recently in the NIST Cyber Security Framework (CSF) process RFI responses. But there is no need to wait for NIST CSF or anything else because there is a viable method available now that you can use to build your own CSF. Namely the “Balanced Scorecard” method.
The key idea is to focus on performance against measurable objectives in all critical dimensions that, taken together, will lead to better security, privacy, and resiliency outcomes, even in a dynamic and highly uncertain threat environment. In this presentation, we’ll explain the ten critical dimensions of cyber security performance, explain how they are interrelated and feed off each other, show how to create a performance index in each dimension, and describe how the balanced scorecard can be used to drive executive decisions. This presentation should be valuable to managers and executives in every type of organization in the energy sector, including the supply/service chain. Consultants, regulators, and academics should also find it interesting and useful.
Build a Business-Driven IT Risk Management Program
Your Challenge
Risk is an unavoidable part of IT. And what you don't know, can hurt you. The question is, do you tackle risk head-on or leave it to chance?
Get a handle on risk management quickly using Info-Tech's methodology and reduce unfortunate IT surprises.
Our Advice
Critical Insight
1. IT risk is business risk.
Every IT risk has business implications. Create an IT risk management program that shares risk accountability with the business.
2. Risk is money.
It’s impossible to make intelligent decisions about risks without knowing what they’re worth.
3. You don’t know what you don’t know.
And what you don’t know can hurt you – so find out. To find hidden risks, you need a structured approach.
Impact and Result
Stop leaving IT risk to chance. Transform your ad hoc IT risk management processes into a formalized, ongoing program and increase risk management success by 53%.
Take a proactive stance against IT threats and vulnerabilities by identifying and assessing IT’s greatest risks before they happen.
Involve key stakeholders including the business senior management team to gain buy-in and to focus on IT risks that matter most to the organization.
Share accountability for IT risk with business stakeholders and have them weigh-in on prioritizing investments in risk response activities.
IT Risk Management & Leadership 23 - 26 June 2013 Dubai
WHY IS THIS IT RISK ASSESSMENT WORKSHOP IMPORTANT?
Are you effectively securing your organization’s IT systems that store, process, or transmit organizational information?
Is your IT risk management plan tailored to the specific risk profile of your business and being coordinated across all functional and business units?
With the release of IT Governance frameworks, requirements for risk management and new international standards entering the market, the pressure is mounting to ensure that all your IT risks are identified and the necessary action is taken – be this to mitigate them, accept or ignore them. So, how safe is your IT system? What are the risks that your organization is being exposed to?
The solution to this challenge is to establish an effective risk management process that protects the organization, not just its IT assets, and provides it with the ability to perform its mission.
Risk management is the process of identifying and assessing risk and taking preventive measures to reduce it to an acceptable level. It is critical that you develop an effective risk management program that assesses and mitigates risks within your IT systems and better manages these IT-related mission risks.
BENEFITS OF ATTENDING THIS WORKSHOP
Identify common IT project risks
Learn how to assess threats and vulnerabilities to create a risk response strategy
Understand what qualifies as risk with IT projects
Understand the most common IT risk sources
Qualify and quantify IT risks
Learn the difference between negative and positive IT risks
Develop an IT risk management plan
Plan risk response methods for IT risks
Create risk mitigation and contingency plans
Monitor and control project risks
Overcome resistance from stakeholders and team members
WHO SHOULD ATTEND THIS WORKSHOP
IT risk managers
IT security managers
Compliance officers
Program and project managers
IT project managers
IT operation manager
Contact Kris at kris@360bsi.com to register.
More Related Content
What's hot
Dealing with Information Security, Risk Management & Cyber Resilience
The document discusses approaches to information security, risk management, and cyber resilience. It recommends taking a three-pronged approach to information security that includes awareness, technical controls, and periodic reviews. It also suggests adopting a framework for cyber risk management that is appropriate for the organization's needs and risk appetite. Finally, it outlines six key points to achieving cyber resilience: organizational readiness, situational awareness, detection, cyber defense, mitigation and containment, and recovery.
Your Mainframe Environment is a Treasure Trove: Is Your Sensitive Data Protec...
Businesses and governments alike are experiencing an alarming rate of malicious activity from both external and internal actors.
Not surprisingly, mission-critical mainframe applications make for desirable targets with large repositories of enterprise customer sensitive data. Mainframe environments are increasingly at risk opening accesses through the internet, mobile initiatives, big data initiatives, social initiatives, and more to drive the business forward. Additionally, there are some security challenges that are specific to the mainframe - traditional protection methods are no longer enough, insider threats are also on the rise, mainframe environments could be more vulnerable with reliance on privilege users to administer security, silo-ed mainframe IT management, limited ownership visibility, and lack of uniformed security management across the enterprise.
View this on-demand webcast to learn more about specific mainframe data protection challenges, top tips for protecting sensitive data, and key data protection capabilities that you should consider to address these challenges.
Register here for the playback: https://event.on24.com/wcc/r/1461947/D9664CC82EC641AA58D35462DB703470
SAM05_Barber PW (7-9-15)
This document discusses a potential cybersecurity assessment for a customer by a SAM and cloud partner. It provides an overview of what a cybersecurity assessment entails and the benefits it could provide to both partners and customers. For partners, it is an opportunity to strengthen relationships with customers and discuss additional cloud and software opportunities. For customers, an assessment establishes good security practices, prepares their environment to respond to threats, and helps minimize cyber risks and their related costs. The document then outlines UnifyCloud's tools and services that can help customers assess, remediate, and monitor their environment as they migrate workloads to the cloud with Microsoft solutions like Office 365 and Azure.
