Profile

CommunityPlatform_1350x900.jpg

Paul Drake

Edit My Profile

My Content

1 to 10 of 10 total

RE: Google Client Side Encryption

Posted By Paul Drake 03-01-2024 10:28:53 AM
Found In Egroup: Google Workspace \ view thread
We use Virtru for CSE. It is the most user friendly of the solutions we surveyed a while back. The email solution works on mobile (with an app) and on the desktop with a browser extension. The Drive solution works on desktop. It is a great solution for compliance with a variety of regulations and extra ...

RE: How many Phish per year - Response

Posted By Paul Drake 10-17-2023 02:50:33 PM
Found In Egroup: Cybersecurity \ view thread
In the last twelve months we received about 2,000 reports. Our system de-duplicates reports of identical email senders in a short period of time. 28% of reported phishing is closed as false positive. Those don't usually take a lot of time (e.g. shein@usmail.shein.com). I'd bet that most phishing goes ...

RE: dmarc enforcement

Posted By Paul Drake 09-25-2023 10:11:49 AM
Found In Egroup: Google Workspace \ view thread
To build on what Paul shared: Many email systems detect your DMARC policy and change their behavior accordingly. If they see your domain is quarantining or rejecting, the representation on forwarding will change. A common behavior in email lists is to change the from to the email list. Other providers ...

IT Risk Analyst Associate - University of Notre Dame

Posted By Paul Drake 09-14-2023 09:52:00 AM
Found In Egroup: Cybersecurity and Privacy Governance, Risk, and Compliance \ view thread
We are looking for someone to join our team as a Risk Analyst Associate. This is a great way to move into a cybersecurity career. We're looking for someone whose curiosity can drive them to develop subject matter expertise about our IT threat landscape and security frameworks. Strong communication ...

IT Risk Analyst Associate - University of Notre Dame

Posted By Paul Drake 09-14-2023 09:50:00 AM
Found In Egroup: Diversity in IT \ view thread
We are looking for someone to join our team as a Risk Analyst Associate. This is a great way to move into a cybersecurity career. We're looking for someone whose curiosity can drive them to develop subject matter expertise about our IT threat landscape and security frameworks. Strong communication ...

Digital Identity via cbord

Posted By Paul Drake 04-12-2023 02:46:23 PM
Found In Egroup: Cybersecurity \ view thread
We are working through an implementation of cbord's digital identity solution for campus onecard. We're unused to smartphone wallet integrations and anticipate identity, availability, and security issues since we can't see or manage user phones and the credential grants access to buildings and wallets. ...

RE: PenTest - Red Team Recommendations

Posted By Paul Drake 11-15-2022 02:02:29 PM
Found In Egroup: Cybersecurity \ view thread
We recently had a great experience with Dragos, especially if you are looking to evaluate OT and IT/OT boundary Paul DrakeInformation Security & ComplianceUniversity of Notre Dame

RE: Figuring out what's triggering DLP rules

Posted By Paul Drake 09-29-2022 09:27:25 AM
Found In Egroup: Google Workspace \ view thread
Google offers this sandbox as a way to test DLP: https://cloud.google.com/dlp/demo/#!/ It does have the note that this does not represent a final product from Google but it has helped us troubleshoot false positives in the past Paul DrakeInformation Security & ComplianceUniversity of Notre Dame

RE: NIST CSF Additional Guidance

Posted By Paul Drake 07-05-2022 06:37:00 AM
Found In Egroup: Cybersecurity \ view thread
I'd also be interested in this content if anyone is willing to share. Paul DrakeInformation Security & ComplianceUniversity of Notre Dame

RE: Google SPAM \ Phishing - Modify Default Behavior

Posted By Paul Drake 11-24-2021 07:50:08 AM
Found In Egroup: Google Workspace \ view thread
Hi Dennis, We are also on fundamentals. We built a custom alert that emails our ticket system when a user reports phishing. That alert includes the reporting user's email in case we want to provide feedback. The analyst then goes to the Google alert center to grab the message ID and uses Google Vault ...