Patrick Coyle @Pjcoyle@social.cleverlibre.org
Joined Oct 2022
Review - HR 278 Introduced – Cyber Defense National Guard – Would require DNI to report on possible organization of CDNG – Identical to HR 119 of last session – Short version – https://tinyurl.com/mrxm5yxm #Legislation
HR 278 Introduced – Cyber Defense National Guard – Would require DNI to report on possible organization of CDNG – Identical to HR 119 of last session – https://tinyurl.com/awvkfu4t Subscription required #Legislation
GAO Reports – Cybersecurity – Week of 1-14-23 – A look at past GAO reports and which recommendations have yet to be implemented – https://tinyurl.com/a75snsua #GAO #Cybersecurity
CRS Reports – Cybersecurity – Week of 1-14-23 – CRS looks at forming a Bureau of Cyber Statistics in CISA – https://tinyurl.com/3uky947c #CRS #Cybersecurity
Review - Public ICS Disclosures – Week of 1-14-23 – 12 vendor disclosures from Campbell Scientific, Contec, HIMA, HP, Medtronic, and Wireshark (7) – 2 researcher reports for products from Mitsubishi and GE – Short version - https://tinyurl.com/mr2uawbh #icsSecurity
Public ICS Disclosures – Week of 1-14-23 – 12 vendor disclosures from Campbell Scientific, Contec, HIMA, HP, Medtronic, and Wireshark (7) – 2 researcher reports for products from Mitsubishi and GE - https://tinyurl.com/286vxm53 Subscription required #icsSecurity
CFSN Detailed Analysis - Substack Daily Update – 1-19-23 – Free Content – https://tinyurl.com/ye26peae
Waste Transfer Explosion – An explosion in Kentucky was a reaction in a waste transport vehicle between two different waste streams – https://tinyurl.com/4bcjsppf #ChemicalIncident #CSB
Short Takes – 1-19-23 – Good cholesterol – Vulnerability management – GOP players in 118th – Substation security rules - https://tinyurl.com/3c7ejvzj
Review - 1 Advisory Published – 1-19-23 – NCCIC-ICS control system security advisory for products from Hitachi Energy – Short version – https://tinyurl.com/2p9j4p7p #icsSecurity
1 Advisory Published – 1-19-23 – NCCIC-ICS control system security advisory for products from Hitachi Energy – A brief look-back at OpenSSL 3.0 – https://tinyurl.com/2a6sjxsk Subscription required #icsSecurity
CISA Updates CFATS 15th Anniversary Page – 1-18-23 – Three new videos added to the list - https://tinyurl.com/y24tpkc4 #CFATS
Review - HR 162 Introduced – Digital Reserve Corps – NDRC would be established in GSA – Identical language was offered as HR 4818 in 117th Congress – Short version - https://tinyurl.com/8ur5aerz #Legislation
HR 162 Introduced – Digital Reserve Corps – NDRC would be established in GSA – Identical language was offered as HR 4818 in 117th Congress – https://tinyurl.com/5dnjuazy #Legislation
CFSN Detailed Analysis - Substack Daily Update – 1-18-23 – Free Content – https://tinyurl.com/yc3t7627
Short Takes – 1-18-23 – Ionic cooling – New cybersecurity regulations – Jackson, MS water problems continue – https://tinyurl.com/ynuhears
Review - OCS Updates CFATS FAQ Response – 1-18-23 – FAQ response updated for inflation adjustment rule – Short version – https://tinyurl.com/44bmdhnz #CFATS
Patrick Coyle
boosted
I don't often just rant at the void much anymore, but here's one that really gets me...
The fact that you are a Big Company and Powerful will not save you from a cybersecurity incident.
The fact that you can put pressure on your cybersecurity contracting and consulting companies through $$$ does not change the fact that you might need their actual real life assistance someday.
I consistently see some very powerful, large companies contract buying contracts across the industry and using their weight and brand power to try to skip things like retainer on-boarding, critical document sharing, and preparatory exercises.
Oh. My. Sweet. And Fuzzy. Lord.
I understand that you are very busy. I understand that it is hard to get everybody on a call, and find the right documentation. I understand there are lawyers and bureaucracy that make it more difficult to share certain materials. I understand you're getting a retainer because your insurer or regulator says to.
This changes nothing. If you really need to call an incident response / digital forensics consultant (and you probably will), they're going to need that information and preparation. No amount of money in the world will be able magic away necessary prep work. No amount of money thrown at the compromise will make it go away without work - unless you intend to replace your entire domain and computer network (also a lot of work). Your insurer will not fix it. Your brand will not fix it.
The requirements your legitimate retainer company put forth exist for a reason. They are not to steal our money or retainer hours. They are to make sure that an entirely unrelated team to your operations and technology will be able to walk in during a crisis and meaningfully assist without days of ramp up time. We need context to be able to do that. Network maps. Response plans. System and facility access directions. Understanding of your organization and comms plan.
That can't be wished away with money. Anyone, absolutely anybody legitimate in DFIR on planet Earth will need that information. If we don't get it ahead of time, we will be getting it on expensive hour burn before we can actually start to put out a fire.
That's all I have to say about that.
OCS Updates CFATS FAQ Response – 1-18-23 – FAQ response updated for inflation adjustment rule – Down the Rabbit Hole look at policy changes that were not made – https://tinyurl.com/wf5hzw9t Subscription required #CFATS
CFSN Detailed Analysis - Substack Daily Update – 1-17-23 – Free Content – https://tinyurl.com/bdfwz2jd
Joined Oct 2022