Cybersecurity Operations: Examining the State of the SOC
Fidelis Cybersecurity commissioned 360Velocity to conduct an enterprise study on the State of the SOC, including current trends and practices of threat detection and response. Join this webinar to listen to security experts Dr. Chenxi Wang of 360Velocity and Tim Roddy, VP of Cybersecurity Product Strategy at Fidelis examine how to standardize processes for threat detection and response & the case for and how to integrate network sensors and endpoint enforcement
Cybersecurity Priorities and Roadmap: Recommendations to DHS
This document provides recommendations to the Department of Homeland Security on cybersecurity priorities and a roadmap. It outlines a phased approach over several years to improve the overall cybersecurity posture. Phase I focuses on establishing a baseline of security across government systems through mandates and best practices. Phase II enhances security controls and expands training and collaboration. The roadmap calls for securing infrastructure, changing culture, improving the IT business model, developing the workforce, and advancing technologies over time to reduce vulnerabilities and attacks on critical systems.
2014 the future evolution of cybersecurity
Cybersecurity is difficult. It is a serious endeavor which over time strives to find a balance in managing the security of computing capabilities to protect the technology which connects and enriches the lives of everyone. Characteristics of cyber risk continue to mature and expand on the successes of technology innovation, integration, and adoption. It is no longer a game of tactics, but rather a professional discipline, continuous in nature, where to be effective strategic leadership must establish effective and efficient structures for evolving controls to sustain an optimal level of security.
This presentation will discuss the emerging challenges as it analyzes the cause-and-effect relationships of factors driving the future of cybersecurity.
The Insider Threat
One of the most critical aspects of safeguarding the IT assets of any corporation is dealing with the Insider's Threat. With so many diversified IT components, it is a real challenge to design an effective IT security strategy. It is critical to recognize this particular threat and take countermeasures to protect your assets. So, this webinar covers: Insider threats, how to mitigate insider threats, how to design an effective IT security strategy, and how to protect your assets.
Main points covered:
• Insider threats
• How to design an effective IT security strategy
• How to protect your assets
Presenter:
The webinar was hosted by Demetris Kachulis. Mr. Kachulis is an expert in the field of Information Security. With over 20 years of Wall Street consulting experience, he has worked with many Fortune 500 companies. He is currently the director of Eldion Consulting, a company offering Security, Trainings and Business solutions.
Link of the recorded session published on YouTube: https://youtu.be/hXe5HHjnBeU
Case Study: The Role of Human Error in Information Security
The document discusses how human error is a major cause of security incidents, accounting for 95% according to IBM. Examples are given of incidents caused by expired certificates, unencrypted emails to the wrong recipient, and phishing emails. Two case studies are described in more detail: a lottery rigging scheme by an IT director that lasted 10 years due to a lack of oversight, and a company security breach enabled by an unconfigured firewall and employee clicking a phishing link. The document advocates for education, separation of duties, documented procedures and infrastructure protection to help address the problem of human error in security.
How to assess and manage cyber risk
1) Risk assessment is the foundation of any security program and can help organizations avoid significant fines and penalties in the event of a data breach or audit findings.
2) A risk analysis involves identifying threats, vulnerabilities, and risks; assessing current security measures; determining the likelihood and impact of risks; and identifying security measures to address risks.
3) Tools and frameworks like NIST, HIPAA, OCTAVE, and those from CompTIA, DHS, and HHS can help organizations conduct thorough and effective risk analyses.
Cyber Security Strategies and Approaches
This document discusses cyber security strategies and approaches used by various governments and organizations. It outlines national strategies from the UK, US, Estonia, and Singapore, as well as approaches at the European Union level. Common themes across strategies include recognizing the interconnected nature of IT systems, moving from attack detection to prevention, and the need for joint public-private collaboration to develop regulations, share intelligence, and protect critical infrastructure and society.
Bob West - Educating the Board of Directors
Most boards of directors don't have someone that understands cyber security issues. As a consequence, they can't provide the proper oversight over the companies they are responsible for. This presentation will cover the issues boards of directors need to understand, what questions board members need to ask and how to communicate with them.
Tripwire Energy Working Group Session w/Dale Peterson
The document discusses how executives ask questions about security risks from a business perspective rather than solely as a technical issue. It focuses on assessing risk as a combination of consequence and likelihood of various incidents. The key message is that organizations should prioritize reducing the potential consequences of incidents, such as compromises of control systems, as this can be a more effective way to manage overall risk than focusing only on reducing likelihoods through technical security controls. Reducing consequences may involve design choices to prevent safety and operational impacts from cyber or other incidents.
Pivotal Role of HR in Cybersecurity
Although a latecomer to the security party, HR organizations can play an important role in protecting assets and influencing good security behaviors. HR leadership can strengthen hiring practices, tighten responses for disgruntled employees, spearhead effective employee security education, advocate regulatory compliance and exemplify good privacy practices, be a good custodian of HR data, and rise to the challenges of hiring good cybersecurity professionals.
The Science and Art of Cyber Incident Response (with Case Studies)
In this joint presentation for the ISSA-LA Summit X in Los Angeles, Jennifer Rathburn, a cybersecurity and data privacy law expert at Foley & Lardner LLP and William Dixon, Associate Managing Director in Kroll's Cyber Risk practice, highlight three incident response scenarios and tips on breach preparation and response.
To learn more, contact Jennifer or William at:
Jennifer Rathburn, Foley & Lardner LLP
jrathburn@foley.com; 414-297-5864
William Dixon, Kroll, a Division of Duff & Phelps
william.dixon@kroll.com; 213-247-3973
Dynamic Cyber Defense
Presented by: John Fleker, HP
Abstract: The cyber threat landscape is continually evolving. More and more, the critical infrastructure of our nation is at risk. Whether by nation-state actors, criminal organizations, hacktivists or any number of hackers looking to prove their skills, our safety and economic prosperity is threatened. There are four things that must be considered in order to address the evolving threats:
1- Becoming more proactive in our cyber defense efforts through intelligence
2- Better user behavior management
3- Assessing risk using meaningful metric
4- Resilience – operating through an intrusion
We need to look at the threat picture differently – in a proactive way – to ensure that CEO’s and CIO/CISO’s are on the same page regarding the threat, to allow those leaders to make better resourcing decisions and to be better prepared to mitigate adversaries when they arrive at the security perimeter. We need to integrate a wider set of intelligence into our thinking. This is critical to taking a more proactive stance in defending your networks. Combined with what you know of your own network, cyber intelligence strategically helps make solid resource planning decisions and functionally, helps your network operators better defend, mitigate and operate through cyber intrusions. The Operational Levels of Cyber Intelligence paper by the Intelligence and National Security Alliance details a better way of using intelligence.
www.insaonline.org/i/d/a/Resources/CyberIntel_WP.aspx
Additionally, we must increase info sharing across the board. Executive Order 13636 - Improving Critical Infrastructure Cybersecurity is leading critical infrastructure that direction.
