#2 - Practical uses of the Secure Controls Framework

Cybersecurity Growth  - livestream and podcastDuration: Weekly, 90 minutesTitle: Cybersecurity Growth #2 - Practical uses of the Secure Controls FrameworkOpeningWhen You Arrived instrumental as theme song Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders. I’m your host Shawn Valle, Exec Director and CISO of Cybersecurity GrowthFormer Chief Security Officer of Rapid7 and former CISO of TricentisMusician here on Twitch and elsewhere, MusicBySV (more on that later)Top News Storieshttps://www.rapid7.com/blog/post/2023/01/19/etr-cve-2022-47966-rapid7-observed-exploitation-of-critical-manageengine-vulnerability/?utm_campaign=sm-blog&utm_source=linkedin&utm_medium=organic-socialNew emergent threat response: "CVE-2022-47966: Rapid7 Observed Exploitation of Critical ManageEngine Vulnerability." Glenn Thorpe of Rapid7 “This has kept us busy over the past 24+ hours. If you’re running ManageEngine software you should: 1. Patch it always no questions asked just do it.2a. Keep it as segmented as possible from the public internet regardless of its function. 2b. Migrate away from it.”Dozens of products impacted. Access Manager Plus*Active Directory 360**ADAudit Plus**ADManager Plus**ADSelfService Plus**Analytics Plus*Application Control Plus*Asset Explorer**Browser Security Plus*Device Control Plus*Endpoint Central*Endpoint Central MSP*Endpoint DLP*Key Manager Plus*OS Deployer*PAM 360*Password Manager Pro*Patch Manager Plus*Remote Access Plus*Remote Monitoring and Management (RMM)*ServiceDesk Plus**ServiceDesk Plus MSP**SupportCenter Plus**Vulnerability Manager Plus*https://www.csoonline.com/article/3684850/11-top-xdr-tools-and-how-to-evaluate-them.htmlBy Tim Ferrill CSO Online11 top XDR tools and how to evaluate themExtended detection and response tools provide a deeper and more automated means to identify and respond to threats. These are some of the most popular options.XDR is a relatively new class of security tool that combines and builds on the strongest elements of security incident and event management (SIEM), endpoint detection and response (EDR), and even security orchestration and response (SOAR).Trend Micro, Microsoft XDR, Palo Alto Networks Cortex XDR, Crowdstrike Falcon Insight XDR, Bitdefender GravityZone Business Security Enterprise, SentinelOne Singularity XDR,Cybereason XDR, VMware Carbon Black XDR,Elastic Security for XDR,Trellix XDR Platform,Cynet 360...