Profile

Happy Friday, Bing! We are leveraging the CIS RAM to support our risk assessment activities. We are able to define an appropriate scope for GLBA Safeguards Rule requirements and then conduct the assessment activities effectively. In scoping and reporting, I also incorporate the CIS Community Defense ...

Michael - Happy to share and collaborate whenever time permits! Ah, yes, that is better framing for me. That is something we have used, but not beyond an insight during our review. For example, if you have the Microsoft A5 Security or A5 full license, under Defender for Cloud is an app discovery ...

Morning, Michael. I am going to focus my response on LMS first and then a summary statement on other cases of apps/"plugins" at the end. We approach LTIs and similar just like any other software/service with a third party handling data. Due diligence information collection (data that will be shared, ...

Wessam, Here are few quick suggestions to start with: Do not grant local admin on primary user accounts. Create and require the use of secondary accounts when privileged access is necessary. For end users with a need and secondary account, only grant local admin for that account on the asset ...

Cliff, I recommend emailing HECVAT@educause.edu with your feedback. They list that contact information on their about page for the tool: https://library.educause.edu/resources/2020/4/higher-education-community-vendor-assessment-toolkit As for your suggestion, it looks like the HECVAT group partnered ...

Illinois State University is hiring a Deputy CISO! Position Highlights Availability of onsite, hybrid, or 100% remote (hybrid/remote work must be done within the State of Illinois). Manages the staff and operations of the Information Security Office. Reports to the CISO and works with ...