Cybersecurity solution-guide
The document provides an overview of cybersecurity, explaining why it is important for businesses to implement security measures to protect their data, networks, and systems from cyber threats in order to avoid economic losses, reputational damage, and regulatory penalties. It discusses the components of cybersecurity including identity and access management, security information and event management, endpoint security, network security, and data security. The document also covers cybersecurity compliance regulations and best practices organizations should follow.
GSA's Presentation on Improving Cyber Security Through Acquisition
GSA's Presentation on Improving Cyber Security Through AcquisitionGovernment Technology and Services Coalition
the Defense Department and General Services Administration report on improving cyber security and resilience through acquisition. This report, developed as part of the President’s Executive Order on Cyber Security, forms the baseline for a fundamental shift in federal procurement policy. In short, going forward cyber security is going to be a core consideration in federal procurements. Contractors will likely find cyber security obligations embedded in their contracts, and may even find themselves excluded from the procurement process if certain cyber security benchmarks are not met.
The report spells out six key recommendations:
1) Institute Baseline Cybersecurity Requirements as a Condition of Contract Award for Appropriate Acquisitions
2) Address Cybersecurity in Relevant Training
3) Develop Common Cybersecurity Definitions for Federal Acquisitions
4) Institute a Federal Acquisition Cyber Risk Management Strategy
5) Include a Requirement to Purchase from Original Equipment Manufacturers, Their Authorized Resellers, or Other “Trusted” Sources, Whenever Available, in Appropriate Acquisitions
6) Increase Government Accountability for Cyber Risk ManagementAdvanced Cybersecurity Risk Management: How to successfully address your Cybe...
Main points covered:
• Understanding the inverted economics of cyber security, the incentives for cyber crime and its effect on the growing threat
• Inefficiencies with the traditional approaches to cyber risk assessment and why we are not making more progress in enhancing cyber defenses
• Resetting roles and responsibilities regarding cyber security within organizations
• Developing empirical, cost-effective cyber risk assessments to meet the evolving threat
Our presenter for this webinar is Larry Clinton, the president of the Internet Security Alliance (ISA), a multi-sector association focused on Cybersecurity thought leadership, policy advocacy, and best practices. Mr. Clinton advises both industry and governments around the world. He has twice been listed on the Corporate 100 list of the most influential people in corporate governance. He is the author of The Cyber Risk Handbook for Corporate Boards. PWC has found the use of this Handbook improves cyber budgeting, cyber risk management and helps create a culture of security. The Handbook has been published in the US, Germany, the UK and Latin America. He is currently working on a version for the European Conference of Directors Associations as well as versions for Japan and India. Mr. Clinton also leads ISA, public policy work built around their publication “The Cyber Security Social Contract” which the NATO Center of Cyber Excellence in Estonia asked for a briefing on.
Recorded Webinar: https://www.youtube.com/watch?v=8qVtoqi37X8
Jeffrey Sweet - Third Party Risk Governance - Why? and How?
In this session information will be presented on Third Party Risk Governance. The presenter will provide a better understand of the what’s, why’s and how’s of a Third Party Risk Governance program and provide some suggestions on sources for a program as well as some of the typical “gotchas”. This presentation will also provide common objections from the recipients of assessments and how to overcome those objections as well as discuss contract language that can be added to your products and services contracts.
How to Build Your Own Cyber Security Framework using a Balanced Scorecard
Presented by: Russell Thomas, George Mason University
Abstract: Two aspects of cyber security that everyone struggles with are metrics and business impact. How do we measure it to improve and how do we make it meaningful to business decision makers? This gap appeared again recently in the NIST Cyber Security Framework (CSF) process RFI responses. But there is no need to wait for NIST CSF or anything else because there is a viable method available now that you can use to build your own CSF. Namely the “Balanced Scorecard” method.
The key idea is to focus on performance against measurable objectives in all critical dimensions that, taken together, will lead to better security, privacy, and resiliency outcomes, even in a dynamic and highly uncertain threat environment. In this presentation, we’ll explain the ten critical dimensions of cyber security performance, explain how they are interrelated and feed off each other, show how to create a performance index in each dimension, and describe how the balanced scorecard can be used to drive executive decisions. This presentation should be valuable to managers and executives in every type of organization in the energy sector, including the supply/service chain. Consultants, regulators, and academics should also find it interesting and useful.
What's hot (20)
Dealing with Information Security, Risk Management & Cyber Resilience
Dealing with Information Security, Risk Management & Cyber Resilience
Your Mainframe Environment is a Treasure Trove: Is Your Sensitive Data Protec...
Your Mainframe Environment is a Treasure Trove: Is Your Sensitive Data Protec...
Cybersecurity Operations: Examining the State of the SOC
Cybersecurity Operations: Examining the State of the SOC
Cybersecurity Priorities and Roadmap: Recommendations to DHS
Cybersecurity Priorities and Roadmap: Recommendations to DHS
Case Study: The Role of Human Error in Information Security
Case Study: The Role of Human Error in Information Security
Tripwire Energy Working Group Session w/Dale Peterson
Tripwire Energy Working Group Session w/Dale Peterson
The Science and Art of Cyber Incident Response (with Case Studies)
The Science and Art of Cyber Incident Response (with Case Studies)
GSA's Presentation on Improving Cyber Security Through Acquisition
GSA's Presentation on Improving Cyber Security Through Acquisition
Advanced Cybersecurity Risk Management: How to successfully address your Cybe...
Advanced Cybersecurity Risk Management: How to successfully address your Cybe...
Jeffrey Sweet - Third Party Risk Governance - Why? and How?
Jeffrey Sweet - Third Party Risk Governance - Why? and How?
How to Build Your Own Cyber Security Framework using a Balanced Scorecard
How to Build Your Own Cyber Security Framework using a Balanced Scorecard
Similar to Marc Crudgington Who I Am
Build a Business-Driven IT Risk Management Program
Your Challenge
Risk is an unavoidable part of IT. And what you don't know, can hurt you. The question is, do you tackle risk head-on or leave it to chance?
Get a handle on risk management quickly using Info-Tech's methodology and reduce unfortunate IT surprises.
Our Advice
Critical Insight
1. IT risk is business risk.
Every IT risk has business implications. Create an IT risk management program that shares risk accountability with the business.
2. Risk is money.
It’s impossible to make intelligent decisions about risks without knowing what they’re worth.
3. You don’t know what you don’t know.
And what you don’t know can hurt you – so find out. To find hidden risks, you need a structured approach.
Impact and Result
Stop leaving IT risk to chance. Transform your ad hoc IT risk management processes into a formalized, ongoing program and increase risk management success by 53%.
Take a proactive stance against IT threats and vulnerabilities by identifying and assessing IT’s greatest risks before they happen.
Involve key stakeholders including the business senior management team to gain buy-in and to focus on IT risks that matter most to the organization.
Share accountability for IT risk with business stakeholders and have them weigh-in on prioritizing investments in risk response activities.
IT Risk Management & Leadership 23 - 26 June 2013 Dubai
WHY IS THIS IT RISK ASSESSMENT WORKSHOP IMPORTANT?
Are you effectively securing your organization’s IT systems that store, process, or transmit organizational information?
Is your IT risk management plan tailored to the specific risk profile of your business and being coordinated across all functional and business units?
With the release of IT Governance frameworks, requirements for risk management and new international standards entering the market, the pressure is mounting to ensure that all your IT risks are identified and the necessary action is taken – be this to mitigate them, accept or ignore them. So, how safe is your IT system? What are the risks that your organization is being exposed to?
The solution to this challenge is to establish an effective risk management process that protects the organization, not just its IT assets, and provides it with the ability to perform its mission.
Risk management is the process of identifying and assessing risk and taking preventive measures to reduce it to an acceptable level. It is critical that you develop an effective risk management program that assesses and mitigates risks within your IT systems and better manages these IT-related mission risks.
BENEFITS OF ATTENDING THIS WORKSHOP
Identify common IT project risks
Learn how to assess threats and vulnerabilities to create a risk response strategy
Understand what qualifies as risk with IT projects
Understand the most common IT risk sources
Qualify and quantify IT risks
Learn the difference between negative and positive IT risks
Develop an IT risk management plan
Plan risk response methods for IT risks
Create risk mitigation and contingency plans
Monitor and control project risks
Overcome resistance from stakeholders and team members
WHO SHOULD ATTEND THIS WORKSHOP
IT risk managers
IT security managers
Compliance officers
Program and project managers
IT project managers
IT operation manager
Contact Kris at kris@360bsi.com to register.
Pkf advant edge_orientation3
PKF AvantEdge Sdn. Bhd. is an IT consulting firm with international reach and local expertise. They provide IT advisory, governance, security, and solutions consulting services. The firm works closely with clients to understand their business needs and apply technology solutions effectively. PKF AvantEdge's consultants have extensive experience in the financial industry and technical certifications in areas like security, networking, and project management. Their goal is to help clients strategically apply IT to address business challenges and drive value.
Infocon Bangladesh 2016
This document discusses information security governance and business continuity planning for organizations. It emphasizes that information security is a business issue that requires strategic management from the board and senior leadership. It outlines key roles and responsibilities for governance bodies like the board, executive management, information security team, and risk committees. It also discusses developing policies, procedures, risk management processes, information security audits, and testing business continuity plans to ensure effective governance. Regular reviews and updates are needed to account for a changing threat landscape and business environment.
Security architecture rajagiri talk march 2011
The document discusses several topics related to cybersecurity and governance including:
- The need for dynamic laws to keep pace with rapid technological advancements in cyberspace.
- The absence of a single governing body and immature cybersecurity practices in many countries.
- A five-tier architecture model for cybersecurity consisting of data, process, technology, data management, and management architectures.
- The importance of information assurance over just information security to ensure availability, integrity and reliability of information systems.
- Key stakeholders in information assurance including boards of directors, management, employees, customers, and regulatory authorities.
JowersJT_resume_BLHIv5
This document is a resume for Jason T. Jowers, who has over 20 years of experience in information technology leadership roles. He is currently the Director of Information Services for B.L. Harbert International, where he is responsible for the vision, strategy, and management of IT for the $1 billion company. Previously he transformed the company's information security posture from unsatisfactory to exceptional. He has extensive experience developing and executing global IT strategies aligned with business goals for the construction industry.
10 Visionary Leaders Shaping Digital Transformation In 2024 (1).pdf
Glendon Schmitz is the Chief Information Security Officer at the Virginia Department of Behavioral Health and Developmental Services emerging as a trailblazer in the intricate landscape of cybersecurity. His journey is a narrative of strategic foresight, deft leadership and a relentless commitment to fortifying the digital frontier.
IT Governance in Banks, May, 2014
IT Governance in Banks, workshop organized by USAID Finance for Economic Development (FED) Program in Yerevan, Armenia in May, 2014
Preston Williams III Curriculum Vitae (CV)
Preston Williams III is Senior Partner & Chief Information Officer (CIO) at GBC® Global Services. He is a pioneer and futurist with 20+ years of Big 4, Fortune 500, Global 100 and entrepreneurial experience. That experience includes Senior Auditor with Price Waterhouse (PriceWaterhouseCoopers), Controller for Lynn-Phill, IT Consultant with McGladrey & Pullen and Andersen Consulting (Accenture) as well as Project Executive at IBM® Global Services. He also worked as the first Product Manager for Global Data Collection with Dun & Bradstreet (D&B) and the first Chief Information Officer (CIO) at Langston University.
From 2002 to 2004, Preston served as the first Chief Executive Officer (CEO) & Managing Partner at GBC®. Incorporated in Delaware, USA; the firm operates in Kenya, Liberia, Uganda and the United States. He has successfully implemented sound, reliable, dynamic and robust IT systems integration and financial management solutions in North America, Asia Pacific (APAC), Latin America (LATAM), Europe, the Middle East and Africa (EMEA).
Mr. Williams is Chairman of the GBC® Board of Directors, a recipient of the IBM® Global Services Leadership Award, a member of the Global CIO Think Tank and a member of the Internet Evolution Executive Clan.
Skillmine CISO as service
This document describes Skillmine's CISO as-a-Service offering which provides information security services to help organizations comply with regulations and improve their security posture. The services include assessing an organization's security maturity and risks, implementing mitigation strategies and tools, monitoring the security program, and conducting audits. Skillmine's team of experienced security consultants help clients develop security strategies, integrate solutions, protect assets, and refine security programs on an ongoing basis.
Information Security Manager
This job posting is for a Manager of Information Security based in Westville or Jet Park. The role is responsible for establishing, developing, and monitoring security standards, procedures, and guidelines to protect corporate information systems from unauthorized access or disruption. Key responsibilities include managing an information security team, maintaining security and compliance metrics, overseeing security architecture documentation, and developing an enterprise-wide identity and access management framework. Qualified candidates should have 10+ years of IT experience including 7+ years in information security roles, along with leadership experience, strong communication skills, and information security certifications.
Technophile CEO's Revamping the Tech October 2020
Technophile CEO's revamping the tech October 2020; Insights Success has published latest magazine Technophile CEO's revamping the tech October 2020.
Technophile CEO's Revamping the Tech October 2020
Technophile CEO's revamping the tech October 2020; Insights Success has published latest magazine Technophile CEO's revamping the tech October 2020.
IT Governance: Governance & Management of Enterprise IT, 25 - 28 October 2015...
Information and related technology have become increasingly crucial in the sustainability, growth and management of value and risk in most enterprises. As a result, IT has moved from a support role to a central position within enterprises.
The enhanced role of IT for enterprise value creation and risk management has been accompanied by an increased emphasis on the Governance and Management of Enterprise IT (GEIT).
Enterprise stakeholders and the governing board wish to ensure that IT fulfills the goals of the enterprise. GEIT is an integral part of overall corporate governance.
GEIT addresses the definition and implementation of processes, structures and relational mechanisms within the enterprise that enable business and IT staff to
execute their responsibilities in support of creating or sustaining business value.
In this course you will learn and understand how to assess and evaluate an organization’s GEIT and make sure that IT is properly aligned with the business objectives.
COBIT 5 can help enterprises create optimal value from IT by maintaining a balance between realizing benefits, optimizing risk management and leveraging resources. The COBIT 5.0 addresses both business and IT functional areas and provides a governance, management and operational framework for enterprises of all sizes, whether commercial, not-for-profit or public sector.
Contact Kris at kris@360bsi.com to register.
Gill_Pat.2016.Resume.CISO.1
This individual has over 15 years of experience in senior cybersecurity roles, specializing in risk management. Some key accomplishments include establishing trusted relationships as a cybersecurity advisor for large government agencies and programs, leading implementation of the NIST Cybersecurity Framework, and reducing costs and risks through process improvements. The document provides details on recent roles advising organizations such as the Department of Defense, Department of Energy, and Department of the Treasury on enterprise-wide cybersecurity programs.
JDF Resume Rev June 2016
The document provides a summary of Julius D. Foronda's professional experience and qualifications. It details his 21 years of experience in IT management, project management, operations, and leadership roles. It also lists his areas of expertise, education, certifications, and employment history working for various technology and manufacturing companies.
IT Risk Management & Leadership 30 March - 02 April 2014 Dubai UAE
Are you effectively securing your organization’s IT systems that store, process, or transmit organizational information?
Is your IT risk management plan tailored to the specific risk profile of your business and being coordinated across all functional and business units?
With the release of IT Governance frameworks, requirements for risk management and new international standards entering the market, the pressure is mounting to ensure that all your IT risks are identified and the necessary action is taken – be this to mitigate them, accept or ignore them. So, how safe is your IT system? What are the risks that your organization is being exposed to?
The solution to this challenge is to establish an effective risk management process that protects the organization, not just its IT assets, and provides it with the ability to perform its mission.
Risk management is the process of identifying and assessing risk and taking preventive measures to reduce it to an acceptable level. It is critical that you develop an effective risk management program that assesses and mitigates risks within your IT systems and better manages these IT-related mission risks.
BENEFITS OF ATTENDING THIS WORKSHOP
Identify common IT project risks
Learn how to assess threats and vulnerabilities to create a risk response strategy
Understand what qualifies as risk with IT projects
Understand the most common IT risk sources
Qualify and quantify IT risks
Learn the difference between negative and positive IT risks
Develop an IT risk management plan
Plan risk response methods for IT risks
Create risk mitigation and contingency plans
Monitor and control project risks
Overcome resistance from stakeholders and team members
WHO SHOULD ATTEND THIS WORKSHOP
IT risk managers
IT security managers
Compliance officers
Program and project managers
IT project managers
IT operation manager
Contact Kris at kris@360bsi.com to register.
Certified IT Leader
This program is designed for IT professionals aiming to maximize productivity and creativity. It provides knowledge, skills, and tools for effective IT leadership. The objectives are to learn how to get employees working towards a common IT goal, assume leadership over people and processes, understand essential IT content for value creation, guide senior management, and communicate effectively. The program covers fundamentals of IT leadership, strategic leadership, leading through the information value chain, and executing leadership. It is for IT directors, managers, architects, planners, and project managers.
IT Governance & Leadership 17 - 20 November 2014 Dubai, UAE
Information and related technology have become increasingly crucial in the sustainability, growth and management of value and risk in most enterprises. As a result, IT has moved from a support role to a central position within enterprises.
The enhanced role of IT for enterprise value creation and risk management has been accompanied by an increased emphasis on the Governance and Management of Enterprise IT (GEIT).
Enterprise stakeholders and the governing board wish to ensure that IT fulfills the goals of the enterprise. GEIT is an integral part of overall corporate governance.
GEIT addresses the definition and implementation of processes, structures and relational mechanisms within the enterprise that enable business and IT staff to
execute their responsibilities in support of creating or sustaining business value.
In this course you will learn and understand how to assess and evaluate an organization’s GEIT and make sure that IT is properly aligned with the business objectives.
COBIT 5 can help enterprises create optimal value from IT by maintaining a balance between realizing benefits, optimizing risk management and leveraging resources. The COBIT 5.0 addresses both business and IT functional areas and provides a governance, management and operational framework for enterprises of all sizes, whether commercial, not-for-profit or public sector.
Contact Kris at kris@360bsi.com to register.
Information & Cyber Security Risk
This presentation was discussed in a Webinar with MetricStream in September 2016. It is applicable for small, medium and large businesses when considering information and cyber security risk.
Similar to Marc Crudgington Who I Am (20)
Build a Business-Driven IT Risk Management Program
Build a Business-Driven IT Risk Management Program
IT Risk Management & Leadership 23 - 26 June 2013 Dubai
IT Risk Management & Leadership 23 - 26 June 2013 Dubai
10 Visionary Leaders Shaping Digital Transformation In 2024 (1).pdf
10 Visionary Leaders Shaping Digital Transformation In 2024 (1).pdf
IT Governance: Governance & Management of Enterprise IT, 25 - 28 October 2015...
IT Governance: Governance & Management of Enterprise IT, 25 - 28 October 2015...
IT Risk Management & Leadership 30 March - 02 April 2014 Dubai UAE
IT Risk Management & Leadership 30 March - 02 April 2014 Dubai UAE
IT Governance & Leadership 17 - 20 November 2014 Dubai, UAE
IT Governance & Leadership 17 - 20 November 2014 Dubai, UAE
Recently uploaded
Building Production Ready Search Pipelines with Spark and Milvus
Spark is the widely used ETL tool for processing, indexing and ingesting data to serving stack for search. Milvus is the production-ready open-source vector database. In this talk we will show how to use Spark to process unstructured data to extract vector representations, and push the vectors to Milvus vector database for search serving.
Climate Impact of Software Testing at Nordic Testing Days
My slides at Nordic Testing Days 6.6.2024
Climate impact / sustainability of software testing discussed on the talk. ICT and testing must carry their part of global responsibility to help with the climat warming. We can minimize the carbon footprint but we can also have a carbon handprint, a positive impact on the climate. Quality characteristics can be added with sustainability, and then measured continuously. Test environments can be used less, and in smaller scale and on demand. Test techniques can be used in optimizing or minimizing number of tests. Test automation can be used to speed up testing.
Video Streaming: Then, Now, and in the Future
In his public lecture, Christian Timmerer provides insights into the fascinating history of video streaming, starting from its humble beginnings before YouTube to the groundbreaking technologies that now dominate platforms like Netflix and ORF ON. Timmerer also presents provocative contributions of his own that have significantly influenced the industry. He concludes by looking at future challenges and invites the audience to join in a discussion.
“I’m still / I’m still / Chaining from the Block”
“An Outlook of the Ongoing and Future Relationship between Blockchain Technologies and Process-aware Information Systems.” Invited talk at the joint workshop on Blockchain for Information Systems (BC4IS) and Blockchain for Trusted Data Sharing (B4TDS), co-located with with the 36th International Conference on Advanced Information Systems Engineering (CAiSE), 3 June 2024, Limassol, Cyprus.
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Are you ready to revolutionize how you handle data? Join us for a webinar where we’ll bring you up to speed with the latest advancements in Generative AI technology and discover how leveraging FME with tools from giants like Google Gemini, Amazon, and Microsoft OpenAI can supercharge your workflow efficiency.
During the hour, we’ll take you through:
Guest Speaker Segment with Hannah Barrington: Dive into the world of dynamic real estate marketing with Hannah, the Marketing Manager at Workspace Group. Hear firsthand how their team generates engaging descriptions for thousands of office units by integrating diverse data sources—from PDF floorplans to web pages—using FME transformers, like OpenAIVisionConnector and AnthropicVisionConnector. This use case will show you how GenAI can streamline content creation for marketing across the board.
Ollama Use Case: Learn how Scenario Specialist Dmitri Bagh has utilized Ollama within FME to input data, create custom models, and enhance security protocols. This segment will include demos to illustrate the full capabilities of FME in AI-driven processes.
Custom AI Models: Discover how to leverage FME to build personalized AI models using your data. Whether it’s populating a model with local data for added security or integrating public AI tools, find out how FME facilitates a versatile and secure approach to AI.
We’ll wrap up with a live Q&A session where you can engage with our experts on your specific use cases, and learn more about optimizing your data workflows with AI.
This webinar is ideal for professionals seeking to harness the power of AI within their data management systems while ensuring high levels of customization and security. Whether you're a novice or an expert, gain actionable insights and strategies to elevate your data processes. Join us to see how FME and AI can revolutionize how you work with data!
Ocean lotus Threat actors project by John Sitima 2024 (1).pptx
Ocean Lotus cyber threat actors represent a sophisticated, persistent, and politically motivated group that poses a significant risk to organizations and individuals in the Southeast Asian region. Their continuous evolution and adaptability underscore the need for robust cybersecurity measures and international cooperation to identify and mitigate the threats posed by such advanced persistent threat groups.
Taking AI to the Next Level in Manufacturing.pdf
Read Taking AI to the Next Level in Manufacturing to gain insights on AI adoption in the manufacturing industry, such as:
1. How quickly AI is being implemented in manufacturing.
2. Which barriers stand in the way of AI adoption.
3. How data quality and governance form the backbone of AI.
4. Organizational processes and structures that may inhibit effective AI adoption.
6. Ideas and approaches to help build your organization's AI strategy.
Cosa hanno in comune un mattoncino Lego e la backdoor XZ?
ABSTRACT: A prima vista, un mattoncino Lego e la backdoor XZ potrebbero avere in comune il fatto di essere entrambi blocchi di costruzione, o dipendenze di progetti creativi e software. La realtà è che un mattoncino Lego e il caso della backdoor XZ hanno molto di più di tutto ciò in comune.
Partecipate alla presentazione per immergervi in una storia di interoperabilità, standard e formati aperti, per poi discutere del ruolo importante che i contributori hanno in una comunità open source sostenibile.
BIO: Sostenitrice del software libero e dei formati standard e aperti. È stata un membro attivo dei progetti Fedora e openSUSE e ha co-fondato l'Associazione LibreItalia dove è stata coinvolta in diversi eventi, migrazioni e formazione relativi a LibreOffice. In precedenza ha lavorato a migrazioni e corsi di formazione su LibreOffice per diverse amministrazioni pubbliche e privati. Da gennaio 2020 lavora in SUSE come Software Release Engineer per Uyuni e SUSE Manager e quando non segue la sua passione per i computer e per Geeko coltiva la sua curiosità per l'astronomia (da cui deriva il suo nickname deneb_alpha).
Infrastructure Challenges in Scaling RAG with Custom AI models
Building Retrieval-Augmented Generation (RAG) systems with open-source and custom AI models is a complex task. This talk explores the challenges in productionizing RAG systems, including retrieval performance, response synthesis, and evaluation. We’ll discuss how to leverage open-source models like text embeddings, language models, and custom fine-tuned models to enhance RAG performance. Additionally, we’ll cover how BentoML can help orchestrate and scale these AI components efficiently, ensuring seamless deployment and management of RAG systems in the cloud.
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
Webinar Recording: https://www.panagenda.com/webinars/hcl-notes-und-domino-lizenzkostenreduzierung-in-der-welt-von-dlau/
DLAU und die Lizenzen nach dem CCB- und CCX-Modell sind für viele in der HCL-Community seit letztem Jahr ein heißes Thema. Als Notes- oder Domino-Kunde haben Sie vielleicht mit unerwartet hohen Benutzerzahlen und Lizenzgebühren zu kämpfen. Sie fragen sich vielleicht, wie diese neue Art der Lizenzierung funktioniert und welchen Nutzen sie Ihnen bringt. Vor allem wollen Sie sicherlich Ihr Budget einhalten und Kosten sparen, wo immer möglich. Das verstehen wir und wir möchten Ihnen dabei helfen!
Wir erklären Ihnen, wie Sie häufige Konfigurationsprobleme lösen können, die dazu führen können, dass mehr Benutzer gezählt werden als nötig, und wie Sie überflüssige oder ungenutzte Konten identifizieren und entfernen können, um Geld zu sparen. Es gibt auch einige Ansätze, die zu unnötigen Ausgaben führen können, z. B. wenn ein Personendokument anstelle eines Mail-Ins für geteilte Mailboxen verwendet wird. Wir zeigen Ihnen solche Fälle und deren Lösungen. Und natürlich erklären wir Ihnen das neue Lizenzmodell.
Nehmen Sie an diesem Webinar teil, bei dem HCL-Ambassador Marc Thomas und Gastredner Franz Walder Ihnen diese neue Welt näherbringen. Es vermittelt Ihnen die Tools und das Know-how, um den Überblick zu bewahren. Sie werden in der Lage sein, Ihre Kosten durch eine optimierte Domino-Konfiguration zu reduzieren und auch in Zukunft gering zu halten.
Diese Themen werden behandelt
- Reduzierung der Lizenzkosten durch Auffinden und Beheben von Fehlkonfigurationen und überflüssigen Konten
- Wie funktionieren CCB- und CCX-Lizenzen wirklich?
- Verstehen des DLAU-Tools und wie man es am besten nutzt
- Tipps für häufige Problembereiche, wie z. B. Team-Postfächer, Funktions-/Testbenutzer usw.
- Praxisbeispiele und Best Practices zum sofortigen Umsetzen
Presentation of the OECD Artificial Intelligence Review of Germany
Consult the full report at https://www.oecd.org/digital/oecd-artificial-intelligence-review-of-germany-609808d6-en.htm
20240607 QFM018 Elixir Reading List May 2024
Everything I found interesting about the Elixir programming ecosystem in May 2024
TrustArc Webinar - 2024 Global Privacy Survey
How does your privacy program stack up against your peers? What challenges are privacy teams tackling and prioritizing in 2024?
In the fifth annual Global Privacy Benchmarks Survey, we asked over 1,800 global privacy professionals and business executives to share their perspectives on the current state of privacy inside and outside of their organizations. This year’s report focused on emerging areas of importance for privacy and compliance professionals, including considerations and implications of Artificial Intelligence (AI) technologies, building brand trust, and different approaches for achieving higher privacy competence scores.
See how organizational priorities and strategic approaches to data security and privacy are evolving around the globe.
This webinar will review:
- The top 10 privacy insights from the fifth annual Global Privacy Benchmarks Survey
- The top challenges for privacy leaders, practitioners, and organizations in 2024
- Key themes to consider in developing and maintaining your privacy program
CAKE: Sharing Slices of Confidential Data on Blockchain
Presented at the CAiSE 2024 Forum, Intelligent Information Systems, June 6th, Limassol, Cyprus.
Synopsis: Cooperative information systems typically involve various entities in a collaborative process within a distributed environment. Blockchain technology offers a mechanism for automating such processes, even when only partial trust exists among participants. The data stored on the blockchain is replicated across all nodes in the network, ensuring accessibility to all participants. While this aspect facilitates traceability, integrity, and persistence, it poses challenges for adopting public blockchains in enterprise settings due to confidentiality issues. In this paper, we present a software tool named Control Access via Key Encryption (CAKE), designed to ensure data confidentiality in scenarios involving public blockchains. After outlining its core components and functionalities, we showcase the application of CAKE in the context of a real-world cyber-security project within the logistics domain.
Paper: https://doi.org/10.1007/978-3-031-61000-4_16
みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...
ここ3000字までしか入らないけどタイトルの方がたくさん文字入ると思います。
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Discover the seamless integration of RPA (Robotic Process Automation), COMPOSER, and APM with AWS IDP enhanced with Slack notifications. Explore how these technologies converge to streamline workflows, optimize performance, and ensure secure access, all while leveraging the power of AWS IDP and real-time communication via Slack notifications.
Full-RAG: A modern architecture for hyper-personalization
Mike Del Balso, CEO & Co-Founder at Tecton, presents "Full RAG," a novel approach to AI recommendation systems, aiming to push beyond the limitations of traditional models through a deep integration of contextual insights and real-time data, leveraging the Retrieval-Augmented Generation architecture. This talk will outline Full RAG's potential to significantly enhance personalization, address engineering challenges such as data management and model training, and introduce data enrichment with reranking as a key solution. Attendees will gain crucial insights into the importance of hyperpersonalization in AI, the capabilities of Full RAG for advanced personalization, and strategies for managing complex data integrations for deploying cutting-edge AI solutions.
Mind map of terminologies used in context of Generative AI
Mind map of common terms used in context of Generative AI.
Recently uploaded (20)
Building Production Ready Search Pipelines with Spark and Milvus
Building Production Ready Search Pipelines with Spark and Milvus
Climate Impact of Software Testing at Nordic Testing Days
Climate Impact of Software Testing at Nordic Testing Days
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Driving Business Innovation: Latest Generative AI Advancements & Success Story
Ocean lotus Threat actors project by John Sitima 2024 (1).pptx
Ocean lotus Threat actors project by John Sitima 2024 (1).pptx
Cosa hanno in comune un mattoncino Lego e la backdoor XZ?
Cosa hanno in comune un mattoncino Lego e la backdoor XZ?
Infrastructure Challenges in Scaling RAG with Custom AI models
Infrastructure Challenges in Scaling RAG with Custom AI models
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
Presentation of the OECD Artificial Intelligence Review of Germany
Presentation of the OECD Artificial Intelligence Review of Germany
CAKE: Sharing Slices of Confidential Data on Blockchain
CAKE: Sharing Slices of Confidential Data on Blockchain
みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...
みなさんこんにちはこれ何文字まで入るの？40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの？えこ...
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Full-RAG: A modern architecture for hyper-personalization
Full-RAG: A modern architecture for hyper-personalization
Mind map of terminologies used in context of Generative AI
Mind map of terminologies used in context of Generative AI
Marc Crudgington Who I Am
- 1. Information Technology Leader Transformative IT Leader with 15+ years experience advising C-level executives, partnering with business division, delivering solutions, creating IT value, influencing innovation.
- 4. The Woodlands, Texas, USA
- 6. Woodforest National Bank Vice President, Information Security Report to the CIO oversee the enterprise’s information security program which includes chairing the Information Security Committee, participating in IT Steering Committee meetings, reporting IS program initiatives to the Board, developing IS strategy, implementing new technologies, leading regulatory requirements (PCI, GLBA, Privacy), acting as liaison to Enterprise Risk, Internal Audit, and other business units, participating in government intel sharing programs, maintaining related policies, and other tasks.
- 14. Master of Business Administration 2008 Dean’s Leadership Circle member, elected 2008 EMBA Class Representative, Merage Student Association member, E2E mentor participant, received ISS Proxy Governance (BOD) Certification.
- 20. IT Governance / M & A activities Business Technology Portfolio / Lifecycle Management Risk Management Information Security IT Strategy and Implementation Core Competencies
- 22. Secret Clearance – Department of Homeland Security Security + - CompTIA C|CISO – Certified Chief Information Security Officer PMP Certification – Project Management Professional CRISC Certification – Certified in Risk and Information Systems Controls CSM Certification – Certified ScrumMaster TOGAF Certification – The Open Group Architecture Framework ITIL Foundation Certification - Information Technology Infrastructure Library ISS Certification - Institutional Shareholder Services Director Governance CISM Certification - Certified Information Security Manager (2006-2009) CISA Certification - Certified Information Systems Auditor (2005-2009)
- 26. “…Your wisdom and guidance moved the IT department where we need to be.” Lewie Wake, CTO, Advantage Sales and Marketing “He has transformed the IT departments and corporate business units opinions on governance, risk, and compliance. Marc has shown himself to be a leader…” Phil Ben-Joseph, National Technology Director, Advantage Sales and Marketing “…surpassed my expectations. I would recommend him as proactive in his approach and takes a leadership stance in all his tasks.” Jason James, Director of Technology Risk Management, Jefferson Wells “…stepped up from day one to serve our class... His willingness to be a leader demonstrates his talent in management and amongst his peers…contribution to the class has been significant and he will always be a contributor to any organizations he is part of.” Roy Kim, Principal, PacRim Engineering
- 28. LinkedIn technology MAKO Model CIO traits innovation program management beingaveteran entertainment best practices continuing education Steelers networking current events sports Internet marketing sustainability emerging business green IThealth knowledge Facebook product development NFL ocean Web2.0 travel thought leadership IT frameworks macroeconomics Cloud Computing family Mariners Church helping others golf music values leadership beingaleaderwinning diving teamwork agile success exercising goodeats Cancer research Twitter
- 29. Marc Crudgington Information Technology Leader Email: marccrudgington@yahoo.com LinkedIn: http://linkedin.com/in/marccrudgington Twitter: http://twitter.com/WoodlandsTXMarc